Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a9886f-27d9-4750-bc6a-c37599c7a808/1/GlgC0cz_AsyRwH2BdDxxfxPzRnc.mft
File:                     GlgC0cz_AsyRwH2BdDxxfxPzRnc.mft (raw, json)
Hash identifier:          +Z/1hiYW93OE6HVD1qOVl62WWM1S93LxnKvRc9Ua/p4=
Subject key identifier:   E1:23:FA:0B:73:FB:83:2B:EA:81:1E:D4:2C:2A:31:0A:20:A8:25:A6
Authority key identifier: 1A:58:02:D1:CC:FF:02:CC:91:C0:7D:81:74:3C:71:7F:13:F3:46:77
Certificate issuer:       /CN=1a5802d1ccff02cc91c07d81743c717f13f34677
Certificate serial:       018BC8FC4A95A21770048057211358F9F0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlgC0cz_AsyRwH2BdDxxfxPzRnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a9886f-27d9-4750-bc6a-c37599c7a808/1/GlgC0cz_AsyRwH2BdDxxfxPzRnc.mft
Manifest number:          0584
Signing time:             Mon 13 Nov 2023 14:00:58 +0000
Manifest this update:     Mon 13 Nov 2023 14:00:58 +0000
Manifest next update:     Tue 14 Nov 2023 14:00:58 +0000
Files and hashes:         1: F3zWP-hUXV2x81NMvOgxeKK2m0I.roa (hash: jMcXPJYo/MZKHO70GhkZ2V9NtlZF5Xes394SVpXo5k0=)
                          2: GlgC0cz_AsyRwH2BdDxxfxPzRnc.crl (hash: oPpPY3gi+yyPV+jDvw+tvzvmVArDvZh4LgQhbaSnFro=)
                          3: I4ZQuiqnmSDzJrNjIOzODOEfluE.roa (hash: SkSOaD3thJtkS1pXAgs3U32gz0nzP/g4pY3HjzcWPEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:fc:4a:95:a2:17:70:04:80:57:21:13:58:f9:f0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5802d1ccff02cc91c07d81743c717f13f34677
        Validity
            Not Before: Nov 13 14:00:58 2023 GMT
            Not After : Nov 14 14:00:58 2023 GMT
        Subject: CN=e123fa0b73fb832bea811ed42c2a310a20a825a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:7f:44:d3:cb:65:97:0d:89:4d:3f:33:c4:
                    9c:ff:06:1a:80:53:e1:db:c3:91:5b:0b:7f:6a:ae:
                    d8:57:b4:b2:a2:87:b1:18:f5:c4:59:b2:20:04:9a:
                    a0:6f:ba:16:66:16:4f:91:8c:28:d6:11:5e:64:61:
                    e0:17:a5:43:dd:88:fa:65:30:51:38:13:5e:eb:f4:
                    84:1e:25:bb:a0:d2:7e:8a:fb:bb:d4:64:a8:5b:9f:
                    0c:44:17:f1:8b:40:b0:cf:51:66:8f:be:46:cd:70:
                    97:99:03:7a:55:96:31:3d:d5:ca:a4:b3:5d:21:5f:
                    40:8f:e9:1e:d0:1c:82:d6:57:8b:c7:02:21:9f:09:
                    6b:ea:0f:d6:e0:bb:96:69:26:6f:17:5b:5d:91:29:
                    1d:ed:8f:27:94:1f:5d:8c:58:af:53:95:51:ef:fb:
                    49:f9:93:1e:ec:a1:b2:d2:d6:d2:2b:b3:f6:49:b3:
                    6c:e1:65:28:85:97:e0:95:98:27:06:50:55:1f:ff:
                    28:a4:e1:7f:c2:4f:85:35:2e:cb:c6:6c:7b:b7:e3:
                    bf:36:56:e4:9f:4c:06:21:e9:f5:aa:10:b9:ee:0e:
                    42:cc:ac:63:e6:20:bf:e0:5b:1f:c0:fa:3e:02:b3:
                    42:b8:e4:4c:65:dd:32:95:29:f3:7e:d8:00:a8:3b:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:FA:0B:73:FB:83:2B:EA:81:1E:D4:2C:2A:31:0A:20:A8:25:A6
            X509v3 Authority Key Identifier:
                keyid:1A:58:02:D1:CC:FF:02:CC:91:C0:7D:81:74:3C:71:7F:13:F3:46:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlgC0cz_AsyRwH2BdDxxfxPzRnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a9886f-27d9-4750-bc6a-c37599c7a808/1/GlgC0cz_AsyRwH2BdDxxfxPzRnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a9886f-27d9-4750-bc6a-c37599c7a808/1/GlgC0cz_AsyRwH2BdDxxfxPzRnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:ee:df:e7:fe:77:de:20:49:56:47:fa:25:5d:4f:7d:67:
         0c:82:43:f5:d3:f0:6b:6b:7b:74:e4:d9:43:6c:38:7a:fb:a5:
         d5:67:fb:54:c4:62:28:ad:4a:19:97:65:e4:66:e8:c8:4f:37:
         27:76:f1:e8:1b:2c:cd:36:f3:0c:47:5c:02:c1:43:67:4c:30:
         30:9e:bd:df:4e:f6:4e:3b:fc:a9:6c:62:54:1c:23:ac:a8:cb:
         05:98:88:8e:ac:46:88:7a:3d:20:f9:15:3e:63:c6:f3:13:c6:
         bf:58:de:99:10:f0:7c:9f:f8:e8:c0:d7:58:73:a1:97:4d:49:
         fa:3a:4f:51:8f:93:ca:cd:a3:77:da:6b:4b:68:78:39:09:d7:
         25:2a:c8:57:ae:84:c1:7a:84:d4:93:68:ff:c2:d6:20:c4:a8:
         f5:06:35:5f:15:64:a4:f4:ea:95:70:ff:a7:96:0e:96:4d:5f:
         e8:43:72:4d:b3:1d:62:63:9f:96:4c:60:a8:5e:95:89:61:e6:
         8f:ed:3d:08:44:a6:52:e2:fc:f7:24:cb:f9:de:2d:2f:2d:2a:
         4e:96:71:9a:e5:60:bc:af:e7:93:0a:dd:23:27:8e:55:85:75:
         84:28:2f:e9:87:3b:c7:b0:86:be:4f:fb:53:e1:79:d3:c3:ea:
         2d:12:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----