Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.mft
File:                     KBWXVYQ3xYGF1ML-cbnVJ3nYANY.mft (raw, json)
Hash identifier:          V4zWct6s0R9sHzS0uknFNQGCg0YsLU9lOVrC41Lj1cw=
Subject key identifier:   31:FB:E2:4C:82:33:2C:83:AB:8D:FF:30:43:2E:44:F5:E5:39:19:1E
Authority key identifier: 28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
Certificate issuer:       /CN=281597558437c58185d4c2fe71b9d52779d800d6
Certificate serial:       018BEAAC5195649E7DC63C4772223EC5120F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.mft
Manifest number:          0857
Signing time:             Mon 20 Nov 2023 03:00:43 +0000
Manifest this update:     Mon 20 Nov 2023 03:00:43 +0000
Manifest next update:     Tue 21 Nov 2023 03:00:43 +0000
Files and hashes:         1: 1-f_hhmIgbf1IxpiA1oObjqeC8tw.roa (hash: sKRT0GnYd+CCVlfe5qJKZHlDwBJE8mHm16LOACB5T+A=)
                          2: KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl (hash: nG3mY/NyXt8NF/vIi+wmBXntTQ5BI8PqBfSNGiEPYro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:51:95:64:9e:7d:c6:3c:47:72:22:3e:c5:12:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281597558437c58185d4c2fe71b9d52779d800d6
        Validity
            Not Before: Nov 20 03:00:43 2023 GMT
            Not After : Nov 21 03:00:43 2023 GMT
        Subject: CN=31fbe24c82332c83ab8dff30432e44f5e539191e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:66:a6:8d:66:b5:92:d2:76:e4:df:aa:2e:
                    f3:78:1e:ca:f9:8a:29:5d:db:b1:83:01:81:14:63:
                    bc:27:ba:73:e6:2d:61:bb:e4:ad:f2:ac:10:ea:1e:
                    d2:f6:74:30:d6:af:7d:a2:2e:4d:16:23:20:c7:54:
                    cb:d8:fe:cc:ba:66:59:0a:fb:7a:18:1e:05:b1:96:
                    81:a9:45:99:8e:ef:ed:9b:b7:46:fc:07:f7:be:3d:
                    02:64:7b:08:f4:48:01:5a:a9:c6:ad:2b:bc:e2:0e:
                    1c:d2:81:57:21:c6:1e:ff:73:49:16:98:56:98:de:
                    4c:ea:53:3f:ff:06:18:45:0f:6e:e8:cc:11:56:ff:
                    a7:6e:5b:99:b1:cd:64:55:8a:7e:0d:88:ba:79:ac:
                    1e:d6:fa:3d:41:42:bf:8d:d9:4f:4d:68:a0:4f:ae:
                    a0:39:9a:85:4c:d6:93:8c:d5:c0:92:01:da:f8:a9:
                    a5:fa:73:c8:4e:15:e0:81:5a:d7:58:5f:e9:27:b4:
                    31:c5:73:e6:f0:c2:36:27:91:28:11:8e:9a:ff:b9:
                    de:f3:18:b3:37:19:13:c1:c0:8c:2c:58:fe:68:fb:
                    e9:ec:42:0d:4a:b1:af:90:06:14:ec:b5:48:f7:41:
                    2f:fe:93:83:34:72:65:44:6c:66:0b:2b:c5:47:af:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FB:E2:4C:82:33:2C:83:AB:8D:FF:30:43:2E:44:F5:E5:39:19:1E
            X509v3 Authority Key Identifier:
                keyid:28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:35:f5:6f:3f:cc:e5:92:80:f3:5a:32:bb:d7:24:94:89:
         2b:52:df:ff:15:75:67:d8:19:a9:89:f1:63:1e:54:cf:4b:3e:
         9a:a4:86:fb:b9:a2:d4:d6:e5:42:e2:0f:f9:fb:b9:7a:e6:c8:
         38:e2:e1:9a:63:06:d3:5c:0b:19:88:25:b0:47:4c:e7:ef:f4:
         09:c2:3d:00:20:53:07:d5:08:5e:50:1d:42:15:c9:68:6f:a4:
         17:5b:c6:46:53:6e:b6:92:45:68:a0:bb:60:94:e2:fa:1d:c0:
         c8:2f:c6:f5:cb:5e:dd:99:e0:78:03:89:0c:27:55:2e:6d:c6:
         ef:58:75:a5:0f:eb:b4:53:9d:29:f5:32:4c:0e:86:6b:4e:d0:
         32:3d:66:47:b4:5d:36:00:6e:74:7e:6c:7d:54:40:9d:79:7d:
         7b:31:6b:17:9f:29:4e:f2:7b:ed:7a:ae:5f:b1:4e:14:1c:71:
         36:75:dc:7b:ae:e3:97:89:37:c8:7e:3f:bb:7c:86:0f:3f:89:
         18:37:eb:53:95:47:d1:ee:ba:72:b6:6e:19:78:a8:ec:7a:a4:
         a6:21:52:02:ea:14:e7:5d:07:44:9e:2c:be:1f:0e:12:41:0d:
         b7:c1:e0:5b:67:c8:35:6d:ae:69:65:7f:d6:05:73:88:5b:0d:
         e2:37:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----