Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.mft
File:                     y0ZE3esDkLS2SLabyGCUKu2bu24.mft (raw, json)
Hash identifier:          WDGHu8Lz3LijLOXNDtcDZwI5691/GWR2j9uZ2EXiJ7Q=
Subject key identifier:   61:BB:AD:7A:FA:23:E0:9C:1A:C9:C1:E9:84:00:C2:B4:7F:48:EF:F0
Authority key identifier: CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
Certificate issuer:       /CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
Certificate serial:       018AEDB0B482DA3F1310FD7A28195BCA6372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.mft
Manifest number:          0857
Signing time:             Mon 02 Oct 2023 00:01:35 +0000
Manifest this update:     Mon 02 Oct 2023 00:01:35 +0000
Manifest next update:     Tue 03 Oct 2023 00:01:35 +0000
Files and hashes:         1: hq8U3CJ1CuEWiCPldaW-q_esIiQ.roa (hash: LWzwCQVRYrf+nsiT2h6sreRcRfLKNDA8qp4BkBBglfI=)
                          2: y0ZE3esDkLS2SLabyGCUKu2bu24.crl (hash: Zp1obS9H0DQHNBWAuPET/AdJXiu9o73UgdzWNcXYQqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ed:b0:b4:82:da:3f:13:10:fd:7a:28:19:5b:ca:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
        Validity
            Not Before: Oct  2 00:01:35 2023 GMT
            Not After : Oct  3 00:01:35 2023 GMT
        Subject: CN=61bbad7afa23e09c1ac9c1e98400c2b47f48eff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:cc:56:6d:55:5b:1d:c9:f1:fb:39:80:ba:
                    34:5d:73:6b:39:c6:83:13:7a:7b:51:f4:43:c2:36:
                    af:36:26:7a:fb:63:81:17:fe:73:d5:be:57:db:96:
                    d6:a7:ea:b8:1d:34:61:0a:00:09:4f:a8:7d:6d:bb:
                    39:5f:87:7c:11:f9:10:19:cc:99:63:87:4d:d7:8a:
                    c3:89:b7:29:d5:92:f2:5a:c3:ed:43:67:4d:3a:e5:
                    e1:22:0f:b6:b2:60:f6:c1:71:91:4d:9a:18:50:0f:
                    dd:52:07:ee:fc:46:1b:dc:57:c0:e4:a3:35:14:10:
                    a5:50:25:c3:fc:78:7e:3b:e2:80:1d:e7:ec:2f:33:
                    a2:92:dd:59:01:6d:de:54:21:bb:57:c1:35:c7:d3:
                    a8:07:60:f2:8b:0d:a8:e7:f2:3e:35:82:ba:1c:8a:
                    9f:41:86:53:21:a3:74:32:8e:e2:74:46:f8:b5:f9:
                    60:30:8c:8d:0f:c5:41:1c:9b:11:5d:f9:82:41:ca:
                    83:fc:1d:89:10:22:df:53:40:e4:b5:bd:48:04:79:
                    a2:0e:08:91:66:c1:de:23:b6:18:b1:d0:35:d7:53:
                    61:36:70:35:8c:72:55:e7:f4:0c:9b:d7:b3:8a:3c:
                    88:3b:75:65:d9:f1:68:1a:cc:a2:ac:7b:bc:a5:3a:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BB:AD:7A:FA:23:E0:9C:1A:C9:C1:E9:84:00:C2:B4:7F:48:EF:F0
            X509v3 Authority Key Identifier:
                keyid:CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:97:11:e4:75:d0:ee:a6:b5:de:67:6d:4d:61:b8:98:45:0a:
         e2:1c:e9:97:e2:85:a7:02:79:39:35:75:89:0d:97:c1:cb:21:
         fd:3e:23:28:c4:19:ba:9f:b4:71:42:07:05:24:56:4c:af:a8:
         9c:3a:e6:92:c0:8c:4f:8a:7d:3f:77:5d:2a:cd:42:07:e0:f9:
         20:e3:25:e4:d1:dc:5f:84:f7:f0:5a:74:ee:f7:ca:7a:d9:5f:
         bf:12:c2:07:6c:9c:16:0a:48:63:b5:18:76:cc:b2:87:38:46:
         a6:1a:b3:d4:cd:da:9d:ab:59:70:49:fb:3a:4e:d0:8e:8a:61:
         b2:c6:77:e2:e2:05:8b:a5:de:0f:26:32:36:12:7e:24:79:a7:
         2f:52:eb:41:90:fb:f8:b8:ac:1f:f2:b8:66:57:4a:f4:43:12:
         d1:8b:ec:b2:46:cb:3d:95:3f:2b:10:92:42:dd:b9:a6:fd:d9:
         37:2d:62:69:a7:60:f9:3c:4d:80:d7:36:88:77:2a:a4:6c:75:
         88:59:da:a9:f4:9e:05:14:99:ff:72:4d:12:8f:f4:ed:2f:24:
         87:9e:fc:68:c7:95:79:81:fe:f8:14:de:25:66:19:7c:ae:5f:
         f8:a7:c7:8b:03:d6:58:e9:d3:a1:89:6e:53:a3:bd:ae:f9:16:
         37:98:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----