Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.mft
File:                     p_Ggr1p-kgd846KYjXl20fXHSxk.mft (raw, json)
Hash identifier:          0hvfWMGykD4ejSjxUQNAOXU7VRWGcWZrYF/Re3KoQh0=
Subject key identifier:   00:0B:D9:66:15:F7:F7:73:B6:9D:2F:18:A0:3B:09:FD:B2:12:73:3B
Authority key identifier: A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
Certificate issuer:       /CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Certificate serial:       0189FCDC3534D79C7486F35484097356F64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.mft
Manifest number:          0847
Signing time:             Wed 16 Aug 2023 05:40:36 +0000
Manifest this update:     Wed 16 Aug 2023 05:40:36 +0000
Manifest next update:     Thu 17 Aug 2023 05:40:36 +0000
Files and hashes:         1: DmhMdOASUYrJ_jTlA5FZQ3Un02o.roa (hash: JAQinfYRFx+OIbS2IdD4Uch5ywD8HcH2k2PzHBRWZmw=)
                          2: TMfBLIROBBxGD9I3u0rL_CUaa3I.roa (hash: jbMAWibkOsBdnR+HHc6UTKnMxIZ9WhATod0xUhujTao=)
                          3: p_Ggr1p-kgd846KYjXl20fXHSxk.crl (hash: PgRD9Pit5CHlfHBmwNbLqlnWrFyCJHxe5cwvowUbsWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:dc:35:34:d7:9c:74:86:f3:54:84:09:73:56:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
        Validity
            Not Before: Aug 16 05:40:36 2023 GMT
            Not After : Aug 17 05:40:36 2023 GMT
        Subject: CN=000bd96615f7f773b69d2f18a03b09fdb212733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4e:20:4e:71:4f:95:f7:a8:a7:6c:22:5c:d7:
                    6a:63:b1:2d:e3:fc:e3:88:1a:b5:b1:a7:cc:27:6d:
                    ab:21:32:af:10:ce:35:05:77:45:d4:49:06:55:ab:
                    35:bc:cd:be:f7:71:bc:29:47:48:12:4e:3e:c2:3e:
                    ad:c9:cd:b3:ff:2c:3d:56:24:94:b7:14:82:20:cb:
                    8c:41:1a:67:d1:d1:e6:43:19:87:5d:bb:ec:ce:d3:
                    f1:cd:fe:c0:0a:a9:e7:7a:0b:08:f1:ef:f0:f2:92:
                    d5:c1:d8:fe:94:d8:01:3e:52:b9:64:27:08:df:05:
                    2b:b4:b2:c8:2f:de:6b:12:28:8e:58:70:a2:1f:60:
                    4a:cb:d7:b5:cd:55:b8:b2:10:a4:77:67:f7:1d:c0:
                    15:d8:44:b4:b5:59:ad:0c:56:19:a4:e0:d8:d7:d5:
                    f7:fa:61:20:7b:ed:2b:f1:98:aa:43:f3:d7:9a:b7:
                    09:15:4f:8f:88:a7:d0:8f:49:08:ef:f2:62:fa:b1:
                    d3:c0:b3:b5:14:cc:89:51:dc:9d:b0:16:7b:6b:37:
                    3b:4f:1e:6c:6c:24:09:3d:04:60:22:40:c7:4b:bf:
                    80:68:30:b7:02:79:48:13:a4:9c:06:3a:62:a4:de:
                    45:f8:b7:2a:31:7a:1b:04:12:46:a3:27:18:fa:eb:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:D9:66:15:F7:F7:73:B6:9D:2F:18:A0:3B:09:FD:B2:12:73:3B
            X509v3 Authority Key Identifier:
                keyid:A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:27:51:38:d4:71:b6:6f:cf:78:d8:d5:2e:34:e3:1d:1c:d0:
         95:7f:09:52:c1:fa:d9:e0:d3:36:22:30:e2:a7:3d:61:05:8f:
         0e:22:a4:b2:59:9b:d3:37:28:dc:4b:59:ed:6c:f6:5f:5e:cc:
         2a:7d:be:52:a1:05:83:5b:05:37:24:d3:3d:93:f6:c0:f9:ea:
         d5:9a:a7:e1:7e:66:a8:9e:e7:10:6d:7f:89:79:b9:24:1c:a3:
         13:eb:ef:1d:b5:30:0d:2f:a3:f4:ca:17:cd:5a:c5:98:9a:3c:
         fd:75:b2:bb:c9:85:59:d1:f6:54:1e:e0:b8:58:db:26:e4:e8:
         f3:fd:bc:06:c7:48:0b:d8:f1:5d:7c:3f:1d:dc:07:30:29:56:
         ac:6b:f5:a9:ed:15:30:43:14:a2:cc:6a:c3:f2:c5:f2:f9:c8:
         2d:bd:9e:26:c5:eb:33:78:c0:98:42:76:cb:28:03:6a:9c:60:
         a5:35:45:2a:26:06:28:20:3b:7c:b6:10:c9:3d:20:fb:29:62:
         e2:69:97:76:86:e5:17:09:fe:79:97:c0:70:51:fe:e0:35:80:
         53:cd:60:32:f7:ca:44:ce:e8:0e:68:cb:f5:74:dc:0f:e2:b7:
         d5:85:79:5c:ad:e6:d6:ec:20:0a:34:cc:fc:ad:20:9d:22:0a:
         d6:3b:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----