Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
File:                     aOB9dlla_NLSno068JyU1KDdg0g.mft (raw, json)
Hash identifier:          3DUV4Y1XgslzWQ5HfvigvRQJi9e36oD3faO8PD2GGFw=
Subject key identifier:   27:21:D2:91:ED:51:C5:EE:D5:68:A9:AB:88:0E:05:E7:23:95:C4:D2
Authority key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Certificate issuer:       /CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Certificate serial:       018B7F99C3BC4F4E8FFF7F02479C25F8A182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
Manifest number:          088D
Signing time:             Mon 30 Oct 2023 08:01:05 +0000
Manifest this update:     Mon 30 Oct 2023 08:01:05 +0000
Manifest next update:     Tue 31 Oct 2023 08:01:05 +0000
Files and hashes:         1: Z7h42EsS82P3uHOOrVEzI-smHHg.roa (hash: 2InEZGQijEE5Rp3VLs+zUfziH2NwSOeERYxQSPoTFos=)
                          2: aOB9dlla_NLSno068JyU1KDdg0g.crl (hash: GrRNBJtizroMOK1IVMj2Wzn0ZwF+bKIkbASh3nxh4h8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:99:c3:bc:4f:4e:8f:ff:7f:02:47:9c:25:f8:a1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
        Validity
            Not Before: Oct 30 08:01:05 2023 GMT
            Not After : Oct 31 08:01:05 2023 GMT
        Subject: CN=2721d291ed51c5eed568a9ab880e05e72395c4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:db:18:30:0b:75:2a:a4:41:c0:24:89:5e:
                    81:f1:f4:4e:89:4d:e2:88:af:30:db:8a:cd:40:1f:
                    98:f2:f6:aa:2c:1e:18:9c:87:57:54:a9:37:b1:5c:
                    58:d4:2f:b4:ac:68:ba:11:f7:d4:dc:82:0a:0c:ef:
                    d6:25:3a:33:37:c7:e6:e7:01:54:db:26:6a:30:4c:
                    ce:93:d4:e1:88:ff:2a:d3:65:a6:24:27:2e:96:01:
                    d2:1c:2e:7d:50:bb:f2:1d:92:d3:97:f6:40:cb:cc:
                    c8:46:0c:c8:48:eb:26:3d:09:f5:ba:c2:cd:d9:64:
                    d7:ef:6b:32:f0:51:93:ce:c4:75:c9:4f:f7:ff:21:
                    a7:8f:c3:09:63:39:7d:6c:31:b0:85:5b:72:f9:d7:
                    fa:3f:b6:ce:ed:43:02:24:e6:3b:a2:63:bd:77:6c:
                    8c:3d:53:87:52:7a:e3:1e:c9:f1:8d:1a:cd:27:e0:
                    a0:d3:2b:cd:73:d8:cd:74:14:10:7e:d5:67:b8:69:
                    31:c9:ad:66:a8:6a:8b:67:7d:3e:7b:9d:d2:ed:7e:
                    4f:4b:c7:26:fd:82:85:c7:52:8f:10:bc:c5:d8:a9:
                    23:56:36:33:28:07:70:49:d6:31:7d:aa:d4:71:32:
                    f9:b5:d9:98:d6:5b:7a:b3:0a:5c:81:4a:df:27:fd:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:21:D2:91:ED:51:C5:EE:D5:68:A9:AB:88:0E:05:E7:23:95:C4:D2
            X509v3 Authority Key Identifier:
                keyid:68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:c3:0b:74:a0:61:82:45:51:7d:8b:44:76:6b:3c:f0:25:
         22:02:d2:1f:ae:d3:12:40:b3:ad:6d:fc:bb:41:cc:8e:a5:f5:
         21:89:50:e6:9c:42:f4:1b:47:af:cf:34:fb:0d:03:59:44:cf:
         41:6c:a0:f4:6b:bf:2b:e5:39:de:d9:3f:55:2e:08:a4:f0:9f:
         f8:48:a5:8d:c8:10:8c:c0:fb:2a:0b:f2:de:b5:9c:76:e4:20:
         e9:47:ca:dc:ce:27:84:a2:74:9b:e7:fb:4a:f6:7f:d0:e8:72:
         6e:32:d3:de:7f:c9:9e:08:c4:54:1f:75:ff:bc:84:d2:32:2f:
         26:d6:1f:2f:70:21:bb:29:d5:6e:32:1c:99:91:05:e2:fb:5d:
         b6:0f:69:27:63:b8:87:32:d0:9e:8e:2c:0a:f6:80:ea:4d:d8:
         3d:f9:77:3f:7b:3d:23:ee:b7:eb:71:93:29:c4:7d:d2:6e:20:
         42:7c:67:e0:58:84:e9:a4:c9:7b:f9:30:33:97:68:68:da:93:
         b7:bc:dd:6a:0d:3e:cc:87:bd:61:f6:80:03:77:f7:71:93:2a:
         f3:7c:19:0a:0e:64:86:2a:e8:cc:d3:84:fc:a9:2f:63:ba:97:
         99:35:f7:50:ad:3b:bc:42:dd:b7:4a:00:73:34:b3:60:a1:2e:
         43:75:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----