Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.mft
File:                     CdUn-81xexMW7mTCg_3ibQ5bsVM.mft (raw, json)
Hash identifier:          WyIN+/+T4Nfiak4N/0lYtZAn/WMcpQKIHGHi5xl+ZNg=
Subject key identifier:   0E:6F:1C:E6:B0:93:C1:32:F9:FA:E2:BC:20:06:37:01:AF:6E:D2:94
Authority key identifier: 09:D5:27:FB:CD:71:7B:13:16:EE:64:C2:83:FD:E2:6D:0E:5B:B1:53
Certificate issuer:       /CN=09d527fbcd717b1316ee64c283fde26d0e5bb153
Certificate serial:       018BEBF5F41ABB3E466BA33F311336584EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdUn-81xexMW7mTCg_3ibQ5bsVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.mft
Manifest number:          0850
Signing time:             Mon 20 Nov 2023 09:00:46 +0000
Manifest this update:     Mon 20 Nov 2023 09:00:46 +0000
Manifest next update:     Tue 21 Nov 2023 09:00:46 +0000
Files and hashes:         1: CdUn-81xexMW7mTCg_3ibQ5bsVM.crl (hash: 49Dx/RCq7Zu3vneSdXkQhZLHqs29H6Vz8Q1PHxKBowM=)
                          2: YVx3H3hKyUWAxWA7hex1goyGmck.roa (hash: HgoG98u5oneZCgNm7+AmyIA5OmSG8JOlh9t4IonA/Zw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:f5:f4:1a:bb:3e:46:6b:a3:3f:31:13:36:58:4e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d527fbcd717b1316ee64c283fde26d0e5bb153
        Validity
            Not Before: Nov 20 09:00:46 2023 GMT
            Not After : Nov 21 09:00:46 2023 GMT
        Subject: CN=0e6f1ce6b093c132f9fae2bc20063701af6ed294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:d2:d8:64:29:a9:b7:3d:01:7d:25:37:f9:
                    74:12:ce:01:0f:de:72:89:f8:c5:80:ba:84:20:c1:
                    43:53:04:02:c2:96:ad:60:92:05:f9:2e:28:4f:eb:
                    78:05:b0:d7:fd:54:6e:33:e8:69:30:61:3b:ec:0e:
                    bb:59:b0:03:5a:66:4c:6b:f5:bf:05:bf:b7:33:fa:
                    fb:bc:f1:30:10:bc:75:75:b3:9b:a7:e5:f8:65:62:
                    a6:59:ff:fd:b8:b1:05:ed:90:62:ba:42:34:7a:64:
                    42:38:9d:b8:f9:5c:fb:4e:fa:a3:58:53:8d:3f:ba:
                    23:6f:24:10:31:84:3c:7f:92:c7:8c:cb:58:1e:66:
                    25:33:be:b6:85:7e:1a:0a:e7:41:e3:62:75:f7:1b:
                    27:42:e4:cb:bd:2f:b6:9f:58:81:0b:e5:2a:d7:65:
                    d8:b7:e1:61:82:ad:56:11:5e:68:59:84:ea:43:ad:
                    01:3f:ee:db:59:be:5e:4b:e1:fa:cc:3d:68:47:44:
                    62:23:22:06:e3:b0:85:3f:e7:ad:be:36:fc:06:c7:
                    33:fe:9d:d2:24:72:f0:5e:10:6a:5a:79:5e:54:ed:
                    79:b3:46:d3:9b:d9:5e:8f:9d:91:5d:87:1b:27:08:
                    9a:3f:70:04:c2:c5:86:07:35:65:ea:bf:dd:95:b2:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:1C:E6:B0:93:C1:32:F9:FA:E2:BC:20:06:37:01:AF:6E:D2:94
            X509v3 Authority Key Identifier:
                keyid:09:D5:27:FB:CD:71:7B:13:16:EE:64:C2:83:FD:E2:6D:0E:5B:B1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdUn-81xexMW7mTCg_3ibQ5bsVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3d:82:43:8a:82:bb:b7:e1:c4:2b:da:33:1b:eb:54:77:ed:
         ff:6b:52:b1:15:74:b7:7d:fd:b6:68:df:ec:27:bd:91:a7:37:
         7b:bb:5a:e7:b0:d7:50:57:d9:11:8d:e5:bf:2b:19:d4:40:05:
         0f:a5:4e:dc:43:64:0c:a5:d0:57:83:e5:96:d0:d0:cb:e7:7d:
         0d:98:4d:2b:9e:c7:99:a8:82:23:c9:c0:7b:8d:c7:33:9c:65:
         b2:54:b1:dc:c2:43:04:b2:44:27:4d:df:49:45:19:7d:95:5f:
         b4:a8:08:21:06:df:bd:90:35:24:a5:3f:15:03:fc:fc:fa:16:
         5f:3e:bb:f6:06:aa:27:9e:2d:46:29:ec:bf:fa:71:cb:19:01:
         4b:04:01:ae:43:c0:e6:7f:b2:6c:68:95:b4:bf:7c:52:65:96:
         9b:f2:9b:e8:de:3e:5f:d5:d0:c2:5f:40:c4:49:35:ca:6e:71:
         a0:11:9e:30:b7:d6:9b:b2:7a:8f:1c:f0:bd:f4:05:a0:98:76:
         e1:f9:e9:1e:a5:6d:e4:72:87:94:04:de:f8:cd:16:5f:12:ec:
         04:71:88:e2:ab:5c:55:7e:62:b1:13:c4:23:17:4e:7c:d8:29:
         6c:59:cc:b8:f7:53:50:51:f5:5a:2a:a8:59:a3:e9:b1:78:66:
         08:33:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----