Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.mft
File:                     HfOOyuBCJf80eBGx03_bKj9uRys.mft (raw, json)
Hash identifier:          InN40W7pkPpOs+I5xoGVsprK8gSxtqIcjVhDwicyDgs=
Subject key identifier:   8F:39:E9:75:A7:00:97:1D:BB:C1:7D:F9:66:1C:FC:EA:E3:F5:86:A8
Authority key identifier: 1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B
Certificate issuer:       /CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
Certificate serial:       018BB9C093263B2BBBB9EC41E402E5BD03B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.mft
Manifest number:          08E0
Signing time:             Fri 10 Nov 2023 15:01:27 +0000
Manifest this update:     Fri 10 Nov 2023 15:01:27 +0000
Manifest next update:     Sat 11 Nov 2023 15:01:27 +0000
Files and hashes:         1: 4e8Wb-2SYjLdv1uQNCn_JUt5Zb0.roa (hash: CvGjJQcQMoaQeh5iK4AKn/25j5t/mxn5ZsukDo0obaM=)
                          2: HfOOyuBCJf80eBGx03_bKj9uRys.crl (hash: Gg3FmGWVT7iJKvSLurDCCvWTfmiBDpZS1kMIgajHu0A=)
                          3: cFp3sdqkWaZye6-airsIuIkzKv8.roa (hash: CM5ImIDnlwYBg3dxUK7lIP2gPi3oKOcpqM4ynF5YVkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:c0:93:26:3b:2b:bb:b9:ec:41:e4:02:e5:bd:03:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
        Validity
            Not Before: Nov 10 15:01:27 2023 GMT
            Not After : Nov 11 15:01:27 2023 GMT
        Subject: CN=8f39e975a700971dbbc17df9661cfceae3f586a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:b5:67:53:19:01:23:b3:38:ca:93:f3:2f:
                    bb:f1:96:81:0b:29:2e:f8:db:ec:e8:88:0d:dc:b5:
                    1f:b3:eb:6a:20:c0:d6:b9:c9:28:fd:f5:e9:2a:cd:
                    11:6a:e0:a0:2f:45:5f:67:c6:b4:d3:b3:b8:39:2c:
                    4c:0b:e5:14:95:b1:ac:b6:5d:d9:8a:34:59:8e:6a:
                    2b:ec:52:0c:af:1e:c4:c0:9e:9b:2d:8a:55:b2:ca:
                    01:81:7a:a5:81:17:4a:1c:57:d6:91:9f:c7:73:eb:
                    4f:37:76:fd:50:66:f3:a3:5e:44:af:2f:7a:58:ea:
                    19:4f:e3:55:2d:09:33:f0:59:18:ff:03:3f:34:f8:
                    8f:29:69:b5:df:da:f7:3c:b4:91:10:96:31:b6:e9:
                    75:99:ca:1b:38:45:78:fd:65:5a:6e:a0:6a:df:4f:
                    fc:49:c0:69:59:84:0d:f9:a6:26:fd:90:42:c8:0f:
                    95:03:46:0a:f3:c6:a1:0e:43:a4:53:6a:60:4c:f3:
                    cd:63:10:01:d8:da:33:2c:40:35:51:32:be:8b:90:
                    c1:db:89:2a:e8:73:b8:83:58:39:ad:0b:c5:0b:1b:
                    ff:fd:3e:18:6c:ae:c4:12:fe:31:59:ba:3d:69:c1:
                    61:e6:04:bb:9e:88:47:90:0f:1e:92:0e:2c:19:04:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:E9:75:A7:00:97:1D:BB:C1:7D:F9:66:1C:FC:EA:E3:F5:86:A8
            X509v3 Authority Key Identifier:
                keyid:1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:14:4b:f1:f0:f1:fd:2d:e6:0c:0a:ff:bd:18:41:fc:be:
         e6:08:cb:9f:0c:35:9e:77:68:9a:3f:54:b2:5c:3b:83:b1:43:
         64:4c:c0:ba:6a:bc:20:e7:fc:fd:9c:6e:78:bc:e3:93:23:67:
         b8:9f:7e:ab:38:ab:61:c7:ea:97:7b:11:f0:d7:db:18:3c:43:
         66:69:6b:93:a1:dc:4c:51:36:b7:82:a2:c5:d1:88:c5:68:e4:
         d9:d4:26:36:c3:94:36:da:49:bb:07:af:03:eb:9c:00:6f:19:
         61:0b:b0:d6:5a:0e:2e:26:52:eb:ab:0d:11:00:93:03:99:bd:
         16:b0:1b:96:25:9b:b4:f1:38:0c:03:77:22:dc:73:52:f7:23:
         fd:18:b2:10:2c:29:d4:02:e3:03:c2:1f:a2:50:ad:cf:6f:69:
         16:55:5c:a1:a5:2e:b1:19:ec:10:8d:5c:db:ca:72:fe:dd:ea:
         75:ec:14:2d:2d:ad:e2:f0:7b:ee:91:ec:a1:d1:65:b8:cf:b3:
         23:10:86:6f:61:7d:d5:cc:53:80:ad:ad:b2:28:86:2e:a6:a0:
         7b:d8:fa:81:1f:62:c5:f3:7e:4c:d8:d1:67:47:85:21:60:53:
         8a:ea:5f:92:27:f6:b6:2e:61:c6:dc:de:c7:e7:01:e5:b5:31:
         e2:cc:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----