Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft
File:                     jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft (raw, json)
Hash identifier:          wjSCG5FKMZrK0id7vI4e165PhykkxOw9tkKWUPAvzVA=
Subject key identifier:   9D:48:38:DF:F1:DD:F7:6C:59:F9:21:21:98:E0:9E:00:45:72:0C:34
Authority key identifier: 8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
Certificate issuer:       /CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Certificate serial:       018BEBBF56511513618A8F50489D4C56F430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft
Manifest number:          0857
Signing time:             Mon 20 Nov 2023 08:01:07 +0000
Manifest this update:     Mon 20 Nov 2023 08:01:07 +0000
Manifest next update:     Tue 21 Nov 2023 08:01:07 +0000
Files and hashes:         1: 82vzer1BnM5eo_BHedG_898GP6s.roa (hash: Mj3gWPNbnB2gLH56iUoCem7GjP97EeXHPumF0JWWVLE=)
                          2: jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl (hash: OBPnJiBu+1BVRci1DW1+QB/FKxSTa0vq+Xfj9vBX5nY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:bf:56:51:15:13:61:8a:8f:50:48:9d:4c:56:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
        Validity
            Not Before: Nov 20 08:01:07 2023 GMT
            Not After : Nov 21 08:01:07 2023 GMT
        Subject: CN=9d4838dff1ddf76c59f9212198e09e0045720c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:49:74:59:a4:92:fe:d9:1e:63:43:b8:e7:
                    45:b5:c4:26:73:13:99:90:8c:b6:bc:af:52:d1:76:
                    df:cf:23:ea:a4:de:58:84:56:52:61:9f:13:f7:46:
                    86:48:bb:8b:94:6e:4b:8b:fb:3b:08:14:d4:0d:43:
                    19:b4:fa:d2:d9:da:94:bf:2e:51:4f:ef:a9:29:31:
                    3e:d0:62:e0:b4:53:3e:60:c5:0c:35:ae:ca:37:8b:
                    5f:54:59:29:35:f4:f2:39:13:71:e3:10:c9:2f:7c:
                    32:5f:a2:11:81:73:87:14:02:32:2b:4d:52:9b:77:
                    3e:e4:ad:fd:b1:1a:d0:97:5f:1b:98:cb:1a:d8:5c:
                    2f:b9:75:7e:66:d1:32:4f:c3:e6:5e:14:85:7d:96:
                    9b:37:44:73:61:89:5a:3b:05:52:0d:f6:68:80:9a:
                    0f:e8:61:d3:c6:19:cd:25:f6:23:d7:bb:73:fe:80:
                    7e:8b:8a:a4:66:c4:db:fb:2e:e4:29:a9:db:4c:10:
                    60:0f:26:74:e5:7d:45:3f:f6:35:ce:41:17:c7:cc:
                    87:7b:d6:49:e9:40:38:e1:4e:22:ce:50:f6:27:ac:
                    bc:a7:14:a8:0a:ed:d5:12:dd:6d:ae:9c:fb:a5:99:
                    c9:41:57:14:2b:02:ab:4a:ee:35:c1:36:89:dd:c8:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:38:DF:F1:DD:F7:6C:59:F9:21:21:98:E0:9E:00:45:72:0C:34
            X509v3 Authority Key Identifier:
                keyid:8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:b1:b5:a2:ae:23:1b:10:0c:94:9e:d2:ce:39:1c:03:41:
         fd:84:6c:81:f8:a2:56:9e:f4:2e:53:c7:54:30:0f:c2:94:a9:
         f4:55:79:6d:6f:57:5e:a9:98:54:25:b1:8f:44:8d:e7:82:bb:
         62:ce:30:6c:8f:da:5c:50:93:fd:41:40:61:28:79:50:a4:79:
         ea:7b:5b:5a:65:85:65:56:b2:c8:75:8d:e8:ce:68:2d:0d:25:
         4e:f8:56:09:33:b8:4e:c2:91:a9:88:a4:b6:02:c6:9b:21:39:
         95:fe:a1:37:07:a4:a6:ed:dd:8b:40:c1:c3:0a:62:e1:68:21:
         4e:a2:75:a4:da:fc:e8:5b:28:24:d4:0d:e2:bd:5b:df:a9:4e:
         18:02:d4:d3:0a:58:06:f4:6a:8a:6a:f9:4d:84:5c:6e:ec:8b:
         c7:fd:86:01:e1:a7:1a:60:ef:c7:2f:2d:81:39:19:51:be:55:
         1b:18:07:d1:91:cd:0e:84:5a:f2:38:70:d8:70:9f:a7:86:da:
         33:93:d1:7c:68:16:33:d8:04:3f:27:27:cf:1a:10:87:bf:eb:
         92:ef:4c:db:8f:08:89:82:a0:fb:f5:a1:a7:c8:69:77:07:37:
         e6:4f:92:57:5d:1c:e3:11:44:ea:94:fb:a6:46:af:1d:7d:fa:
         db:60:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----