Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft
File:                     OciAWFNoXJlfPnXnf3-7NzQd4V8.mft (raw, json)
Hash identifier:          9/k0EI0Yk831lWM593y1Hk2Ls9Jz1kMeaCsoQPVDJp4=
Subject key identifier:   F7:70:9D:74:02:39:64:3D:55:C6:A8:97:BB:B6:1F:7A:66:42:64:CB
Authority key identifier: 39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
Certificate issuer:       /CN=39c8805853685c995f3e75e77f7fbb37341de15f
Certificate serial:       018BD56EBA719CBCE327C406A0332E2A5711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft
Manifest number:          0852
Signing time:             Thu 16 Nov 2023 00:01:25 +0000
Manifest this update:     Thu 16 Nov 2023 00:01:25 +0000
Manifest next update:     Fri 17 Nov 2023 00:01:25 +0000
Files and hashes:         1: OciAWFNoXJlfPnXnf3-7NzQd4V8.crl (hash: L1EfkGfEAFF5TWSamDCvFDo/DsLUgIgyRsysC/pwksE=)
                          2: o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa (hash: GNxjwGQ5Nvm/UFG6pZgPnzbnbekUAO/mUcFmfE7f5bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d5:6e:ba:71:9c:bc:e3:27:c4:06:a0:33:2e:2a:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c8805853685c995f3e75e77f7fbb37341de15f
        Validity
            Not Before: Nov 16 00:01:25 2023 GMT
            Not After : Nov 17 00:01:25 2023 GMT
        Subject: CN=f7709d740239643d55c6a897bbb61f7a664264cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:54:70:9e:04:0d:db:77:ad:37:82:fc:54:
                    cb:4d:72:fd:75:7e:0c:57:57:03:3f:e5:0d:3b:e4:
                    45:79:a4:dd:bb:bd:88:66:9f:64:b5:a2:d5:1e:e7:
                    89:51:d9:45:ad:e0:af:2b:49:de:3b:a2:a3:94:6c:
                    6f:43:cd:d3:42:f6:8d:35:c8:ef:3a:47:68:63:ef:
                    36:19:0a:04:55:fe:d3:5e:0d:5d:2e:6d:e9:4d:90:
                    42:ce:e5:9d:35:39:8c:c5:1a:71:96:b2:71:86:44:
                    54:9a:6c:9e:70:9c:59:bf:3d:12:26:b3:07:5b:fd:
                    36:73:f7:e1:b2:f0:89:48:15:ba:50:2c:2f:da:2f:
                    e0:8e:69:14:dc:6d:c5:b4:d2:48:e5:fc:d4:26:26:
                    67:34:33:d7:95:5a:8a:ef:95:96:9f:63:b7:73:f3:
                    90:41:af:a2:3f:06:8b:69:3a:bf:4f:f0:05:87:01:
                    9a:22:4a:8a:1a:4a:86:3c:c7:d9:c6:d2:e5:36:47:
                    ec:92:ba:e0:bc:d2:95:d8:3a:09:b8:f2:fd:d2:f1:
                    12:96:05:33:71:8a:bc:2f:71:ce:fc:3f:24:b3:4f:
                    a5:e9:a9:97:e6:bc:ca:4d:05:20:37:f9:9f:60:2a:
                    65:22:ab:ba:e1:ea:4b:92:6c:38:44:fb:fa:0f:17:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:9D:74:02:39:64:3D:55:C6:A8:97:BB:B6:1F:7A:66:42:64:CB
            X509v3 Authority Key Identifier:
                keyid:39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:2b:b7:fd:ab:23:76:39:c0:b2:b2:15:02:5d:35:69:d2:
         4d:b9:4e:78:4f:fa:fa:26:c3:c1:98:17:01:3a:78:db:f8:0c:
         36:49:f1:6d:cf:97:25:ba:60:9f:fe:f4:d7:ed:2e:b9:db:25:
         92:eb:79:8d:9c:67:4a:5d:75:0c:8f:58:67:6d:8f:3a:ad:97:
         c2:2e:5f:ae:98:79:9b:6d:d4:05:d9:a3:4e:45:c4:ca:7a:d5:
         43:ae:34:5b:bf:96:f5:04:5f:8d:7e:04:23:75:a6:c5:31:0b:
         23:04:ce:4c:76:46:2b:53:dc:ad:75:65:da:1e:82:23:d2:60:
         76:00:88:1a:4f:36:54:70:56:3f:3f:97:2f:12:b7:63:45:3a:
         5b:0e:33:17:26:79:b6:1d:af:26:63:bd:cd:9d:05:08:63:76:
         87:69:60:c8:b5:c3:31:b2:1e:cf:b3:97:ee:77:5e:5d:d0:8e:
         c3:53:d5:c5:41:0c:af:b2:58:e2:26:10:45:d1:b9:63:bf:77:
         4d:72:98:20:ca:50:fd:c4:3c:89:cd:f6:2f:fc:54:38:cc:2a:
         f3:1c:67:59:4d:1b:f8:e9:90:9a:44:77:04:02:2b:91:e0:b1:
         08:65:02:ac:9e:59:ea:1f:71:db:a4:3d:2f:b3:e5:25:5d:6a:
         bb:f2:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----