Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft
File:                     ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft (raw, json)
Hash identifier:          doMyDbhBIBEIbmqoeEaj9aJZzJILPB6kFmE3t239PBU=
Subject key identifier:   D9:F8:92:0C:2E:93:25:94:AC:62:39:02:E3:AE:F3:1F:12:61:C7:F1
Authority key identifier: 9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
Certificate issuer:       /CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Certificate serial:       018AA71863FA3257653654575C3E0703A720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft
Manifest number:          0867
Signing time:             Mon 18 Sep 2023 07:01:48 +0000
Manifest this update:     Mon 18 Sep 2023 07:01:48 +0000
Manifest next update:     Tue 19 Sep 2023 07:01:48 +0000
Files and hashes:         1: ngqC7Hjo0AUwjlO7bR3E21jnAU4.crl (hash: HJoNbohHgrwB4YV+7bv9LSQm4Qv3Oi3xbjtREc+qCoI=)
                          2: zbRlpr1CfNLzgdm1-uM9D38FqEA.roa (hash: NkvJ4ulvpfu72bCxp06EElCh0B0QX0ncaWQ9WOkoL9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:18:63:fa:32:57:65:36:54:57:5c:3e:07:03:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
        Validity
            Not Before: Sep 18 07:01:48 2023 GMT
            Not After : Sep 19 07:01:48 2023 GMT
        Subject: CN=d9f8920c2e932594ac623902e3aef31f1261c7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:f2:25:35:07:77:4e:57:f7:db:2f:3c:9b:
                    c6:8a:29:e7:7e:91:50:40:bf:48:f7:32:0b:af:3b:
                    a5:a4:fe:9f:9c:7c:2b:98:ec:4e:39:86:db:44:47:
                    41:85:bc:3d:43:43:d0:89:5e:9f:38:73:5e:69:8a:
                    71:69:04:40:75:ed:44:04:79:ce:49:3f:84:24:b5:
                    49:6e:18:28:3b:85:74:85:56:a0:ed:37:c6:4c:5d:
                    bb:96:31:bd:f7:13:b5:f6:73:d0:7d:85:9c:8c:84:
                    ed:22:77:b0:62:7e:1e:18:53:61:2d:51:da:1d:e1:
                    ab:01:ac:fa:99:8b:4e:15:28:8c:ae:47:ea:9e:50:
                    38:cb:05:b4:0a:49:be:c2:60:ce:2f:23:7b:cf:3c:
                    2e:f2:a8:19:c9:ba:e8:f9:13:66:09:68:2a:bc:0e:
                    03:ad:69:0a:8c:66:50:41:4f:6b:04:7b:d6:18:9d:
                    1e:ea:c8:d4:cb:b2:a8:ce:56:61:a5:69:a0:2c:c9:
                    57:62:ab:d1:ef:bb:69:25:a2:1a:77:7a:d2:0c:60:
                    ba:6c:82:07:cb:37:54:09:23:81:38:26:10:7f:4c:
                    e5:ae:f1:e4:3b:51:9c:52:2f:e3:f8:51:38:84:b4:
                    da:fe:80:8c:d4:7a:2b:7b:81:12:26:ce:a9:d3:dc:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:92:0C:2E:93:25:94:AC:62:39:02:E3:AE:F3:1F:12:61:C7:F1
            X509v3 Authority Key Identifier:
                keyid:9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:3c:bf:28:99:94:1e:44:27:3f:39:64:a9:c8:54:d0:a2:
         52:1a:fa:ef:ac:74:cc:be:62:bd:01:2b:f4:9b:2e:c7:b3:b3:
         f3:2e:96:8a:4d:8b:78:53:47:20:17:fb:87:23:65:9b:02:73:
         20:2b:59:da:df:46:7a:25:c9:d6:f0:a0:b5:35:8f:e4:de:70:
         0b:74:a5:3f:1a:78:21:4b:64:2d:01:8b:bf:82:cb:08:79:0b:
         c9:13:21:e5:77:25:37:87:7a:a5:67:bd:4c:17:e6:34:16:2d:
         2e:8d:e1:a1:df:01:3e:9e:dc:b2:d9:d3:b2:0d:e9:6e:8e:9e:
         8d:b4:c7:04:77:1b:fa:69:d8:a7:97:60:ff:5c:7b:f1:3c:ea:
         6f:83:8a:d2:ae:aa:18:a4:09:5c:cf:0d:da:11:b5:ac:21:93:
         86:36:c5:de:64:a4:60:08:49:7a:31:7e:37:80:b8:08:29:22:
         a4:45:c4:27:f6:55:d9:ca:63:ed:0d:64:ff:14:05:dd:49:46:
         04:bc:7d:b0:d3:1b:5c:03:fc:98:c1:be:1a:4e:06:2e:f4:41:
         f8:1c:89:b8:5e:7c:fa:3e:d4:66:80:bf:32:22:ff:3f:62:93:
         99:4a:35:86:fa:0a:b4:50:68:88:d4:d1:1f:f5:02:ec:0a:0f:
         f4:fc:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----