Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.mft
File:                     sge3mEfSLuhW3V2s9KuekOJN5uQ.mft (raw, json)
Hash identifier:          g/U6snHDigASmjX1y4JM6XczgFra/zEHTaD4uMyDhrU=
Subject key identifier:   50:86:DE:82:A4:2B:5A:76:B6:97:D9:49:EA:03:09:F7:2A:71:BA:8D
Authority key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Certificate issuer:       /CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Certificate serial:       018C0F5D9DCDBA5F60F738C25663803E9535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.mft
Manifest number:          0728
Signing time:             Mon 27 Nov 2023 06:00:42 +0000
Manifest this update:     Mon 27 Nov 2023 06:00:42 +0000
Manifest next update:     Tue 28 Nov 2023 06:00:42 +0000
Files and hashes:         1: Hn77aVVMGm2OdgFEQTkZ70tWeJk.roa (hash: VuXNd28V3fmdgExA7L5xnoAKeDPnzhgzMbH1NwV+lrg=)
                          2: iN43kPXylNDX3a4dBRBwOKkS994.roa (hash: q5wbuJLHW7HZNvvoCWNT8esMdp3ZHlTu6p3vfFm8fRo=)
                          3: sge3mEfSLuhW3V2s9KuekOJN5uQ.crl (hash: JQWFGJ5WlOnidAf5cZ7b8mYhiYFgYKZ7dFxo/GhdfWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:5d:9d:cd:ba:5f:60:f7:38:c2:56:63:80:3e:95:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
        Validity
            Not Before: Nov 27 06:00:42 2023 GMT
            Not After : Nov 28 06:00:42 2023 GMT
        Subject: CN=5086de82a42b5a76b697d949ea0309f72a71ba8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:3c:e6:43:02:dd:a0:08:ee:5f:b4:4f:ba:
                    fb:6e:e3:ed:cd:df:ad:90:02:3b:a9:54:a2:9e:89:
                    cf:46:eb:19:ae:fe:c5:48:e6:ea:10:c5:56:9a:69:
                    bb:3f:c9:4c:99:c1:f9:17:48:27:6a:1e:c8:15:9d:
                    5a:47:8f:72:75:01:16:b5:87:4b:b1:bb:b6:69:8d:
                    4a:ce:90:56:00:2f:8b:61:e5:1d:fd:c3:53:1d:b8:
                    2e:7b:b5:55:a8:8d:47:ae:94:d9:a5:ea:cf:58:1a:
                    6d:db:15:17:ba:b8:2b:0b:83:75:28:56:3a:34:73:
                    57:83:e9:c4:f3:a6:a7:06:f0:e5:f5:84:68:40:12:
                    e7:9f:f7:19:85:53:74:63:0f:b6:9d:53:b5:f8:71:
                    3d:b5:43:65:25:18:86:d6:49:97:c0:ca:ad:1e:ca:
                    a6:20:e7:ef:2a:d6:b1:cf:09:65:ac:56:c0:e5:6e:
                    c0:e7:63:d7:c4:bd:7f:5d:0f:28:0e:50:b1:7a:4e:
                    70:76:35:ee:e7:01:f7:01:16:0e:2e:aa:df:72:42:
                    7d:40:4b:6d:86:e4:38:46:86:54:48:44:d3:42:68:
                    5b:06:de:3c:bb:19:b8:7c:79:82:d3:d8:f0:38:d3:
                    c0:d6:0f:32:54:97:cc:12:6c:d6:b1:31:de:3b:fe:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:86:DE:82:A4:2B:5A:76:B6:97:D9:49:EA:03:09:F7:2A:71:BA:8D
            X509v3 Authority Key Identifier:
                keyid:B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:52:40:13:b2:96:5c:45:54:85:a0:f5:57:4c:ed:0d:eb:
         18:90:f4:f3:44:b7:c1:0e:39:b6:8b:fb:46:d6:cc:a1:51:71:
         80:11:c2:f6:de:d4:07:fd:49:30:05:c1:21:7e:c5:e6:39:e5:
         b8:9c:37:6f:3b:cc:83:7a:98:c4:81:e1:02:ed:47:53:26:6e:
         2a:b3:37:43:83:66:45:17:19:4a:52:44:18:22:a7:e9:e4:5d:
         e4:36:65:ca:52:6e:4f:f9:3b:0b:68:a7:57:18:89:ed:dc:1c:
         c5:90:9f:63:ea:2c:10:2f:c9:87:b3:ec:87:47:38:a2:bc:a7:
         eb:3e:69:1a:99:8e:a3:64:8e:0a:ae:a0:9d:6c:73:44:55:2d:
         1c:a4:07:a4:94:ca:d2:bc:fc:bc:58:33:9f:7c:5f:86:6e:fc:
         d9:39:91:1a:b9:71:ca:01:03:4c:eb:f6:6a:fa:1e:7b:47:5a:
         51:39:e7:90:41:6a:bb:fd:92:1e:7d:a7:36:ae:c8:d6:06:a2:
         ed:2f:eb:99:8e:85:e3:17:91:79:1f:a0:99:f4:53:59:83:04:
         24:7a:38:ec:86:6f:c1:10:75:94:d9:cc:db:f2:6c:5c:40:d8:
         94:fd:88:8e:19:cd:22:8c:c0:6f:41:3d:e5:5c:3c:6a:4e:e7:
         61:ae:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----