Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.mft
File:                     DNVWE91UzX0FFvd7htGdi2cBoe4.mft (raw, json)
Hash identifier:          +dh3S9TtAbrAUw1+HifA5SDYX5NxJFtNdoOp42+yUEU=
Subject key identifier:   42:E9:04:33:90:7E:A7:95:B7:2E:C9:D4:A0:E0:5A:FE:28:D2:E7:02
Authority key identifier: 0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Certificate issuer:       /CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Certificate serial:       018B3AB826F40AFD74F318FEC859A8883D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.mft
Manifest number:          086D
Signing time:             Mon 16 Oct 2023 23:00:28 +0000
Manifest this update:     Mon 16 Oct 2023 23:00:28 +0000
Manifest next update:     Tue 17 Oct 2023 23:00:28 +0000
Files and hashes:         1: DNVWE91UzX0FFvd7htGdi2cBoe4.crl (hash: s5poq0cg++G9oQ8qalkxIC3mhNKdyD2NxCpT4JcsJLk=)
                          2: Dr2M98XLF0yIjSkcAOgqmEHxLuE.roa (hash: PNALboniN+9Wzdzgy/GV9Cqm7SYlVkTZUTiQZ5yb2l0=)
                          3: IJPFWgyhiS7cO6oE9Ng5qwRnXK0.roa (hash: rknozWso0wPaWuzscfVcReczLd7iS4PBf/fsvNilko0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3a:b8:26:f4:0a:fd:74:f3:18:fe:c8:59:a8:88:3d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
        Validity
            Not Before: Oct 16 23:00:28 2023 GMT
            Not After : Oct 17 23:00:28 2023 GMT
        Subject: CN=42e90433907ea795b72ec9d4a0e05afe28d2e702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:cc:2b:77:72:09:24:a8:b1:08:bf:87:69:
                    28:7a:46:f2:9c:9e:27:0f:1c:97:b9:42:65:a3:0f:
                    fd:d6:21:20:6a:cd:ba:0b:bd:c2:4e:81:a7:08:1e:
                    b5:1a:b3:3e:38:45:a0:b4:87:53:75:e0:e6:9b:60:
                    40:9f:22:7e:7f:0a:56:05:41:38:0b:4c:8e:b0:64:
                    38:66:31:ac:61:09:f3:74:19:3d:a0:51:66:d8:d5:
                    95:7c:68:f9:b1:89:d3:92:8f:d0:77:3c:a1:bd:b7:
                    2d:ff:a3:c9:6e:ba:ca:c7:3b:3e:e3:8a:4c:f6:06:
                    3e:b7:05:5c:ea:64:56:88:17:f2:04:69:ef:c0:5e:
                    ee:41:01:35:6c:69:c2:5a:09:3f:86:3d:f9:2b:2e:
                    d5:85:61:d9:4e:fb:92:21:22:e4:bf:04:35:02:be:
                    57:aa:bc:93:0c:57:8b:81:f1:7b:bf:a7:2f:dc:55:
                    fa:b2:86:7c:58:27:e0:3a:93:dc:1c:1c:77:98:71:
                    b4:b0:72:93:bd:22:fa:4b:8c:ee:5d:6d:22:b4:2b:
                    43:46:49:6b:c3:3e:03:27:c0:e5:c8:96:b4:07:2e:
                    b1:a2:6d:af:a3:68:00:6e:b5:03:ca:3f:22:4c:c9:
                    09:b5:8b:a8:0b:35:7b:3f:97:12:67:0a:4d:07:4d:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:04:33:90:7E:A7:95:B7:2E:C9:D4:A0:E0:5A:FE:28:D2:E7:02
            X509v3 Authority Key Identifier:
                keyid:0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:77:b8:df:c1:1d:c4:f7:cb:40:56:49:0e:cd:7d:cf:10:91:
         e1:5d:af:8c:5c:2e:81:70:3f:7d:bc:5a:fb:3f:af:4b:b4:bc:
         c1:28:4a:41:96:cc:ef:e2:48:bf:50:52:e3:8f:55:e4:c5:e2:
         8a:5c:26:e8:e2:80:de:0a:fe:e7:1e:f9:37:91:fc:5c:e3:41:
         89:5a:51:25:6a:04:f6:7f:bb:cd:90:f4:a5:76:f2:a5:b4:5a:
         0e:c9:81:4b:31:18:5c:fb:0c:48:0a:7a:74:ec:44:be:55:d4:
         d4:a8:31:df:96:9f:b7:50:eb:38:9f:00:25:84:80:5f:2a:66:
         7a:0f:1d:f9:4c:f1:d5:e8:a6:77:40:41:c8:e0:a2:15:ab:a4:
         02:d6:d5:c7:3b:c8:80:db:64:66:ca:21:66:46:7a:fe:b2:18:
         06:1c:bb:bb:6d:8d:63:cf:1c:72:2f:3b:23:b7:e9:d6:30:2a:
         3e:75:30:c2:3e:a3:9c:a8:fe:9f:f9:f6:3e:06:a2:65:9a:56:
         9f:d5:04:c6:e8:fd:2c:67:ce:bc:b5:cf:68:e8:22:46:d4:39:
         11:72:d6:8d:4b:c1:98:d1:d8:39:3e:8a:1a:6e:37:63:fa:23:
         fd:fb:a7:99:2a:ba:fe:3b:6c:51:1e:44:8a:27:b4:33:4c:62:
         75:34:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----