Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.mft
File:                     u9qaNcyylkSOi1ZWhhMUraUltmY.mft (raw, json)
Hash identifier:          +ci0/YD43yEd7jhidCxAHQZfJbv6IOr4Rk1rCgF+ldI=
Subject key identifier:   A3:95:D9:69:DE:7E:93:87:27:77:EF:09:53:45:61:84:4E:77:15:6B
Authority key identifier: BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
Certificate issuer:       /CN=bbda9a35ccb296448e8b5656861314ada525b666
Certificate serial:       018B93C541071D3A52F9156897A5FA2C0DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.mft
Manifest number:          0897
Signing time:             Fri 03 Nov 2023 06:00:59 +0000
Manifest this update:     Fri 03 Nov 2023 06:00:59 +0000
Manifest next update:     Sat 04 Nov 2023 06:00:59 +0000
Files and hashes:         1: k9sEA47uTrj9hw_4OxnpwYc_GWY.roa (hash: zfq2jOOpevvfXbbubeiDml4tzRoNV+s2r+lXVVcv0Q0=)
                          2: u9qaNcyylkSOi1ZWhhMUraUltmY.crl (hash: f6qH3vPN/HaOVxzBpGwifKwpKmPzEnQlQqRDF789KXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c5:41:07:1d:3a:52:f9:15:68:97:a5:fa:2c:0d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbda9a35ccb296448e8b5656861314ada525b666
        Validity
            Not Before: Nov  3 06:00:59 2023 GMT
            Not After : Nov  4 06:00:59 2023 GMT
        Subject: CN=a395d969de7e93872777ef09534561844e77156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:ac:bf:48:5b:26:71:f3:e9:ce:54:ac:6a:
                    a4:14:a1:9f:39:31:c0:c1:94:1b:1a:fb:cc:04:fe:
                    3e:09:9f:42:6e:48:da:25:a6:32:51:c6:40:d0:1f:
                    62:28:0d:4b:87:dc:82:3e:92:6a:10:4c:02:99:39:
                    a4:8a:05:fd:f5:b0:f2:42:27:ec:bc:8a:11:c3:27:
                    2a:81:70:92:b5:97:81:31:63:97:c5:90:6d:3d:98:
                    ba:df:c5:97:8f:95:eb:eb:e5:a1:e1:7e:c5:30:2a:
                    3b:a4:4f:ba:f4:26:df:d1:9c:e9:a2:da:2a:38:9c:
                    fc:a9:6a:ff:0a:2c:56:90:5b:f1:9e:67:37:3f:d9:
                    b2:61:fc:95:6a:3e:fa:2f:78:59:79:c1:66:db:49:
                    b6:7e:28:cf:e2:de:ec:80:3e:ba:4c:85:05:3e:2b:
                    17:fb:89:be:79:1e:d0:9a:c7:a4:88:c0:31:e5:c4:
                    d9:85:8d:16:1c:1b:d3:ac:49:98:4b:b9:23:79:76:
                    b9:68:54:e8:25:af:f3:6b:61:f5:d6:f6:f9:38:6e:
                    75:fd:4a:31:82:78:3d:2e:f2:26:63:29:4d:c1:61:
                    b0:ad:ab:78:a5:ab:24:6a:c6:f4:74:a7:8c:14:43:
                    19:ce:01:b2:3d:98:b9:a5:d2:b8:ff:05:47:08:d4:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:95:D9:69:DE:7E:93:87:27:77:EF:09:53:45:61:84:4E:77:15:6B
            X509v3 Authority Key Identifier:
                keyid:BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:c4:78:73:8d:69:fe:ba:8d:9d:9d:8b:8c:ff:92:a1:3a:
         a9:ff:a6:e5:90:b8:93:13:f8:91:c9:18:b4:52:97:22:9a:bf:
         e7:fe:01:c3:94:60:2a:26:46:48:41:97:22:c8:37:ef:49:19:
         39:f7:23:bb:07:b8:4c:d7:d2:98:d7:80:b1:b8:88:69:d8:ea:
         45:54:5a:69:03:37:c2:6f:50:6c:32:81:e5:7b:f0:95:00:bc:
         72:73:44:f3:c2:ad:61:a9:46:dc:42:11:2e:89:de:cb:b5:0f:
         a5:fa:71:45:49:92:a5:2d:78:38:6e:fe:06:aa:0d:0d:10:63:
         6f:7f:d3:a8:50:8c:41:fa:40:cf:a5:e6:ad:85:b6:62:cd:82:
         41:7c:76:09:7b:d7:49:0c:b2:34:8f:5b:a4:31:94:14:50:f7:
         c8:ea:fc:2b:54:38:c4:d5:af:18:a1:09:1b:ff:59:f7:e4:ac:
         b7:49:95:34:8a:85:29:5f:f2:fa:db:47:48:b4:f7:a7:cf:69:
         a4:ed:80:52:ad:1d:3f:51:0f:99:67:e7:81:ef:21:db:63:0e:
         ed:a9:b0:09:2f:54:b8:5e:77:87:c1:83:71:97:68:6c:f2:85:
         10:90:f1:43:c3:0a:5d:55:44:1c:01:9c:1f:de:fd:74:41:fb:
         90:16:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----