Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.mft
File:                     H1c8WJcVdxNH-RrwK1Sn8XdLVS0.mft (raw, json)
Hash identifier:          /yYXtNz1bPQvB93/+hCLohYc0KQ0JKZV1AnVTA1wKcQ=
Subject key identifier:   48:FB:6E:0E:7F:0F:BA:DA:6A:A1:EC:43:85:79:82:33:03:BF:E9:BF
Authority key identifier: 1F:57:3C:58:97:15:77:13:47:F9:1A:F0:2B:54:A7:F1:77:4B:55:2D
Certificate issuer:       /CN=1f573c589715771347f91af02b54a7f1774b552d
Certificate serial:       018BD6B891B718B1372C3F42217319681145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.mft
Manifest number:          0879
Signing time:             Thu 16 Nov 2023 06:01:41 +0000
Manifest this update:     Thu 16 Nov 2023 06:01:41 +0000
Manifest next update:     Fri 17 Nov 2023 06:01:41 +0000
Files and hashes:         1: 6ReFfpCe76V3-N5K66GAHXPOiVE.roa (hash: SmHdX7Hr1U03hGOk+/mumRlTVpcA+UpWzPTdF1oxhoY=)
                          2: H1c8WJcVdxNH-RrwK1Sn8XdLVS0.crl (hash: gfoOl+ICpsrQ36bXtrSwemEMevY5R9QMy/SUjEx3ipI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:b8:91:b7:18:b1:37:2c:3f:42:21:73:19:68:11:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f573c589715771347f91af02b54a7f1774b552d
        Validity
            Not Before: Nov 16 06:01:41 2023 GMT
            Not After : Nov 17 06:01:41 2023 GMT
        Subject: CN=48fb6e0e7f0fbada6aa1ec438579823303bfe9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:88:39:21:f1:6a:13:4a:0c:89:ca:47:25:
                    a5:5a:42:a0:32:b2:17:82:f1:3a:c6:44:ca:f4:2e:
                    05:af:a6:b4:b3:94:7f:f7:f4:4f:6d:6f:34:2c:e4:
                    a4:d0:12:4c:50:b9:63:0e:9f:21:0a:86:32:4a:1e:
                    49:8d:7d:67:45:26:b5:37:cb:4a:40:9b:0a:bf:01:
                    99:b9:48:01:a7:30:06:cf:4b:f3:3f:90:1b:b1:98:
                    75:3c:81:0c:f3:f1:42:26:8b:fa:37:04:81:3f:54:
                    ec:a4:e2:85:7d:bc:ce:88:f1:ec:c7:30:c6:da:ce:
                    62:06:fd:c1:12:46:db:4a:64:43:3e:03:4f:a2:e6:
                    ad:4f:35:dd:7c:49:b1:03:40:c9:41:23:be:58:41:
                    8e:b8:51:45:d0:cd:78:dc:5f:9e:78:32:63:de:f9:
                    b2:66:af:aa:9a:fa:fa:9f:4e:4b:50:85:e3:b8:1c:
                    db:35:73:02:d5:74:7b:75:58:d0:7f:25:ae:a6:e9:
                    5e:5c:1e:bd:e2:d1:87:ef:bf:48:d7:1e:ae:af:01:
                    9d:e7:0e:f2:f6:8b:eb:3c:c0:06:40:44:2b:65:43:
                    e9:65:7e:62:f6:9f:90:3a:e1:23:c0:a1:e0:68:dc:
                    70:4e:c9:72:51:13:a1:15:a2:f1:55:0a:62:d3:12:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:6E:0E:7F:0F:BA:DA:6A:A1:EC:43:85:79:82:33:03:BF:E9:BF
            X509v3 Authority Key Identifier:
                keyid:1F:57:3C:58:97:15:77:13:47:F9:1A:F0:2B:54:A7:F1:77:4B:55:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:99:db:d7:4e:d0:c6:b4:87:7c:8a:fd:fb:b1:16:00:9d:
         cf:b3:c5:8d:a0:5d:7f:ea:14:d8:8c:f7:a4:15:71:f7:d9:68:
         c9:d2:b0:52:8f:91:f5:b8:bb:39:02:0c:4c:e4:61:d5:c1:a7:
         2b:ca:ef:8a:fb:2a:32:a6:fa:11:1f:24:de:05:f6:5b:95:bc:
         86:08:7e:63:03:16:d7:d7:0f:45:ee:06:18:21:ca:b2:be:e6:
         c3:49:9c:24:7a:8e:6d:85:e1:f4:df:81:69:8d:4b:d0:53:da:
         d0:7d:77:a4:51:ed:c0:fa:13:02:c0:00:9b:de:19:ae:7a:51:
         d6:18:7f:4c:c0:e7:10:42:58:40:02:c6:1d:2d:a3:c5:d9:b7:
         5c:e2:a3:0b:8a:eb:31:22:0d:16:8f:fc:5d:84:de:25:b6:70:
         44:b7:56:a0:07:5f:b3:21:3d:59:70:d7:a2:c6:b9:69:41:0d:
         82:7b:38:a7:12:8a:62:09:d2:40:92:2f:38:f6:00:72:08:b5:
         73:a7:bc:74:0d:38:ab:1f:1c:37:17:8b:de:85:b9:0b:be:cb:
         bc:eb:87:61:13:c2:26:25:a2:70:9d:48:28:ce:40:54:69:c7:
         92:b6:6b:f6:d9:7b:44:68:e4:8b:63:5c:90:ab:53:fa:0b:08:
         92:7e:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----