Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft
File:                     0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft (raw, json)
Hash identifier:          O/IV7VfrEd4+44LWeHM7Rkj/0d8EV84nxS1XYUNuI58=
Subject key identifier:   91:D3:B7:E9:3E:0D:C7:7F:8A:DB:39:00:C7:5B:D4:4E:DC:39:57:0B
Authority key identifier: D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1
Certificate issuer:       /CN=d2090b6e7691f7e19d771e63581a181d7a6e0da1
Certificate serial:       018C14F1D61D34D67FE2F97B8F329C5F6F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft
Manifest number:          084C
Signing time:             Tue 28 Nov 2023 08:00:42 +0000
Manifest this update:     Tue 28 Nov 2023 08:00:42 +0000
Manifest next update:     Wed 29 Nov 2023 08:00:42 +0000
Files and hashes:         1: 0gkLbnaR9-Gddx5jWBoYHXpuDaE.crl (hash: GQMsZGnnU085LBcv5rMxSW1U9O02gWLOOqS7nk2t8KY=)
                          2: _TxHgwE9XUpGi4a9t5W4nxnocqs.roa (hash: uv/EmXl8bz/0IN7yd8YWw2WP3GOZ0DB6XPTdikJW8ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:f1:d6:1d:34:d6:7f:e2:f9:7b:8f:32:9c:5f:6f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2090b6e7691f7e19d771e63581a181d7a6e0da1
        Validity
            Not Before: Nov 28 08:00:42 2023 GMT
            Not After : Nov 29 08:00:42 2023 GMT
        Subject: CN=91d3b7e93e0dc77f8adb3900c75bd44edc39570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:09:59:24:e8:6f:8b:04:ac:16:15:ea:a3:
                    06:bf:c0:63:cd:9e:a3:e8:0b:7a:27:a8:63:e0:fe:
                    15:a6:0b:5c:d0:e1:fa:16:59:85:25:d1:0a:c8:eb:
                    87:93:5f:bd:d9:c8:db:c3:9c:33:70:ab:e0:d3:66:
                    0a:47:0e:2b:5a:19:4a:52:05:16:e6:27:4c:05:b1:
                    85:38:48:6a:fb:70:1c:43:05:a6:c7:7c:32:3d:62:
                    78:da:e1:85:86:b5:e9:a1:05:8c:c4:ec:d8:df:d7:
                    04:e6:67:ba:7b:5b:13:1e:47:9f:ae:5f:87:ff:57:
                    2d:a3:2c:69:33:d8:43:86:c1:2d:4a:eb:c4:30:e2:
                    c9:3f:1e:bc:76:d8:40:88:ea:02:53:e7:0b:ef:95:
                    58:88:ae:be:c1:5c:5e:11:41:09:f0:6a:b3:3f:fa:
                    ea:01:7b:95:58:4a:2a:69:7e:88:bc:3d:3b:e5:4c:
                    c9:76:d9:17:de:1d:0f:92:f7:42:14:d0:87:38:8f:
                    8f:33:7f:cb:1e:74:4b:75:8a:e8:2f:4a:70:b2:e7:
                    de:23:66:42:8b:7c:2f:ae:06:3d:33:95:49:be:b1:
                    b1:94:1a:5b:49:f8:d8:c7:b3:87:87:18:47:f9:21:
                    8d:de:80:b7:2c:98:e7:d6:44:a5:a8:63:2d:aa:0c:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D3:B7:E9:3E:0D:C7:7F:8A:DB:39:00:C7:5B:D4:4E:DC:39:57:0B
            X509v3 Authority Key Identifier:
                keyid:D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:60:05:68:ed:74:b6:e2:58:8b:48:32:07:fc:b3:45:83:cd:
         1a:df:d0:d2:5a:8f:11:8a:8f:c5:6a:88:54:9b:dd:fc:9a:6e:
         b5:27:88:8a:dd:05:cf:2f:d5:eb:9f:fa:fe:df:10:cf:96:ed:
         93:a8:ca:87:a0:41:a0:d0:48:fa:c8:4c:8d:ab:bf:f2:8d:1c:
         d2:63:a4:66:1d:a3:0d:7a:bf:4a:48:cc:53:99:57:ac:2b:cb:
         9c:5f:96:1d:fc:5e:e1:b4:ba:9e:19:8c:72:b2:2e:d0:81:bd:
         78:7f:d4:ea:52:0b:46:c4:f1:e5:da:d0:98:66:88:f3:ae:f5:
         f4:67:df:d6:85:e1:74:ab:0e:6d:0d:70:b4:e5:75:b8:3c:82:
         ec:b5:da:c7:dd:36:07:49:d4:36:2f:b7:c5:23:e0:fc:41:d1:
         cb:70:fc:dc:27:2b:25:ec:73:ff:c3:6d:18:ec:2c:59:80:50:
         ee:c3:ad:d9:c8:a8:cc:33:3d:ea:f5:31:8d:66:e7:d1:c3:76:
         c2:3d:6c:25:16:cb:f2:69:0b:a2:ca:a2:23:a4:38:5e:82:75:
         27:ea:16:5c:45:f9:bf:89:31:59:28:3d:b6:29:82:67:61:28:
         a1:ef:3f:ee:bb:f0:48:43:d5:98:f5:4e:af:0b:c2:f4:62:d8:
         16:22:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----