Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.mft
File:                     CsA7EwoH4DCwg8ihqrv1oVwbBkA.mft (raw, json)
Hash identifier:          epf5Ob+v5FSJs6sFGgfRaop0ZiJmXpqKvdK3uEL9ZB0=
Subject key identifier:   18:DC:C4:E6:26:BB:A7:42:2E:E5:01:51:0A:61:37:4F:95:3D:C2:86
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Certificate issuer:       /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial:       018BCCA2ED738DA29D7FED38452BDCEF6EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.mft
Manifest number:          07EA
Signing time:             Tue 14 Nov 2023 07:01:51 +0000
Manifest this update:     Tue 14 Nov 2023 07:01:51 +0000
Manifest next update:     Wed 15 Nov 2023 07:01:51 +0000
Files and hashes:         1: CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl (hash: P2jTdhuT+D5FSxzxQSoxJV2jaeGNy5S2voZQFG1DBow=)
                          2: X7lUVnnI6AzFzXK_zjdFIpWFrQY.roa (hash: /XtQLTMU6qa2I03wRnMDyZ6KPA+RzqQSkxNk1owRazg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cc:a2:ed:73:8d:a2:9d:7f:ed:38:45:2b:dc:ef:6e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
        Validity
            Not Before: Nov 14 07:01:51 2023 GMT
            Not After : Nov 15 07:01:51 2023 GMT
        Subject: CN=18dcc4e626bba7422ee501510a61374f953dc286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:44:f0:5a:e8:ea:5f:5c:48:43:1e:95:6e:
                    11:dd:80:ad:af:73:81:c4:00:f3:e3:a0:90:56:e7:
                    15:55:f7:45:fe:28:e2:03:97:fc:c4:91:5e:57:a6:
                    17:7c:55:26:34:62:7a:f1:7e:da:bd:b3:bb:cc:26:
                    84:68:5f:62:cb:d8:2a:da:a3:41:c6:ca:98:43:23:
                    d3:37:75:3d:4e:e0:6e:e1:f7:c1:d0:e5:d4:a5:61:
                    69:b2:5c:98:9b:b1:c1:12:3d:90:99:03:37:b2:4d:
                    46:38:fe:1a:7a:4f:44:f2:3d:96:eb:3e:4d:f1:3a:
                    f6:e1:c0:0a:fa:a5:c4:7c:39:34:cb:bc:5f:e0:76:
                    d8:d3:49:1c:aa:29:84:02:bc:4a:c2:f3:91:79:25:
                    fc:bd:d3:10:61:fc:d9:61:2b:fa:41:b5:3e:40:2e:
                    4d:ef:d1:3c:0f:32:10:46:40:f6:f5:b4:b6:6e:aa:
                    b0:54:6c:b8:8b:94:85:3c:3e:ed:71:d7:41:81:d9:
                    8c:75:04:00:de:10:a2:35:b9:d3:ea:58:29:f5:75:
                    7c:b2:10:5e:0d:c7:5a:c2:98:4e:5e:1b:7d:50:aa:
                    c7:81:9c:dd:10:a3:de:84:da:6c:6e:76:7c:64:f8:
                    d7:76:c6:17:a6:81:be:d9:88:19:2c:88:dc:5e:e2:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:C4:E6:26:BB:A7:42:2E:E5:01:51:0A:61:37:4F:95:3D:C2:86
            X509v3 Authority Key Identifier:
                keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:9f:76:64:df:ba:45:34:71:d0:c9:3b:87:d3:7b:96:59:
         40:58:b3:28:42:1a:d4:17:ba:3f:b7:35:9b:e5:bf:ce:04:3e:
         a9:a2:c5:eb:b0:36:07:90:0a:e8:44:8d:3d:cd:68:96:ea:a9:
         ef:d3:dd:1c:80:f3:b1:8a:53:29:e8:97:62:bc:dc:7a:e5:0a:
         f4:96:ff:12:85:74:88:ed:36:e9:56:7a:61:e7:0c:57:c7:6d:
         b7:43:d8:b3:0d:0f:ce:8d:88:0f:6b:1f:ad:7e:c8:c2:d5:26:
         76:72:fe:ac:0a:b2:8d:17:3f:45:92:c2:41:1e:57:1f:f9:72:
         7c:10:6a:41:7c:75:b3:dd:82:d5:6e:13:d6:f9:b0:07:c9:cb:
         41:1b:22:35:7e:3c:7e:13:a2:eb:7b:8d:77:b6:51:60:85:fa:
         80:e9:e0:1d:b9:cf:f5:03:22:4a:ad:b5:63:95:f2:c1:ce:bc:
         5f:2d:f8:69:83:ce:9e:d2:a9:91:1f:a3:d8:fd:9b:ac:80:6e:
         07:61:52:d7:a4:8f:15:ff:7e:b0:2f:12:d0:57:e5:8b:b1:35:
         f9:79:5f:ad:0d:46:0b:b0:d5:61:48:07:4a:59:3d:60:a0:d7:
         f5:89:03:68:af:25:e8:5a:8b:bf:f7:f4:80:9a:29:de:9f:50:
         28:72:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----