Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.mft
File:                     9NuV-dG1w-yTT_hNb_fwEkLahCo.mft (raw, json)
Hash identifier:          LKDNixNFatg2vkvD/dFeMTK33ZFecuZIhA8dSDUBWIs=
Subject key identifier:   8A:2A:19:81:8E:74:DE:CD:49:A2:E8:11:2B:DE:35:46:4E:C9:40:DE
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       0189AB53DB98A09EB737F3C5D6C12D960DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.mft
Manifest number:          0887
Signing time:             Mon 31 Jul 2023 09:42:26 +0000
Manifest this update:     Mon 31 Jul 2023 09:42:26 +0000
Manifest next update:     Tue 01 Aug 2023 09:42:26 +0000
Files and hashes:         1: 0JloI2_75jwiir4szMdbiI5_ddM.roa (hash: A8OYLBZbT2YAAUQCUcttehwl8ylLZtIOHaKpz3M/jBw=)
                          2: 5h8ZLglzIonQHnsLi4Wuna5zDv0.roa (hash: xJlaSUj8xVnTAHTH/Kg/w+ZHOqVb3QCeps8rnag80ig=)
                          3: 6Pb2rx66O4d0-lNksjqjEPt62Tk.roa (hash: QS/tj+4pS53YOGM44gm5qPvHEYcASxiirhnOdjOpJ7I=)
                          4: 9NuV-dG1w-yTT_hNb_fwEkLahCo.crl (hash: 5LtfF459zIt19L7OrWH42qyFEUeVJbgibLDrvefkzCQ=)
                          5: DQQ3vvUuIud-VpLDRi9nTvmR1k4.roa (hash: hj2RsD9jsYLwrnpznbFrCsHF2QQaIWZcn6/XeLPtELc=)
                          6: KO7fuYOsDws2RopcGeqyQEr3khI.roa (hash: QfwY2dqQt2w2Br+2LIPM/7Nutpxkz7ZMDM9sajQ/kow=)
                          7: T2qloX6-O-1wiB7PvD3sB62JdKw.roa (hash: k+1XwntY49V1FNH+RW/UDdXZX72KdVLR347jt/t2nNk=)
                          8: bF5xGt-GhuzlLIehkwiTQy-bkWA.roa (hash: ntRUZhRJAqrmrfJO2ByCdnSLDsL3QcApe6SKlRvz5kA=)
                          9: g14rL_ZNixPPwuZ0jMk-mwlIMs8.roa (hash: QlkuB5L7JqILMNh/4DbAVh4q27iO4KmAQgRHd4VBIBs=)
                          10: shIwBHPjiSd9hB0RTO1GDY18Afw.roa (hash: htaJorP+k0VnVAEmtztQ1uwVDt2ecvjlXA3G3sKMyLo=)
                          11: wEUoYILpf8RdZGXEDYkpz5hCeuM.roa (hash: EjaySdEPRgcM62d2TSna+6Gi5IzAeCi20qWK3GHjFKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ab:53:db:98:a0:9e:b7:37:f3:c5:d6:c1:2d:96:0d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Jul 31 09:42:26 2023 GMT
            Not After : Aug  1 09:42:26 2023 GMT
        Subject: CN=8a2a19818e74decd49a2e8112bde35464ec940de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:4e:75:57:4a:a2:b9:9a:38:48:b3:97:e4:
                    1a:27:cb:c8:0c:e4:84:05:e7:77:7a:9c:96:7a:b4:
                    7e:98:64:16:f4:48:35:0e:a2:6c:25:85:ad:90:8a:
                    23:e0:93:c6:4f:93:00:c2:cd:c3:45:97:3e:5d:aa:
                    3a:5c:94:d6:f0:09:c7:b4:56:b5:32:86:03:78:2e:
                    b6:43:4f:db:22:f4:1a:63:54:59:e3:a6:73:78:bf:
                    a8:7b:bd:19:48:ad:0a:9d:6c:38:ab:2d:24:ba:e3:
                    f5:e9:60:54:19:1b:78:53:aa:f1:24:13:0e:ee:92:
                    10:33:50:f5:1e:be:67:f0:63:eb:8e:d3:e5:71:98:
                    e2:32:8d:d1:f2:d5:83:ac:f6:31:11:51:40:03:fa:
                    f0:ef:38:86:12:5c:66:c0:e0:44:39:ce:3a:c7:a3:
                    6f:56:00:38:0f:91:1f:3a:75:95:46:80:41:41:2e:
                    69:c6:a2:c1:bf:e1:6d:64:22:ec:a4:5f:eb:31:6e:
                    30:ca:07:92:b7:2f:41:89:7d:19:82:eb:0f:da:11:
                    bb:9e:ef:e1:9a:b5:55:cf:61:62:9a:f7:ff:14:cc:
                    47:09:ce:02:bb:c0:01:db:55:55:6e:29:ce:0c:75:
                    56:e9:a7:4e:05:3a:0b:14:dc:47:f1:b9:21:a6:89:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:19:81:8E:74:DE:CD:49:A2:E8:11:2B:DE:35:46:4E:C9:40:DE
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:40:16:97:0b:bd:14:41:b2:cd:08:ed:9b:86:2d:32:a9:8c:
         f0:79:4a:51:56:a2:bd:d2:4f:d6:b4:8b:89:d7:48:64:08:ca:
         c5:8a:e0:4b:4d:40:48:6d:84:9a:8d:6d:e0:da:1d:fc:c0:a1:
         2c:06:1d:51:85:2f:0d:d5:bf:a9:f7:7a:d6:2a:81:23:e2:c5:
         cc:96:32:ea:dd:9e:cb:10:16:63:18:30:74:76:55:f8:13:30:
         5b:37:67:6a:ac:52:14:49:6b:74:eb:fd:e9:38:c6:e5:95:9a:
         a8:11:4c:2e:57:ab:99:3a:b6:4c:0a:68:a7:6c:f3:f8:99:0d:
         c6:ec:8a:23:40:c5:65:2a:7b:29:33:53:13:0d:15:a7:7d:86:
         94:66:0d:17:0c:e2:9c:a5:30:d5:31:fb:7f:73:cb:01:8d:eb:
         28:bf:cc:0e:f1:8f:d5:26:53:79:a7:89:1c:13:55:a4:bd:7b:
         5b:5a:9e:f6:59:6d:d8:2b:07:23:cf:99:c0:12:7a:62:18:9d:
         e2:d6:ba:40:6b:8b:03:a8:54:e5:21:af:d8:98:2a:ed:bf:c4:
         3b:ba:22:b7:86:19:65:79:33:a0:ad:64:94:47:7a:78:dc:32:
         89:2f:cb:7d:95:2e:94:fa:ad:a4:a8:24:35:75:39:ab:96:85:
         da:23:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----