Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft
File:                     1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft (raw, json)
Hash identifier:          BGZyK6ZKg/Urx+E7RShf3E6yMFqV5Sq9cv7UgvZ+Sos=
Subject key identifier:   7F:BD:1E:13:2B:12:98:FF:B9:32:7C:7C:90:9B:7B:BC:D0:00:A2:F9
Authority key identifier: F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
Certificate issuer:       /CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Certificate serial:       018AFE6CEF0DD7970B28FF065510CD17F39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft
Manifest number:          0893
Signing time:             Thu 05 Oct 2023 06:01:06 +0000
Manifest this update:     Thu 05 Oct 2023 06:01:06 +0000
Manifest next update:     Fri 06 Oct 2023 06:01:06 +0000
Files and hashes:         1: 1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl (hash: whdI6pDt4wb7GPThz3G/ka22Z6iCEzVEOJAHufDaHvY=)
                          2: EaC4w7SjRT-3au0_QnGLqlCKszo.roa (hash: fPjOMus2XAE3qnK7CnlFfIRQBwXhNtp4aLqajIylcjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:6c:ef:0d:d7:97:0b:28:ff:06:55:10:cd:17:f3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
        Validity
            Not Before: Oct  5 06:01:06 2023 GMT
            Not After : Oct  6 06:01:06 2023 GMT
        Subject: CN=7fbd1e132b1298ffb9327c7c909b7bbcd000a2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:90:bf:ae:87:86:cc:de:35:1a:a7:3b:38:
                    e5:e8:a8:ac:d3:82:73:7a:73:46:07:b9:d7:73:e6:
                    67:ad:cc:48:45:af:18:7f:cd:ab:b3:a4:ac:49:f9:
                    1e:71:aa:d6:86:48:6a:31:fe:c9:62:65:0c:bb:c0:
                    28:81:80:be:84:7c:79:6b:72:cd:fd:d1:9f:6b:fe:
                    62:c9:ad:44:4e:1f:25:d4:76:96:37:48:cc:83:09:
                    13:3e:ab:31:9a:31:1a:12:f9:e2:79:19:95:75:48:
                    ce:c3:0c:80:85:d0:6f:90:3d:f3:ac:79:10:f8:aa:
                    bc:f1:93:0b:74:15:02:e8:6c:93:3f:2b:8d:a4:1d:
                    53:39:4f:83:2f:38:7c:00:4a:f5:66:04:d7:75:f3:
                    f9:91:24:96:ff:cd:85:66:36:1b:2a:af:2b:66:d8:
                    76:eb:3d:9c:9f:ad:50:72:63:d6:32:db:52:2d:4c:
                    65:12:99:3e:b4:8a:e7:e9:d1:1f:18:de:db:fe:b3:
                    0c:7a:d6:ea:e8:12:7a:54:b3:f8:33:18:ed:0c:f6:
                    99:c1:fd:f7:1b:98:8c:4e:90:72:0d:11:1a:5f:a8:
                    a9:a8:b0:9e:4e:11:eb:55:56:d0:d2:ab:f7:72:40:
                    e4:a7:0f:6c:65:71:cf:bc:7f:16:db:1a:26:2a:90:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BD:1E:13:2B:12:98:FF:B9:32:7C:7C:90:9B:7B:BC:D0:00:A2:F9
            X509v3 Authority Key Identifier:
                keyid:F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:96:31:7e:b8:06:a7:dd:0d:89:97:13:60:15:60:35:9f:db:
         1e:7b:5f:8c:3a:ea:39:ca:fc:37:50:9e:7d:53:60:33:41:b8:
         57:5d:10:40:1a:21:6a:60:9b:48:a3:00:64:15:19:52:2c:55:
         c3:6b:53:ce:78:73:fe:d1:9e:0e:82:d1:01:00:1c:46:ef:3a:
         1f:01:d5:d6:33:cf:f3:6b:aa:25:25:f5:de:d5:4a:a2:2e:fb:
         e2:0a:9a:3d:64:50:f2:22:f4:4d:4b:aa:e2:cd:c7:11:c4:f6:
         0a:55:f0:81:27:e7:14:de:4c:ef:df:78:45:1f:dc:25:55:27:
         b2:8c:43:15:22:c4:9d:da:84:13:dd:ba:01:5c:7c:2c:bf:6a:
         e8:37:55:19:03:40:8b:0d:39:7b:6e:c8:66:9d:03:4d:56:8b:
         8a:ae:4c:36:98:54:f4:da:1b:9e:f3:c6:02:25:f7:36:1f:14:
         f6:1c:40:6d:26:7e:5f:c3:e1:87:bd:84:45:c3:15:c5:06:51:
         45:65:15:a1:58:64:8a:4f:e8:c5:03:62:6c:82:f8:54:fc:fd:
         e8:4b:d9:95:63:fa:95:f8:63:8a:ad:15:8f:30:a3:e7:70:01:
         ba:23:52:ac:27:1b:ba:7f:4b:75:bf:66:59:2c:af:03:2e:f0:
         5e:94:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----