Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.mft
File:                     CL0OHyvFIwewBA8euBc_kwIWsbM.mft (raw, json)
Hash identifier:          R+mYFd5NDRu8xIEArrcRCJU89RmWWswXgn/vbfYOkrk=
Subject key identifier:   E7:31:5C:D6:EF:24:E4:06:0F:01:2C:08:01:6A:E6:58:49:60:A6:79
Authority key identifier: 08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3
Certificate issuer:       /CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
Certificate serial:       018B4BE2B0B6A037D0A5F33BDB3C90176DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.mft
Manifest number:          086C
Signing time:             Fri 20 Oct 2023 07:00:29 +0000
Manifest this update:     Fri 20 Oct 2023 07:00:29 +0000
Manifest next update:     Sat 21 Oct 2023 07:00:29 +0000
Files and hashes:         1: 1-c06sLx655JQzvjIS8LGFV2c3nk.roa (hash: iClSA1OV8Jn5tQv239tPb3kOajgphlCTeiaDyjfdAoA=)
                          2: CL0OHyvFIwewBA8euBc_kwIWsbM.crl (hash: 4zMicEokcwJUm1hJjfhEq/a+HsUksut8bqV/m5RCVvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4b:e2:b0:b6:a0:37:d0:a5:f3:3b:db:3c:90:17:6d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
        Validity
            Not Before: Oct 20 07:00:29 2023 GMT
            Not After : Oct 21 07:00:29 2023 GMT
        Subject: CN=e7315cd6ef24e4060f012c08016ae6584960a679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:8e:00:4a:4a:2b:e7:34:1e:09:70:e7:79:
                    79:dd:78:f0:f9:38:60:e9:f0:a1:0b:e3:ff:bf:fb:
                    e7:9f:77:2e:fd:73:92:1d:00:e1:00:6c:2a:c8:e5:
                    3e:c3:18:e4:67:0a:fb:28:50:4d:fa:52:6e:ff:79:
                    ca:73:bb:d2:25:60:8e:11:54:b9:69:95:6e:ac:a2:
                    8f:70:a0:71:cf:3d:81:74:22:c5:2a:b1:5f:0c:9a:
                    02:bb:8d:46:fd:56:f2:26:eb:56:04:66:72:75:b6:
                    60:10:0b:ea:ea:06:5d:19:ba:57:9b:47:29:72:7d:
                    d5:9d:9a:8c:aa:d1:d7:13:fb:7f:55:b0:3e:44:49:
                    09:2f:ff:f4:a2:c3:63:48:b6:fa:ce:23:d0:05:79:
                    d2:1b:e5:d5:b6:c4:a6:e1:ce:c1:0a:58:60:c1:8f:
                    94:cf:04:17:12:44:db:ff:b4:58:92:67:6b:7c:f9:
                    04:18:1b:5f:73:e6:be:7d:a1:17:34:be:75:3f:1c:
                    c0:19:70:9c:36:f2:07:4f:d0:54:1e:b2:97:b7:1f:
                    02:41:7d:4f:f1:f4:66:fb:e2:f4:06:8d:82:6f:7e:
                    62:5b:38:a9:a2:53:49:34:7a:ff:68:89:9b:6c:2e:
                    a0:6c:b3:a0:93:b0:f7:02:55:f5:76:fa:4b:73:f5:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:5C:D6:EF:24:E4:06:0F:01:2C:08:01:6A:E6:58:49:60:A6:79
            X509v3 Authority Key Identifier:
                keyid:08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:2b:b3:53:49:6c:b9:b5:2a:35:29:55:34:01:38:03:a1:
         cd:49:3f:3f:0c:2a:0e:e6:44:b8:5b:81:d3:7f:1d:04:8f:2f:
         4e:aa:36:ff:b4:a8:91:e6:ca:0c:e1:fe:c8:ec:fb:e2:0e:a3:
         3d:a3:96:cd:ab:ba:7d:92:46:18:ee:ef:26:28:e0:e8:ef:f9:
         24:c0:4a:d5:c8:bc:fb:c1:27:c6:5e:82:ff:3d:49:a2:e0:b2:
         be:51:10:a8:77:4b:b2:db:24:b2:85:8f:14:7b:cb:3a:be:46:
         37:9a:88:aa:f1:42:b2:b3:71:26:d2:d4:be:d6:f5:3f:86:36:
         09:90:a5:4e:93:fe:2e:3d:6e:c8:5d:44:2b:1a:06:c1:5a:43:
         f6:96:6b:95:cc:b3:e0:1a:e5:67:8a:8c:7d:c3:b9:34:4d:c5:
         e1:80:aa:cd:3d:1c:db:58:db:64:88:3d:37:ef:18:34:17:32:
         7d:a3:e3:0b:3f:55:22:e6:09:e4:4e:9a:90:bf:14:a5:c5:50:
         2b:72:59:7c:da:a5:f2:8d:fa:f3:b4:63:67:2a:65:c9:56:da:
         a7:ad:50:07:82:01:74:d5:c7:83:67:e0:bb:e0:4a:70:9e:fe:
         f0:32:46:40:d5:62:b3:f3:92:ac:80:42:e5:3a:43:c3:d9:e8:
         c2:8b:ac:de
-----BEGIN CERTIFICATE-----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