Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
File:                     xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft (raw, json)
Hash identifier:          NKTwFzu4BUBTrko1D2AEvMOXjzjKzZGc7zqVJVDYpNY=
Subject key identifier:   56:E3:7D:E9:E9:96:1A:DC:88:A6:1A:74:C2:E3:4E:CD:9E:E8:04:B5
Authority key identifier: C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
Certificate issuer:       /CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Certificate serial:       018B6AC9954F2523276E2BD175BA6D123F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
Manifest number:          0865
Signing time:             Thu 26 Oct 2023 07:01:17 +0000
Manifest this update:     Thu 26 Oct 2023 07:01:17 +0000
Manifest next update:     Fri 27 Oct 2023 07:01:17 +0000
Files and hashes:         1: oTfXHSsIOWC9MxPLXaEGJUMvISE.roa (hash: ekfEyZcUv83nlna/OgZ0tjWLwL4zwzktE2oBpLb6y/w=)
                          2: xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl (hash: AVLhucxD3YnlOWaW9roXJ19OMCuFjYaFX+e8KkXsCv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:c9:95:4f:25:23:27:6e:2b:d1:75:ba:6d:12:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
        Validity
            Not Before: Oct 26 07:01:17 2023 GMT
            Not After : Oct 27 07:01:17 2023 GMT
        Subject: CN=56e37de9e9961adc88a61a74c2e34ecd9ee804b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:7e:82:d2:46:53:dc:43:2c:98:88:fb:58:
                    1e:1a:e7:ef:c4:60:b5:ef:0e:5a:ed:80:a4:e0:d6:
                    df:70:86:c5:f7:34:34:e9:b8:b7:13:ab:23:6a:b8:
                    db:92:b4:c2:79:50:69:e8:13:1f:bb:61:18:da:70:
                    b8:0a:31:00:13:e6:ed:cc:f5:fc:bf:af:d3:08:72:
                    91:a7:d1:38:49:da:b1:8f:81:7d:79:f6:27:18:ed:
                    de:95:1b:98:2a:81:8f:88:e0:45:7d:cc:8b:1d:f4:
                    e4:6b:1e:62:88:8d:52:cf:81:a9:47:0a:43:8d:1d:
                    68:78:0c:a0:e7:5c:31:6b:b9:5d:7d:38:8b:4c:17:
                    42:d4:4a:4a:51:3b:6c:b0:6e:f2:90:a2:00:20:a0:
                    5d:d6:73:56:f5:f5:09:17:ac:b0:dc:b5:b4:92:b6:
                    eb:ed:59:d5:d2:54:9b:55:b0:da:69:11:4b:c6:39:
                    61:6b:a9:62:53:14:70:0b:09:d5:74:d5:28:79:6c:
                    39:2c:80:61:2e:df:ad:9f:42:99:a7:04:2c:bc:0f:
                    16:a6:ae:78:85:c7:d6:ad:86:be:54:15:0a:65:2e:
                    45:54:f2:6f:b1:ad:5d:a5:3b:d6:d1:fd:24:1c:0e:
                    02:d4:b7:5f:04:17:a4:5a:15:ba:d1:13:57:88:0f:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:7D:E9:E9:96:1A:DC:88:A6:1A:74:C2:E3:4E:CD:9E:E8:04:B5
            X509v3 Authority Key Identifier:
                keyid:C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:1b:83:50:cd:e5:31:76:0a:20:bb:0e:7b:fa:99:f2:f3:
         1a:c5:e1:30:e9:ba:41:2f:54:ba:9b:86:13:b3:77:34:04:26:
         c4:18:bc:25:3c:56:5e:0a:63:b0:cc:31:f1:ed:bd:11:4b:32:
         4a:8c:8e:7c:2a:87:f5:2c:0b:e3:11:77:a8:85:31:98:d7:84:
         19:2e:c9:d5:99:7b:43:52:2c:34:89:8c:45:14:77:7c:6a:ea:
         7f:6e:84:30:dc:3e:3d:f5:61:79:82:42:c0:96:be:7c:02:40:
         5b:80:06:78:e3:d8:3d:a2:7c:59:c8:23:68:7d:7b:e7:31:36:
         5a:b2:a1:20:59:7a:a3:14:f3:3d:8c:c2:d4:4a:fc:fe:fc:62:
         4f:b3:68:64:ec:2b:58:9c:28:a3:5b:4e:d8:b8:3f:1f:f8:a0:
         33:e2:03:e0:4e:30:ae:52:36:b7:86:8b:01:02:be:7b:3c:84:
         36:c6:43:90:53:d3:ae:a3:e5:91:85:83:4d:f6:51:0d:98:c1:
         55:f2:2f:e4:79:cd:88:ad:e1:50:01:75:a8:a8:f0:09:04:ee:
         b3:99:c5:0b:db:2e:98:b2:8a:f2:dc:d5:93:b5:c3:cd:c0:58:
         01:dc:51:3e:b4:c3:a4:4f:5a:ac:1a:3f:9d:d4:75:c7:ca:db:
         94:1b:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----