Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft
File:                     jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft (raw, json)
Hash identifier:          XpBdECh4JZlrDjbrpRVfRCX6dL2sX9vmNOGlvFsOnd8=
Subject key identifier:   38:98:5E:75:D3:33:FE:35:8E:BB:86:F3:6B:C6:05:83:05:68:CD:3B
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Certificate issuer:       /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial:       018C66B3167B45E6846964D27CDB71014873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft
Manifest number:          0962
Signing time:             Thu 14 Dec 2023 05:01:01 +0000
Manifest this update:     Thu 14 Dec 2023 05:01:01 +0000
Manifest next update:     Fri 15 Dec 2023 05:01:01 +0000
Files and hashes:         1: 1-2dNRHLUgLMIoD_cCjQz5csxiCI.roa (hash: JVPfzIkpgjUJ0tROjKi8zzmAhVlp9AUcbH3T6EiFAo8=)
                          2: TjgnreWBeBrByU7NU8zd7WYDMVI.roa (hash: uysnGCi4bzSG+zSJLCcpFrzMa7eL+mslEyZkMcWd424=)
                          3: jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl (hash: 71qNlamlaveQab0fBDcLgHmwKRxsqfgSWpT+LOM5Gwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:b3:16:7b:45:e6:84:69:64:d2:7c:db:71:01:48:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
        Validity
            Not Before: Dec 14 05:01:01 2023 GMT
            Not After : Dec 15 05:01:01 2023 GMT
        Subject: CN=38985e75d333fe358ebb86f36bc605830568cd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:d7:13:5b:cd:57:fd:5e:8b:df:69:cf:ea:
                    1b:c8:57:91:88:3e:c7:da:7e:66:0a:ca:2f:4d:b3:
                    eb:9b:92:36:39:79:85:e7:7d:c8:f8:90:c4:40:9a:
                    25:b1:37:1f:d6:3e:3d:31:ea:a2:1b:ba:4e:d3:42:
                    65:dc:1c:49:56:c4:5b:2d:66:4e:f7:0d:28:5a:22:
                    d7:bc:9e:4c:bd:a5:6e:a1:e3:a6:79:b1:e6:fd:92:
                    fb:de:89:11:41:b2:6b:1f:b0:f0:5a:44:a9:96:de:
                    78:03:86:83:45:1e:c5:6f:f7:de:06:34:8a:43:3f:
                    8f:3f:25:63:3b:1c:2f:8a:68:f0:e7:48:cc:52:3a:
                    a7:f7:48:89:ff:15:c5:62:cd:87:7e:c1:d6:1a:f4:
                    15:b8:da:ad:dd:93:71:23:f8:1f:09:a5:ed:c4:58:
                    b6:9a:ab:56:ea:9f:1f:a7:b3:f0:e5:05:9c:da:3e:
                    a1:5b:38:5b:30:c7:e6:4e:41:99:60:9f:ba:59:e2:
                    9f:08:7d:f4:1f:a3:75:5f:3b:80:0e:bd:43:2e:0a:
                    fe:a4:39:2f:73:23:9c:43:0b:43:68:0c:23:13:04:
                    60:6a:f8:66:6c:5d:ed:92:44:3f:1b:01:eb:35:a9:
                    ca:a6:f2:38:8a:b0:30:2c:44:c9:09:7e:0e:4d:cd:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:5E:75:D3:33:FE:35:8E:BB:86:F3:6B:C6:05:83:05:68:CD:3B
            X509v3 Authority Key Identifier:
                keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:16:e8:21:8d:45:41:f6:36:11:6b:67:f6:59:99:dd:09:a5:
         36:58:ff:c2:0c:32:87:e9:19:74:14:5f:0b:da:fa:10:fe:69:
         35:e7:e3:14:17:f8:80:93:47:ae:1c:05:f8:72:28:16:db:cf:
         77:73:d9:c0:db:f7:ec:29:4b:52:2d:f7:67:22:4c:86:49:63:
         aa:42:54:3e:be:9b:e3:7f:52:0f:61:45:04:eb:d9:6c:87:6e:
         05:2f:b1:a7:43:08:fe:b6:19:7e:2d:c8:f2:43:e7:d8:7b:37:
         63:7a:3c:4b:48:3a:e0:02:81:a8:86:4c:1c:cc:ad:78:a7:7a:
         8c:d5:04:66:1a:42:7a:6d:61:2f:61:b3:79:2c:e6:4c:bf:db:
         65:11:17:b2:85:d5:dc:51:1f:30:bf:0b:e9:ae:1a:ca:83:db:
         17:54:b0:e0:ae:97:3f:92:2d:81:e9:c0:50:af:4f:3a:29:b5:
         db:79:11:3e:ce:2b:dd:5d:e1:ae:27:1a:a9:03:f7:66:68:d9:
         6b:c4:f1:dd:ef:3f:cc:fa:92:11:0f:11:73:bd:3d:3b:f9:75:
         cb:62:62:5a:58:71:73:fd:b9:93:f0:24:2d:56:b6:6d:b0:06:
         a1:3a:7d:0f:50:95:83:1b:86:24:bb:6a:7c:25:ab:49:4c:2e:
         f4:19:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----