Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.mft
File:                     d_s-hrFHTbBKFcrg78N3PeS4Nbs.mft (raw, json)
Hash identifier:          yNmEsAKtSrD+zoSpeL4B9trtpPMhjS3tpdUNFJURnjA=
Subject key identifier:   CD:B8:21:74:E3:A9:78:E5:DA:47:6A:8C:97:96:CD:7B:50:67:11:B9
Authority key identifier: 77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB
Certificate issuer:       /CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
Certificate serial:       018A2560774792A8CA0E0C4A837AE91C41F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.mft
Manifest number:          0689
Signing time:             Thu 24 Aug 2023 02:29:53 +0000
Manifest this update:     Thu 24 Aug 2023 02:29:53 +0000
Manifest next update:     Fri 25 Aug 2023 02:29:53 +0000
Files and hashes:         1: 1-S7fI_PmwPpqLWMLqDtCGL9AdcU.roa (hash: 3KMYJuMsA/kmwK7xR+zxmouY3ebyv4RyceUwaDe3Iec=)
                          2: d_s-hrFHTbBKFcrg78N3PeS4Nbs.crl (hash: tJwuiMqm6IAixuwMZeUGrc1CLaciPIyPQOd87W8BGbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:25:60:77:47:92:a8:ca:0e:0c:4a:83:7a:e9:1c:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
        Validity
            Not Before: Aug 24 02:29:53 2023 GMT
            Not After : Aug 25 02:29:53 2023 GMT
        Subject: CN=cdb82174e3a978e5da476a8c9796cd7b506711b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:6e:d8:ac:d2:74:69:cf:1b:65:bc:0e:b6:
                    71:b0:df:8a:55:38:14:ce:a7:e0:f6:76:0d:39:19:
                    18:eb:d8:c0:c5:b9:ae:83:07:05:8b:23:8a:41:87:
                    d0:05:11:49:0b:ec:dc:85:66:21:49:9c:83:b9:8a:
                    79:cc:0a:e9:79:59:56:e3:15:fc:b4:62:d1:26:e0:
                    52:b2:db:ca:e4:e2:50:e2:a9:cf:aa:c8:ee:01:ea:
                    a8:4d:21:41:ba:b7:3d:88:ed:bf:60:a8:04:50:8e:
                    55:d4:21:45:68:89:a8:8b:2f:ca:c4:8f:06:22:cc:
                    9b:b9:3e:b1:3a:46:50:fb:a5:c8:1e:94:17:1d:88:
                    cb:a5:c9:6f:a8:90:32:9e:46:2c:2f:e4:4c:fb:19:
                    c2:9c:da:03:ec:65:d1:4a:b2:2d:2f:34:bd:57:88:
                    43:e7:e6:d8:b5:54:6d:1b:b8:27:72:83:54:6b:66:
                    47:1a:2c:a4:eb:61:bc:a7:e6:fe:39:10:84:f4:0c:
                    de:01:35:4a:f5:83:81:f2:de:c0:ca:63:d8:cd:59:
                    47:b9:28:e2:db:a4:bd:60:0b:d6:c5:c0:65:ca:cf:
                    d0:a3:0d:43:15:96:20:b3:ed:29:ce:bc:d3:66:66:
                    df:68:05:af:79:ea:03:01:95:c8:af:27:1f:53:e1:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:21:74:E3:A9:78:E5:DA:47:6A:8C:97:96:CD:7B:50:67:11:B9
            X509v3 Authority Key Identifier:
                keyid:77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:2d:37:87:87:5a:88:b9:ae:7b:dd:27:c7:c4:55:2d:39:
         9b:26:65:98:d2:38:6c:7f:ef:2f:ed:62:3c:bf:91:33:46:7c:
         ba:2b:bd:66:53:07:54:60:1a:f0:e3:da:ef:3b:97:dc:01:74:
         4d:e6:7f:85:c1:c2:34:17:8d:2a:05:7e:30:9b:09:76:00:83:
         96:d2:a7:17:2c:d9:a9:99:ea:b4:50:77:ab:fa:5e:84:bb:7e:
         b5:34:39:4b:fc:c8:68:a5:02:3c:00:1f:21:8a:e5:63:86:4d:
         90:17:d5:73:e3:87:d7:2a:87:42:71:39:db:47:3e:01:43:bf:
         81:d7:8e:67:4a:22:f3:92:46:54:71:31:61:b9:30:2c:32:90:
         9c:f8:53:e9:77:66:7c:3d:b2:20:8f:7e:69:45:4f:46:62:a2:
         79:01:44:82:f4:ca:88:5e:ca:54:52:b5:83:8d:d6:3b:76:b3:
         88:ad:d9:d3:4e:c5:5f:89:d0:c1:d1:d5:ec:b7:14:59:32:9e:
         21:d6:05:27:b3:c7:1a:6e:c1:17:8a:50:cc:24:97:d8:b6:17:
         e6:81:e9:57:1a:68:54:cf:d5:6e:61:ba:b2:bb:55:6d:e9:5d:
         c0:c4:bc:0e:e4:1b:14:ab:79:7b:61:bf:20:9e:9d:6c:4d:67:
         58:d7:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----