Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft
File:                     McnvnL7oGvuiwEFDSlw6hVgsnLc.mft (raw, json)
Hash identifier:          yJczv7gbVqzeRj1Mu9U+e4/NnJATcfaNwqtLhUgIpXs=
Subject key identifier:   6E:77:6C:81:5A:72:21:8E:16:83:F9:0B:E9:A6:8E:77:29:E1:23:63
Authority key identifier: 31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
Certificate issuer:       /CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Certificate serial:       018C8C09608A51EE8DEDDE3CE7F35C7B5B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft
Manifest number:          0914
Signing time:             Thu 21 Dec 2023 11:01:13 +0000
Manifest this update:     Thu 21 Dec 2023 11:01:13 +0000
Manifest next update:     Fri 22 Dec 2023 11:01:13 +0000
Files and hashes:         1: DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa (hash: lUYaXHdvJXJs+h1m09JC56wuwoaQgQu6Zq9udZ+c8Kw=)
                          2: McnvnL7oGvuiwEFDSlw6hVgsnLc.crl (hash: kQGFsuFuOR1W0FUdSQ1mMicnGoaeihuEr3CP+AKckQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8c:09:60:8a:51:ee:8d:ed:de:3c:e7:f3:5c:7b:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
        Validity
            Not Before: Dec 21 11:01:13 2023 GMT
            Not After : Dec 22 11:01:13 2023 GMT
        Subject: CN=6e776c815a72218e1683f90be9a68e7729e12363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:82:56:0f:6e:24:ff:5c:57:83:62:c1:c2:
                    50:22:e1:e4:d5:6b:28:13:16:d8:98:d2:a4:51:08:
                    d5:9e:8b:35:e4:0c:38:bd:e7:4c:7d:82:5e:a9:1f:
                    61:06:d6:dc:03:0c:61:03:ba:10:6d:55:a2:9a:b9:
                    e4:1d:b4:45:3a:fb:cd:89:ef:f7:ce:74:0e:56:14:
                    8a:c6:3d:b4:b6:9c:7f:6f:ee:7a:2d:c7:df:53:38:
                    01:61:41:1a:32:ff:39:4f:a8:9c:d0:63:00:08:f6:
                    e5:6a:5e:9b:78:58:96:ff:57:66:b6:56:4a:61:93:
                    7f:29:56:d5:41:66:75:2d:ec:97:aa:1d:cc:f9:e4:
                    1f:63:31:84:16:bc:80:55:5f:68:20:19:95:94:78:
                    98:37:e3:29:fc:b6:eb:89:a1:fa:5a:32:66:b2:2d:
                    8c:aa:29:e3:87:3f:4b:0a:9e:89:98:e6:6b:0e:57:
                    3f:07:65:bc:e3:89:d6:ef:2a:6c:d3:59:49:af:56:
                    1f:f2:14:83:84:16:9f:a7:47:d4:16:9b:fe:d5:ae:
                    85:12:fb:fa:c1:91:ea:c4:47:9c:c4:d7:6c:fe:b5:
                    be:00:f0:0c:24:57:c1:91:a5:72:12:bd:32:6e:83:
                    4c:63:f4:4f:c9:57:c1:6e:1e:c4:f9:0e:97:2a:0a:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:6C:81:5A:72:21:8E:16:83:F9:0B:E9:A6:8E:77:29:E1:23:63
            X509v3 Authority Key Identifier:
                keyid:31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:69:00:96:c9:1b:89:8c:44:a2:a4:af:1e:88:95:0b:29:
         ac:da:5b:0f:a0:d1:42:25:eb:7e:f4:c5:78:82:d6:f7:7f:bb:
         9c:fc:33:68:6f:e8:b1:10:dd:d3:3d:ed:4e:ce:d9:13:c2:af:
         9a:c3:bb:d6:84:76:de:c9:64:95:f2:4e:64:c1:58:c7:d0:4c:
         4e:1b:d7:4d:3e:db:7d:d9:f7:62:49:28:1e:44:24:bd:31:23:
         7e:20:52:a9:31:0b:99:b3:72:30:c6:77:6e:e5:2a:b0:b8:d8:
         16:66:cf:f2:be:9e:66:84:e7:f0:74:d5:ce:63:36:79:5b:80:
         b9:98:a6:07:99:9c:a6:2c:18:c4:d1:95:7d:a2:9f:3f:bb:16:
         92:21:f4:2e:ee:27:e0:3c:ba:a3:59:e3:4f:49:9a:92:e7:06:
         21:82:1d:0e:21:e4:5f:87:c2:c1:46:b6:56:ef:26:e8:d2:c9:
         20:f7:ce:e0:4f:a8:50:04:49:9d:f5:4b:b7:5a:33:c6:a9:3f:
         f9:01:a4:65:03:61:26:6b:5a:bb:47:85:69:94:55:e6:bf:df:
         e1:65:52:e8:55:d6:c4:96:f4:18:df:e4:7d:c5:fb:fb:60:e8:
         da:5d:f5:aa:7c:bb:8b:b1:4d:44:b1:45:da:74:2e:f9:42:06:
         8c:35:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----