Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/Dijjc7CWOYFFRSr2JyEK4eNqeII.mft
File:                     Dijjc7CWOYFFRSr2JyEK4eNqeII.mft (raw, json)
Hash identifier:          m7v+Ewr6d4nScz/s2ENidtqjC6n4+Gg6gepZI+TvPpc=
Subject key identifier:   C0:A9:9B:C3:91:9C:F8:44:01:EE:D2:CB:D9:32:0C:FC:C1:44:DD:E8
Authority key identifier: 0E:28:E3:73:B0:96:39:81:45:45:2A:F6:27:21:0A:E1:E3:6A:78:82
Certificate issuer:       /CN=0e28e373b096398145452af627210ae1e36a7882
Certificate serial:       018CB3BBB256EA1EECA3AA500EF948D122DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dijjc7CWOYFFRSr2JyEK4eNqeII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/Dijjc7CWOYFFRSr2JyEK4eNqeII.mft
Manifest number:          0835
Signing time:             Fri 29 Dec 2023 04:01:11 +0000
Manifest this update:     Fri 29 Dec 2023 04:01:11 +0000
Manifest next update:     Sat 30 Dec 2023 04:01:11 +0000
Files and hashes:         1: Dijjc7CWOYFFRSr2JyEK4eNqeII.crl (hash: isL8si0Ar2JDJ0RM2BsTwGHF6WDvLkbvY4x7kOJqwas=)
                          2: h0R_wKitpMGXo9SXK9Re-l8yEf4.roa (hash: 3W/hf5v8+9Flm8Ajhhv3m5Lyt/VzXu51DhiFQ9h2U4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b3:bb:b2:56:ea:1e:ec:a3:aa:50:0e:f9:48:d1:22:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e28e373b096398145452af627210ae1e36a7882
        Validity
            Not Before: Dec 29 04:01:11 2023 GMT
            Not After : Dec 30 04:01:11 2023 GMT
        Subject: CN=c0a99bc3919cf84401eed2cbd9320cfcc144dde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:91:27:64:b4:f6:2d:f6:3b:01:d1:f5:8f:
                    25:03:91:21:33:58:10:8a:aa:2f:27:9b:25:75:36:
                    e1:ec:6c:c6:ca:aa:26:e2:29:11:51:51:41:8e:26:
                    fe:5a:9a:b7:e4:79:7a:28:ce:91:52:7d:01:e1:88:
                    dd:ab:01:be:26:7e:da:c9:86:02:39:a3:4e:f8:44:
                    29:5f:7b:96:e9:38:11:29:3b:db:a3:c2:f3:33:4e:
                    e6:7c:b2:0a:66:61:0b:df:77:47:e5:77:6b:72:d6:
                    b4:25:84:39:6a:4a:54:60:e1:61:cd:17:11:28:33:
                    12:b6:6a:66:8b:c9:63:44:a4:97:2b:52:76:c7:c5:
                    7a:6e:49:3e:e6:00:bc:7f:68:df:ef:5d:88:69:9c:
                    60:dc:90:e3:5d:65:5b:3c:d7:08:63:7a:92:ee:ad:
                    9b:51:7c:2b:68:c6:86:cf:4c:9e:e1:b2:a7:f9:fb:
                    75:6e:52:8d:a5:83:7b:e9:cc:a1:35:f9:06:d0:d1:
                    27:32:63:81:25:e0:a3:42:9b:7d:4d:16:3a:db:aa:
                    b6:ee:bf:24:dd:5b:7f:ea:34:a3:35:45:5a:bb:f7:
                    4a:db:7e:80:ad:86:d9:9f:b1:5f:d8:83:9a:f7:8c:
                    4e:94:38:7f:f4:c3:af:4e:16:78:af:78:86:e6:02:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:9B:C3:91:9C:F8:44:01:EE:D2:CB:D9:32:0C:FC:C1:44:DD:E8
            X509v3 Authority Key Identifier:
                keyid:0E:28:E3:73:B0:96:39:81:45:45:2A:F6:27:21:0A:E1:E3:6A:78:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dijjc7CWOYFFRSr2JyEK4eNqeII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/Dijjc7CWOYFFRSr2JyEK4eNqeII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ac66d-e5ed-4761-b728-9409d67a8579/1/Dijjc7CWOYFFRSr2JyEK4eNqeII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:8e:ba:ac:15:f5:02:49:e0:7f:3f:04:68:f7:38:a2:57:
         51:2d:6c:4c:db:4b:bf:79:5f:1c:55:69:b0:8f:4a:b2:9b:b7:
         3e:25:0b:b3:94:55:f8:fc:a0:14:83:2b:cc:0f:3f:96:79:86:
         f3:ea:ed:3d:69:38:a5:24:40:77:26:b7:02:2d:7b:26:f8:e8:
         60:01:a1:0d:29:0f:fb:66:dc:f0:42:39:3a:18:fe:b5:f1:f4:
         b6:85:50:64:b9:ea:5c:00:ab:9f:70:4c:3c:92:8d:b1:77:24:
         ce:ca:09:cc:d2:d4:25:c5:7d:fa:1d:7c:04:ef:b5:12:73:3c:
         67:c4:a6:25:3b:15:25:97:45:8c:db:86:cf:3e:5b:dd:e0:5b:
         49:6a:e5:69:98:7f:68:71:47:34:f8:58:0c:fb:8d:9e:47:34:
         46:19:7e:46:23:61:82:35:ac:ac:f7:da:02:d3:c6:a7:eb:c0:
         02:5c:33:83:24:72:2a:97:34:85:4b:c9:eb:8b:a0:30:7f:74:
         2d:01:79:88:bd:e5:52:50:8d:a3:a6:94:33:8a:e2:98:b8:b0:
         9f:4d:e3:6b:7e:57:5f:c6:87:58:18:cf:c5:34:a9:c2:e6:a3:
         da:45:b3:cd:d1:04:0c:d6:2d:14:1c:a1:e0:75:e3:4f:6e:07:
         7a:d8:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----