Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.mft
File:                     z0n505etj8sDuEMxgUAmelwhTbw.mft (raw, json)
Hash identifier:          InaJzcCfKXBzFEkcL/IaEf8UO1/lphJIrWnwb6Fjrl0=
Subject key identifier:   91:2F:25:B6:7C:8F:61:E3:53:CD:83:0B:C5:D0:63:53:24:E6:8E:E1
Authority key identifier: CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
Certificate issuer:       /CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
Certificate serial:       018BC7E9D016DC95A2EA1846AB88F4CFED7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.mft
Manifest number:          0860
Signing time:             Mon 13 Nov 2023 09:01:10 +0000
Manifest this update:     Mon 13 Nov 2023 09:01:10 +0000
Manifest next update:     Tue 14 Nov 2023 09:01:10 +0000
Files and hashes:         1: 1-9oVwG2m7MWjj6HEtrOO6M3v3II.roa (hash: Mxqxuf94cOPowu6lctuOAtef7yZRQ42eUBGg31IP8qw=)
                          2: z0n505etj8sDuEMxgUAmelwhTbw.crl (hash: 6hVEvLij4BU0SQ286dKNxmueo8iLS6rsC+4APfZjWuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:e9:d0:16:dc:95:a2:ea:18:46:ab:88:f4:cf:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
        Validity
            Not Before: Nov 13 09:01:10 2023 GMT
            Not After : Nov 14 09:01:10 2023 GMT
        Subject: CN=912f25b67c8f61e353cd830bc5d0635324e68ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:fe:90:fe:7e:c7:00:75:57:0b:d2:5b:d3:
                    df:ed:5d:aa:ff:59:ee:b9:58:b2:4a:71:87:3e:85:
                    45:72:53:89:92:5d:66:46:c2:a3:f2:9c:20:e6:c9:
                    11:5b:60:48:83:1a:e6:c8:2d:e5:4b:89:d0:99:4d:
                    e1:00:71:ae:b3:bf:1d:22:08:31:19:b6:cb:ce:5e:
                    d6:a4:72:f0:c1:61:72:06:cc:59:b0:d7:7b:25:32:
                    24:95:db:8c:66:7c:7a:ae:b8:f6:74:ec:24:c5:30:
                    d4:f5:d7:9b:50:e5:f8:73:ec:8c:0d:6f:9e:48:7e:
                    b6:1a:66:65:28:45:a2:ac:9b:c5:b1:58:b0:dd:54:
                    28:9c:4c:78:54:fb:a5:88:bb:e8:76:b0:62:93:e1:
                    52:5d:86:04:6f:e7:7b:da:fe:3a:49:7e:c5:73:7c:
                    4e:56:d7:05:9b:07:22:f2:2e:cc:98:83:f2:f0:f8:
                    4a:54:e1:17:55:55:8d:14:c2:7a:37:a2:f0:4f:c1:
                    47:96:f8:01:d8:2c:f6:b8:28:83:74:ab:0a:9d:0c:
                    1f:ea:bd:42:3d:98:51:3f:03:7a:b4:08:1f:92:72:
                    53:53:40:56:39:af:71:97:71:7a:a9:6c:67:b6:df:
                    9f:6c:fc:f3:a0:7a:ff:c7:24:86:a8:01:cb:35:57:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:25:B6:7C:8F:61:E3:53:CD:83:0B:C5:D0:63:53:24:E6:8E:E1
            X509v3 Authority Key Identifier:
                keyid:CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:61:9e:87:80:58:4d:66:48:cb:81:7b:45:36:c6:64:4d:5d:
         96:64:d4:71:f7:eb:fb:8c:02:62:6b:58:2b:4a:0c:19:ae:f2:
         a3:54:84:1e:31:36:a0:38:a5:6c:ba:af:8e:d4:54:ce:1c:fd:
         4e:61:36:a3:38:de:b2:83:bd:ee:a4:56:d7:8a:64:96:ac:56:
         35:fa:40:bc:cc:01:24:1e:e9:65:ac:be:fa:24:13:2b:1a:d9:
         6e:30:75:42:26:b0:a8:08:1a:61:c1:27:a2:5c:c8:53:29:c8:
         c7:d7:41:57:d9:7b:cc:ec:e2:67:64:9e:8a:cc:76:da:6d:9f:
         40:48:5f:38:1b:13:38:8d:9c:21:41:a1:ca:bf:f0:7d:85:61:
         28:bd:0e:71:91:44:4a:55:dc:84:ce:6c:b2:34:e9:49:43:e9:
         31:fd:97:80:df:26:1b:f9:8a:00:4d:7c:a1:e9:8a:8a:f9:63:
         f4:0b:0c:0b:96:1a:fe:1d:3a:50:b8:0c:e0:52:1c:b9:0f:26:
         14:60:fc:bc:8e:c1:79:bb:6a:28:a4:96:14:12:dc:36:62:a0:
         15:8d:73:29:11:18:4e:1c:b1:03:4b:a8:55:73:71:e0:44:f5:
         e3:af:97:b3:31:32:2f:a3:da:3e:4c:da:4d:c0:9a:34:87:3c:
         38:6e:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----