Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.mft
File:                     CIHCbv12cfJy3E_n1D7MmYpcDPI.mft (raw, json)
Hash identifier:          U81CJrCNFZ8HtVjNeHFjbYob9xNtULQAWZkzTKKabaA=
Subject key identifier:   7C:96:4D:D4:C4:1C:5C:E6:53:58:B8:13:88:80:B5:EB:45:55:6D:11
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Certificate issuer:       /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial:       018A00A4CBE2E43620837C8565ED4A4B94D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.mft
Manifest number:          087F
Signing time:             Wed 16 Aug 2023 23:18:34 +0000
Manifest this update:     Wed 16 Aug 2023 23:18:34 +0000
Manifest next update:     Thu 17 Aug 2023 23:18:34 +0000
Files and hashes:         1: 8neLI-ezU85H4pa5K5u4Kk9o5TA.roa (hash: /3ZtQ6ErJ2RaAMyL4CFSYGnV3o9f1gA32yFx+xFlGR8=)
                          2: CIHCbv12cfJy3E_n1D7MmYpcDPI.crl (hash: CzAaHlkAuC47YKkNQ/HJc+4dQxpuSwWTytBzhixm01E=)
                          3: GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa (hash: vZKsH3v+CEUH8wNsPT59ekO+MKuXRzlgCRd9boAgfOY=)
                          4: MnxrFNK_9doXL9knG3LNoSIQjvI.roa (hash: hvR8gwpCFuEhOoWFad9QzsTJa8opC10OiEtDX5vypik=)
                          5: wWSlQtTQH67zEyhzDN0yCUOxJtU.roa (hash: 37qSjcZatIj/b24u/8P38OVgTxL5ssD6L18TjlHcHSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:00:a4:cb:e2:e4:36:20:83:7c:85:65:ed:4a:4b:94:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
        Validity
            Not Before: Aug 16 23:18:34 2023 GMT
            Not After : Aug 17 23:18:34 2023 GMT
        Subject: CN=7c964dd4c41c5ce65358b8138880b5eb45556d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:77:00:a8:62:f7:6b:d3:5e:d5:bd:0d:c8:
                    28:57:eb:9a:1c:ca:e2:1f:73:27:8d:33:93:b3:aa:
                    6c:90:ba:65:fa:e9:27:b5:ca:94:02:84:0b:ce:3f:
                    0e:49:e3:81:79:d3:ae:07:0e:a9:2c:a6:a2:41:ad:
                    1d:87:4e:3a:55:1f:e4:15:95:69:5f:7c:9d:77:2a:
                    0d:fc:44:76:a0:8b:a0:f9:57:18:57:f2:f5:35:0f:
                    3e:1c:d1:80:b1:30:ce:9c:c7:86:7e:d8:fd:75:04:
                    ba:cc:16:13:79:8a:66:95:62:36:1f:c6:f9:12:51:
                    24:1e:39:fd:79:48:19:d6:01:11:94:3e:35:c5:e2:
                    6b:49:01:1d:0d:4b:01:59:ab:88:b4:40:d4:3d:4a:
                    11:fa:5e:b6:5b:2f:c7:53:b8:5f:c2:1d:b9:62:31:
                    8d:a4:a9:af:8e:2c:5d:1a:57:eb:17:88:55:86:f2:
                    fa:9f:41:58:38:37:3d:4e:7f:46:66:2a:0c:d5:44:
                    fc:f6:88:65:09:5c:74:bf:a1:c2:92:3d:65:39:fc:
                    5d:01:62:dc:04:24:84:24:2a:de:63:53:d2:fb:8f:
                    54:2a:da:a3:c4:e5:ab:3b:2b:3e:6a:ba:a0:5b:10:
                    1c:a4:8c:bb:56:84:d0:20:00:0a:3a:b8:0f:62:7c:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:4D:D4:C4:1C:5C:E6:53:58:B8:13:88:80:B5:EB:45:55:6D:11
            X509v3 Authority Key Identifier:
                keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:75:8f:26:79:85:23:07:d4:a4:f6:75:be:77:d5:7e:a6:
         03:0f:1d:ec:41:65:e2:8c:06:ee:d8:0d:9b:d2:2a:80:37:f2:
         70:54:a3:89:92:28:45:a3:a6:e0:23:46:ff:e7:3d:3f:e2:e5:
         0f:2d:43:d0:58:61:59:ea:c4:66:b2:3e:ab:b2:98:e6:09:f7:
         a8:f7:a1:32:97:bb:42:c4:ce:42:72:8c:41:fa:b0:43:f2:df:
         47:8f:73:bd:88:27:71:86:66:b9:5e:b4:38:64:8b:b2:ab:d6:
         61:c1:d7:18:b7:d2:4d:62:8b:7b:2d:de:22:31:c1:0b:ca:4b:
         2f:5c:01:b6:f9:e1:e8:04:ed:a6:8c:03:1c:73:ac:91:5b:d9:
         8e:ca:71:65:4a:f9:13:b9:e9:c3:43:bc:70:d3:4e:15:0b:95:
         a9:41:4d:a3:93:56:9b:9e:cc:a2:2b:44:2a:12:32:61:28:7c:
         8e:ce:33:ad:35:31:0b:c5:70:5f:59:02:fb:ad:29:77:cf:d6:
         80:c7:2d:a2:dc:e9:fd:bd:2b:83:29:54:6a:1c:71:03:28:3d:
         fc:b9:af:05:1e:b7:62:97:d9:db:88:a3:c5:a3:ab:e8:aa:26:
         22:66:23:57:29:27:78:24:fe:dc:74:b8:52:b4:54:ca:e3:b4:
         24:1e:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----