Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.mft
File:                     1-LbOGBArNqym9-l1B8Zc3N0a7qU.mft (raw, json)
Hash identifier:          shUWPuTG7/gxUTqxWWS2rNKTUHB6hg0JpnmHBNUXLKY=
Subject key identifier:   E3:86:04:43:A3:A6:66:70:7A:20:5A:04:C9:10:FE:1D:3D:FE:60:BA
Authority key identifier: F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
Certificate issuer:       /CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Certificate serial:       018BFFEA541FC626B675F31BD69AB8ED38A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.mft
Manifest number:          08D0
Signing time:             Fri 24 Nov 2023 06:00:28 +0000
Manifest this update:     Fri 24 Nov 2023 06:00:28 +0000
Manifest next update:     Sat 25 Nov 2023 06:00:28 +0000
Files and hashes:         1: 1-LbOGBArNqym9-l1B8Zc3N0a7qU.crl (hash: 6DXzh7WxKWQhJNhFOc7Gx6y0sKJwNA1/WDqIVOmKbWg=)
                          2: k9EfRr8yA8o2WsBoBS74PMQ0CvI.roa (hash: m/wXdsdA+uzHA6RvPirys9/ejR7zx8rDmEdpykc6Ng4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:ea:54:1f:c6:26:b6:75:f3:1b:d6:9a:b8:ed:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
        Validity
            Not Before: Nov 24 06:00:28 2023 GMT
            Not After : Nov 25 06:00:28 2023 GMT
        Subject: CN=e3860443a3a666707a205a04c910fe1d3dfe60ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:98:10:14:c6:7f:9c:71:3a:42:81:9c:7e:
                    eb:17:e0:cd:00:4e:ae:d0:e2:b8:f3:fc:96:1a:68:
                    9d:7e:4e:95:34:eb:e7:63:e0:9f:95:aa:0d:f5:dc:
                    76:54:c4:d8:89:95:98:81:9d:ba:7d:86:dc:72:bc:
                    a7:5e:db:2e:ef:5b:02:60:cd:b4:f4:0c:77:34:35:
                    3e:a5:8e:23:55:8e:fd:1f:8b:d9:ac:48:c2:1f:88:
                    79:c7:c4:36:74:6e:48:f3:0e:0c:57:95:bf:ba:ca:
                    9e:cd:49:a3:ce:6a:bd:46:7e:bd:98:6e:a9:12:64:
                    db:02:16:94:b8:80:19:cd:89:47:8d:3c:c8:06:48:
                    85:67:43:e7:c7:2e:76:98:a7:2e:f0:dd:14:66:69:
                    cb:3e:e0:fd:a2:6b:4c:41:f2:61:80:02:e8:67:1f:
                    95:34:26:56:50:b4:a0:ea:4f:b2:00:25:a6:49:2f:
                    3a:85:9c:38:f5:fc:ac:90:5d:f2:5b:df:ae:19:75:
                    45:a5:89:2e:de:a0:e1:ec:e1:4d:97:22:ae:a5:1c:
                    a4:7a:ec:7f:f6:6b:c7:d8:6b:73:9d:1e:e2:e2:d9:
                    30:d7:c8:76:d1:dd:ef:dc:6d:fe:d7:88:2f:5b:aa:
                    41:ff:eb:3a:49:8c:bd:39:fe:f9:6e:df:ab:8b:31:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:04:43:A3:A6:66:70:7A:20:5A:04:C9:10:FE:1D:3D:FE:60:BA
            X509v3 Authority Key Identifier:
                keyid:F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c6:8e:4b:50:51:56:c3:9d:6a:70:5c:3a:e8:a5:75:0a:14:
         93:14:57:f4:f9:48:ab:b3:62:2c:df:71:cf:ca:e2:1a:2d:65:
         86:5b:51:a9:f3:48:85:4e:02:e6:68:e4:98:7c:30:8d:25:f4:
         2c:24:da:07:db:e4:dd:e6:08:97:30:07:a4:c2:66:be:cf:31:
         93:0a:df:a2:21:cd:f9:5d:f9:7b:4f:54:c6:04:99:a4:dd:fa:
         da:cc:f2:68:a8:1e:c8:a4:f3:cd:93:36:bb:76:da:b4:32:89:
         7f:c6:6b:b6:0d:fb:ac:63:6d:3d:94:18:2f:b6:5a:45:0b:fc:
         24:a6:eb:da:26:95:32:1e:62:fd:55:2c:93:db:f2:fc:be:da:
         2d:8c:50:3f:b5:e2:c5:73:ac:a4:1b:60:3c:41:42:50:b6:77:
         33:0a:39:06:a1:f7:ef:f4:a4:54:fa:9a:b7:1f:13:a7:24:7f:
         15:f0:eb:7c:11:2d:a5:3c:a3:fe:33:a3:1c:4c:85:f3:88:7e:
         6d:43:ef:b5:d5:f9:72:38:3f:ab:a3:17:f4:0c:35:a1:4d:26:
         ee:c3:c1:a1:b9:df:41:61:d7:28:d4:14:5c:0b:03:2f:02:07:
         eb:01:6c:21:cc:bd:3f:39:d3:13:41:07:25:bb:b9:2b:ec:88:
         87:2e:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----