Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft
File:                     UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft (raw, json)
Hash identifier:          3vmY9iPCJytY+qGwGEX95ywlNEb1pyqA04eqQI6oP1s=
Subject key identifier:   AE:9F:CA:38:1B:69:C1:A7:38:66:5D:C8:C5:1D:90:49:A8:1F:DA:51
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Certificate issuer:       /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial:       018BB8407116235A8AB494A6A0CF940C72D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft
Manifest number:          0857
Signing time:             Fri 10 Nov 2023 08:01:52 +0000
Manifest this update:     Fri 10 Nov 2023 08:01:52 +0000
Manifest next update:     Sat 11 Nov 2023 08:01:52 +0000
Files and hashes:         1: UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl (hash: WcjPrsgaHCtRllsI8JewmNaWSx2i/PwKIjFsmt6Z9rc=)
                          2: kq3_sk-tVKpLAbA9pGIiFOisIvg.roa (hash: 36azHWPYAQ1qa0xUFqT7VwZ3JF/+wLICyS+j8RRJMBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:40:71:16:23:5a:8a:b4:94:a6:a0:cf:94:0c:72:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
        Validity
            Not Before: Nov 10 08:01:52 2023 GMT
            Not After : Nov 11 08:01:52 2023 GMT
        Subject: CN=ae9fca381b69c1a738665dc8c51d9049a81fda51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:83:f4:a5:f9:64:96:f6:19:dd:94:cb:a2:
                    7e:4d:a9:e9:8e:bf:00:e0:bc:6c:1d:29:b9:6a:5d:
                    38:84:d7:9e:f3:14:e5:e3:89:60:79:cd:da:a5:c6:
                    62:4f:72:5d:3b:05:d1:ba:9d:e4:57:8a:32:52:88:
                    fb:46:e6:ff:5b:ad:b9:5b:59:1e:5b:36:86:5c:63:
                    58:7e:90:fb:77:44:66:5c:f8:01:d7:96:87:fb:e1:
                    b2:ee:35:e7:19:a0:00:29:1c:9c:72:cb:19:81:78:
                    79:f6:98:31:d2:e1:3e:48:c1:c7:d8:e7:93:c5:78:
                    f5:da:cd:46:45:50:0d:23:37:46:a4:ad:f1:96:3b:
                    11:88:22:32:b1:fd:24:bd:b6:83:a7:b7:eb:6c:0a:
                    5e:44:b7:d4:f3:b8:d7:9c:45:02:6b:5b:41:f7:0d:
                    d9:4f:3e:16:34:a4:13:c6:a9:eb:11:e9:35:90:24:
                    f7:ac:2d:c9:03:8c:c5:10:53:1a:9e:64:7d:a7:81:
                    71:7f:7e:4a:98:ed:9c:ab:bf:f6:6e:97:90:8b:30:
                    3d:0d:87:5f:2c:09:b4:c2:8d:5d:72:6e:ee:52:20:
                    a3:5d:26:98:cc:d0:9c:e3:0e:08:64:54:82:7d:1e:
                    73:cb:df:b9:d6:8d:6d:9d:bd:e8:1a:49:11:f5:df:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:CA:38:1B:69:C1:A7:38:66:5D:C8:C5:1D:90:49:A8:1F:DA:51
            X509v3 Authority Key Identifier:
                keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:78:e9:ba:02:73:3f:c5:7e:33:1f:f7:86:e7:3d:26:d6:
         21:4f:95:13:92:1d:c5:f9:3d:02:d5:63:22:1f:55:9a:52:3d:
         c9:37:a7:3e:c1:d6:75:05:26:67:60:df:4c:63:ee:02:d3:39:
         7a:a1:2f:4a:16:ab:e5:9c:55:9c:59:1f:de:55:60:1c:53:c0:
         d3:6a:90:23:b3:0a:28:cb:8a:0c:7b:8d:aa:95:2e:f3:56:75:
         a6:50:f1:8b:a4:4c:8a:dc:c7:7d:18:34:15:36:8f:93:e4:18:
         79:be:4b:48:5f:d0:f3:67:06:90:fb:1e:ad:28:d8:e4:17:c8:
         59:d1:05:75:f6:75:dd:53:c4:03:96:b0:8b:a7:ce:68:f9:c7:
         a1:03:74:f2:07:a5:75:68:20:a3:73:c9:52:1d:ad:29:0b:e6:
         60:d9:c4:77:6c:ea:63:5a:05:3c:13:4e:5c:e0:8a:59:01:73:
         33:5a:7e:d6:d2:98:b6:bd:ac:50:78:1a:eb:2b:55:29:ce:88:
         c8:00:96:4c:c6:c2:09:74:64:7f:2a:4f:90:b7:5b:e0:ed:4b:
         07:5c:b8:87:32:43:4a:b9:e3:6d:a9:63:75:3e:0b:ec:df:5a:
         14:51:5a:56:0f:56:eb:48:f1:ac:eb:87:40:33:a1:8f:b0:d4:
         9a:3c:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----