Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.mft
File:                     kP3z2Yt7EmS_ArE0-R7RS0s2FF0.mft (raw, json)
Hash identifier:          SB2xXRNHjX/fjtnDjPotgHuentlBv6fp/mKRIotKeY0=
Subject key identifier:   56:35:17:66:29:18:95:A1:B7:61:92:6E:1B:62:C1:46:CD:75:C9:3F
Authority key identifier: 90:FD:F3:D9:8B:7B:12:64:BF:02:B1:34:F9:1E:D1:4B:4B:36:14:5D
Certificate issuer:       /CN=90fdf3d98b7b1264bf02b134f91ed14b4b36145d
Certificate serial:       018C81177E8B46F50D91E4914F6FB5E19093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.mft
Manifest number:          083C
Signing time:             Tue 19 Dec 2023 08:00:49 +0000
Manifest this update:     Tue 19 Dec 2023 08:00:49 +0000
Manifest next update:     Wed 20 Dec 2023 08:00:49 +0000
Files and hashes:         1: A2H0J84BoQhwnO2H936igQ_dh50.roa (hash: 6PfmlzTF/20S3zJHK77uwvjBojIhif66FptSqE5Huw8=)
                          2: kP3z2Yt7EmS_ArE0-R7RS0s2FF0.crl (hash: iJ+DJqbl9xILsYaZavZ/1rTaAO21XpCo0OjlSP2OCDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:17:7e:8b:46:f5:0d:91:e4:91:4f:6f:b5:e1:90:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fdf3d98b7b1264bf02b134f91ed14b4b36145d
        Validity
            Not Before: Dec 19 08:00:49 2023 GMT
            Not After : Dec 20 08:00:49 2023 GMT
        Subject: CN=56351766291895a1b761926e1b62c146cd75c93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:b1:72:5b:f3:1e:e2:bd:9a:ed:60:67:7e:
                    32:76:cc:13:cb:0a:e3:bf:a4:4a:a0:a0:2d:41:0f:
                    2c:fc:22:5d:a6:0e:95:de:0e:f3:61:d4:19:3e:c8:
                    f7:e5:f5:91:4e:57:42:d7:5e:91:a1:b7:ff:91:38:
                    4c:8a:98:f9:fc:71:19:b6:d1:28:a4:41:c0:f8:20:
                    91:67:de:d9:fb:e5:8c:5f:b7:5d:e6:57:4b:ce:12:
                    f0:bf:f8:4a:8c:d4:a5:db:e6:92:aa:9b:a6:87:c6:
                    58:2a:4e:1a:40:96:69:a3:bb:3e:4a:7c:76:77:09:
                    60:74:c7:41:0b:8c:b7:71:1e:f1:35:cd:b0:ad:09:
                    9a:a8:cf:ba:f1:e0:02:ea:c4:2d:52:60:c6:69:ac:
                    44:dd:20:2e:62:e6:b4:b7:40:12:1b:7b:91:dc:b4:
                    18:65:02:72:24:fb:5d:f8:da:80:9a:1f:97:fd:10:
                    3c:b9:35:cd:cf:27:95:c0:04:ac:87:48:b6:44:93:
                    2a:af:aa:bb:61:18:0d:ff:4e:87:ed:e5:d7:71:91:
                    38:fa:15:a8:6f:7a:19:5c:d3:ee:11:4c:25:96:72:
                    06:3d:da:e8:38:da:a1:a4:c2:8d:aa:bf:d2:9d:63:
                    b6:b0:6f:11:8f:df:da:1b:39:30:4a:eb:39:4c:db:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:35:17:66:29:18:95:A1:B7:61:92:6E:1B:62:C1:46:CD:75:C9:3F
            X509v3 Authority Key Identifier:
                keyid:90:FD:F3:D9:8B:7B:12:64:BF:02:B1:34:F9:1E:D1:4B:4B:36:14:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e1:3d:87:d6:f8:03:29:26:d4:b5:fe:ad:5a:0a:7d:f4:0a:
         e9:ac:f5:8d:d9:24:3c:bb:36:1d:53:cd:5a:96:58:0f:1a:b4:
         dc:43:1e:11:1b:22:c0:61:f7:c1:c0:dc:a0:8c:83:1c:7c:bd:
         75:5e:06:b3:ff:fc:6f:e1:38:7c:de:79:09:58:0b:1d:01:3f:
         89:c6:40:cf:a0:42:48:39:d0:fb:72:e6:24:2e:9f:6c:bf:66:
         dd:3f:be:7b:39:7b:fa:22:b0:fb:eb:86:3d:f9:c4:b9:e8:d4:
         20:5c:de:9c:de:1f:c4:91:fe:7f:d9:6c:bd:7d:dc:9e:24:60:
         1c:96:9f:39:35:61:de:24:82:e8:50:c8:31:90:8b:45:19:ab:
         2f:85:e3:ac:0b:32:96:b1:69:37:c8:a2:d2:e6:1c:20:de:6e:
         b8:d6:dc:d8:97:4e:1d:31:d0:15:d0:98:54:a6:fd:c9:6f:73:
         a1:95:cb:1d:73:65:ef:b5:73:05:ff:fa:37:6d:9c:c6:00:55:
         cb:ec:74:8a:97:ee:a9:ea:9a:4d:bf:ab:99:1c:3e:03:49:da:
         ce:28:58:14:1d:ba:05:d7:cf:ce:bd:99:d1:92:de:48:23:64:
         15:05:20:ec:fc:92:36:34:10:54:b9:10:16:de:69:eb:77:a0:
         92:ed:ee:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----