Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.mft
File:                     N3jYbYFIXqRCELngVBN_2TXP7qg.mft (raw, json)
Hash identifier:          XHECi9UUNvCMc7CHnl7c0OYOLCTUO/97AbxMAWQELMk=
Subject key identifier:   7C:5A:A8:C8:F1:6F:37:7E:3F:B9:63:D6:44:B3:38:8D:81:03:D0:C8
Authority key identifier: 37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8
Certificate issuer:       /CN=3778d86d81485ea44210b9e054137fd935cfeea8
Certificate serial:       018B68DA64FBC43745447C97152BDE1ECA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.mft
Manifest number:          088E
Signing time:             Wed 25 Oct 2023 22:00:24 +0000
Manifest this update:     Wed 25 Oct 2023 22:00:24 +0000
Manifest next update:     Thu 26 Oct 2023 22:00:24 +0000
Files and hashes:         1: N3jYbYFIXqRCELngVBN_2TXP7qg.crl (hash: K2+z7hYcyE79h+4NF9neuPQD9UD/mzwIeMx6/UY9nww=)
                          2: V7CDG6Ndc1I_yf0-eNSsbxAkzVE.roa (hash: ucDiLxlGrN4qSel0cuKZXiO+AynriR+QWR0ztYVC+Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:68:da:64:fb:c4:37:45:44:7c:97:15:2b:de:1e:ca:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3778d86d81485ea44210b9e054137fd935cfeea8
        Validity
            Not Before: Oct 25 22:00:24 2023 GMT
            Not After : Oct 26 22:00:24 2023 GMT
        Subject: CN=7c5aa8c8f16f377e3fb963d644b3388d8103d0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:5d:b4:22:8a:62:c1:0c:f8:4f:d7:35:6c:
                    a9:40:06:34:84:a6:6f:45:d0:76:3c:33:81:42:6f:
                    66:b6:03:c8:1d:6d:b5:04:bd:d5:25:42:3a:45:4d:
                    25:bc:8a:15:19:24:a6:3a:2a:8c:a8:2b:ac:e2:f4:
                    fd:bd:96:89:b5:74:70:bf:4e:69:80:63:cb:a1:5f:
                    98:85:f7:53:34:58:8f:29:5a:6f:d0:46:69:2f:34:
                    1b:cd:29:aa:47:9a:be:85:d4:40:89:a7:5a:3c:80:
                    e0:25:49:85:a1:19:db:cc:32:6f:a1:f7:7f:ed:d5:
                    24:22:d6:c0:06:4d:ed:d0:e6:ba:15:22:5f:a2:6a:
                    96:49:86:2f:83:d9:61:10:a4:a8:d5:d4:2c:dc:0c:
                    19:6a:ec:ba:b2:81:b0:6f:c6:01:53:98:ae:c2:72:
                    a6:85:37:90:76:cd:c5:a6:55:af:50:25:42:57:1f:
                    16:20:26:24:df:15:55:ff:3a:29:05:18:be:2d:d4:
                    5e:27:de:a1:24:40:7d:31:fc:12:90:fa:07:e4:01:
                    ec:d6:f5:92:25:0e:81:82:bf:47:d2:08:75:84:8d:
                    a3:e7:b1:b3:db:e5:4d:f9:65:2f:22:2f:07:14:42:
                    a6:ed:3d:7b:b0:a1:3d:a5:9d:6e:0f:d4:05:51:59:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5A:A8:C8:F1:6F:37:7E:3F:B9:63:D6:44:B3:38:8D:81:03:D0:C8
            X509v3 Authority Key Identifier:
                keyid:37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:69:f3:6d:1c:ce:e9:45:91:b5:c8:17:ec:fd:22:e6:38:
         10:c0:be:d7:fd:84:0a:22:b7:d6:19:a3:88:93:c1:e7:8a:46:
         72:4d:eb:50:5b:ec:8f:21:6f:48:4e:b5:95:37:8f:d4:a5:bf:
         69:47:bf:50:fa:ea:1d:b1:f8:93:02:f4:ea:e4:d2:31:59:f7:
         d7:80:46:09:80:ac:00:9e:1e:de:74:af:7a:8e:91:26:b9:0c:
         54:20:b6:64:33:b9:04:b9:17:bd:0c:50:b9:e5:27:f7:b2:46:
         14:6e:0f:e5:00:98:bc:ca:3a:d0:0d:d8:97:5e:f5:f9:c8:c7:
         d1:25:da:1a:d5:d3:a6:90:3f:23:40:4c:d2:d9:7a:5f:b1:75:
         e2:96:8d:e6:83:83:9d:8f:55:24:eb:f5:9a:bf:50:60:11:04:
         51:e8:03:ea:9b:d8:dd:42:79:a3:1b:c5:76:9e:d8:7d:a7:98:
         ed:f1:03:41:3c:cc:61:da:82:b4:a1:0d:df:0b:6c:18:f2:19:
         0a:bb:81:d6:71:80:d4:ef:b5:7e:15:a8:2e:03:a5:0e:23:29:
         67:28:89:e0:6e:f1:6a:0d:cf:df:fd:9d:4d:19:88:38:ee:2c:
         ad:0d:9a:2f:07:8e:e8:e5:4e:bb:dd:97:55:cf:89:ca:67:7e:
         9f:56:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----