Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.mft
File:                     I9r1eiErt_MgoiRvl5WVddDmjOM.mft (raw, json)
Hash identifier:          9RNlukQ7rokLH9mUus3sV87Bv4rSv0wWXo0fjrKuiN0=
Subject key identifier:   BE:C3:71:05:69:A7:B5:21:77:23:B2:15:C5:48:F5:5E:DC:6A:68:97
Authority key identifier: 23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
Certificate issuer:       /CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Certificate serial:       018BCBC73B87CC5DF60FE333CEA12A11E113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.mft
Manifest number:          088A
Signing time:             Tue 14 Nov 2023 03:01:53 +0000
Manifest this update:     Tue 14 Nov 2023 03:01:53 +0000
Manifest next update:     Wed 15 Nov 2023 03:01:53 +0000
Files and hashes:         1: GI885Z-m1RACko9lPly0YVkSREc.roa (hash: /cmbvf7kCKPvkybtpMt7uBUt52pUEmvXFktWORXATas=)
                          2: I9r1eiErt_MgoiRvl5WVddDmjOM.crl (hash: KLSmfT1AZ8tdMj+rBtxQxLOsKaiafcnLB1QG2jMaLf4=)
                          3: uoICBo65eEmYF6cWaUOArQYdW3k.roa (hash: ju//jbNHjZ4mE62/QP/B0PIUN6Ducw+lBBtTv9SpPkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cb:c7:3b:87:cc:5d:f6:0f:e3:33:ce:a1:2a:11:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23daf57a212bb7f320a2246f97959575d0e68ce3
        Validity
            Not Before: Nov 14 03:01:53 2023 GMT
            Not After : Nov 15 03:01:53 2023 GMT
        Subject: CN=bec3710569a7b5217723b215c548f55edc6a6897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:f1:6c:d9:cb:e3:43:c2:cd:3a:9b:c9:27:
                    fd:bb:f4:91:30:bb:9c:20:82:76:1c:49:a0:5e:82:
                    61:cc:aa:cf:e1:81:bb:fa:ef:f0:9b:69:b7:77:e7:
                    79:e5:4e:15:1a:15:b9:55:ca:15:3a:73:69:b0:86:
                    f7:80:d0:5d:da:03:dc:9d:89:74:c1:d3:0f:5d:6b:
                    66:c3:4c:18:34:c0:f5:8c:81:c9:08:dc:5c:96:b4:
                    96:a9:63:cb:eb:89:c2:b5:eb:61:ad:93:d5:bf:dc:
                    0a:a9:0d:8c:91:63:8c:88:5e:34:1f:82:49:8f:54:
                    0d:f7:11:8d:1e:2d:44:88:ae:e8:20:81:4a:22:56:
                    37:78:80:69:68:e7:08:65:14:c9:6d:53:4b:d6:4f:
                    5d:76:d9:98:6b:ac:7a:b5:3c:b9:f5:98:ce:a8:6c:
                    c4:e3:3f:1d:76:30:3e:7e:17:1f:64:cb:ed:f6:ac:
                    5c:af:b5:81:11:00:cb:3d:d7:77:40:78:4d:ed:d2:
                    29:0f:c9:bf:a6:d5:89:9a:65:2a:46:4f:d6:87:b7:
                    07:e2:ac:03:a1:e9:86:33:a4:64:1e:a6:ce:d6:c6:
                    c5:6b:a1:ec:26:82:07:b3:2a:7f:d7:6a:f1:15:a0:
                    76:80:c7:c6:5f:e2:ab:fe:d1:d3:b2:c7:cd:c9:4c:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:71:05:69:A7:B5:21:77:23:B2:15:C5:48:F5:5E:DC:6A:68:97
            X509v3 Authority Key Identifier:
                keyid:23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:ed:8a:31:4b:ce:b5:a3:37:41:45:ee:41:8d:65:e4:17:
         8f:60:37:ad:48:23:e7:25:48:b4:48:4a:a7:b8:be:45:74:49:
         4d:b7:ea:eb:52:ad:d2:5b:bb:07:dd:83:ff:27:e7:de:71:78:
         b6:5a:e2:a8:5f:99:2e:37:1d:4a:f5:a6:a1:4d:a6:dd:d1:ac:
         94:64:66:68:e9:45:e5:b9:0f:e0:5f:03:4f:97:4d:17:85:2e:
         14:d2:e6:df:39:fc:a9:8a:42:0d:91:85:56:4c:7b:8b:b0:f7:
         7b:99:cc:8a:1a:fe:be:d9:ab:3a:52:8c:10:4d:3c:46:10:29:
         00:82:ca:5e:fe:54:73:65:b8:71:e0:d8:cd:62:5a:17:65:3e:
         ae:df:34:ef:f8:3c:6e:12:d8:ae:ad:ad:9b:38:e9:b6:dd:b4:
         ba:b7:96:e8:96:27:87:58:71:e5:64:06:95:24:ff:bd:26:dd:
         a6:ae:6f:ec:54:6e:da:aa:aa:54:1e:2e:6c:1e:e6:7e:6a:5f:
         e7:03:e1:9e:4b:0c:20:bc:45:e8:41:b2:48:a6:75:75:29:f5:
         0c:3b:2d:c8:0c:57:d5:e0:0b:82:bf:ec:43:a9:08:19:6d:5c:
         21:dd:ff:12:6d:f7:d2:be:a8:51:06:ba:49:05:1a:8c:0a:65:
         c6:33:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----