Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft
File:                     8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft (raw, json)
Hash identifier:          q4ND+i7R+VY9tSxe+wNYgN96r+Dn+h7qnVHsxl1P4h4=
Subject key identifier:   3F:85:AC:0F:9F:E2:E8:90:17:24:67:15:DC:1D:FB:B6:97:82:1F:87
Authority key identifier: F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
Certificate issuer:       /CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Certificate serial:       018BEBBF36ADA7E6090DC868EA5CF76D0BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft
Manifest number:          0870
Signing time:             Mon 20 Nov 2023 08:00:58 +0000
Manifest this update:     Mon 20 Nov 2023 08:00:58 +0000
Manifest next update:     Tue 21 Nov 2023 08:00:58 +0000
Files and hashes:         1: 1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa (hash: BTPW9QUwWucbIWFIY1K1pWpIwWXE8Xobam01mgE83Wg=)
                          2: 8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl (hash: XHH/JhQXTrzhZhXC58Z92PeEs/PS0jvbTimrPCVTImU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:bf:36:ad:a7:e6:09:0d:c8:68:ea:5c:f7:6d:0b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
        Validity
            Not Before: Nov 20 08:00:58 2023 GMT
            Not After : Nov 21 08:00:58 2023 GMT
        Subject: CN=3f85ac0f9fe2e89017246715dc1dfbb697821f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:70:f9:58:6f:86:48:a9:ef:e6:fa:32:b8:
                    7b:87:b2:f5:30:83:e7:68:37:71:95:82:5e:18:c5:
                    07:09:34:d3:e8:25:61:20:c2:4d:98:ab:14:f2:6c:
                    d8:f7:01:79:64:cb:3b:f0:0d:48:d7:a5:8d:69:aa:
                    00:9c:84:05:54:06:e6:ce:49:37:9b:f1:2d:c5:f7:
                    1b:0c:59:87:9c:5f:b1:51:6f:1c:a3:17:63:1c:53:
                    65:11:ae:76:20:c5:11:12:99:a8:66:37:40:23:e5:
                    0b:3a:3a:31:25:00:e3:2f:24:55:4b:e3:81:53:30:
                    b4:87:37:75:89:78:fb:58:57:70:cc:70:8a:ed:78:
                    a6:45:03:db:ec:ba:b5:ae:25:22:cd:a5:d4:cd:df:
                    6a:07:51:55:b7:35:04:00:7c:30:23:de:ff:e4:68:
                    cb:0e:52:4b:15:66:14:56:53:10:49:af:40:1f:21:
                    60:a0:26:ce:e4:b5:70:4c:aa:9e:56:88:8b:a0:0d:
                    fa:92:7e:3e:8a:21:c0:f2:eb:6e:15:46:d2:80:d0:
                    8f:20:b1:ee:3e:b3:01:fd:33:bd:2a:84:c9:77:b2:
                    d1:90:42:c0:ac:a9:35:2d:1c:c9:a5:8b:ca:9d:52:
                    6c:c2:2d:e3:c8:c8:01:6b:c1:5e:8f:90:dd:a0:e6:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:85:AC:0F:9F:E2:E8:90:17:24:67:15:DC:1D:FB:B6:97:82:1F:87
            X509v3 Authority Key Identifier:
                keyid:F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:ad:83:aa:6d:c0:52:fa:8d:67:f9:03:de:ab:33:4c:bf:
         77:20:75:dd:e0:c8:f9:ba:ba:a5:a7:26:28:f9:0e:3e:96:e0:
         b4:c6:5b:db:92:eb:dc:da:fb:c0:09:54:e6:a4:b9:d5:57:6d:
         30:14:48:d2:d5:10:5a:02:25:87:d0:d8:d7:01:24:93:1a:b3:
         af:36:2e:1b:e0:cc:14:0a:00:3b:cb:ad:b7:ef:78:81:10:b7:
         9f:4f:67:3d:8b:11:4b:36:c5:4a:59:ba:ea:84:a7:99:9d:4a:
         cf:db:33:26:74:37:c8:1f:aa:0c:fc:ca:ae:28:19:69:2b:af:
         41:ae:be:01:40:fd:3a:70:d6:e0:12:2e:99:80:ee:7a:f6:de:
         95:8c:72:da:ec:8b:10:11:1c:93:2e:d1:8d:f5:4c:a4:df:ec:
         25:dd:d6:41:05:d1:af:70:46:df:78:1e:c3:7f:3f:39:b1:9a:
         40:b4:e7:f1:8a:15:cd:24:71:ad:8e:5e:46:af:08:0c:0f:7f:
         97:3f:5e:0d:f1:ab:b2:d2:9c:27:c5:db:a2:78:13:01:da:72:
         2f:0f:fd:49:62:24:ed:72:dd:99:24:32:8e:e6:bc:00:9a:08:
         44:72:c1:1b:29:88:da:ad:62:5a:97:a0:24:55:9d:20:ce:49:
         01:b4:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----