Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.mft
File:                     b5v1TUF4woQNUhtQ8lkLajCvT68.mft (raw, json)
Hash identifier:          +7gWxsgN9Tk6jjVhHkLXpkQdE7UF4P1eU001HwG9G5w=
Subject key identifier:   34:D9:C1:EE:20:E6:84:98:A5:0A:FE:0B:46:8E:2A:E9:9B:24:7C:5B
Authority key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Certificate issuer:       /CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Certificate serial:       018B3CDE2907FCE1F4E587FAC2384D5A0E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.mft
Manifest number:          087F
Signing time:             Tue 17 Oct 2023 09:01:14 +0000
Manifest this update:     Tue 17 Oct 2023 09:01:14 +0000
Manifest next update:     Wed 18 Oct 2023 09:01:14 +0000
Files and hashes:         1: Gu_0Ohrc92-n2PdFrG0Y0d1hnSk.roa (hash: hwVaiYGbd2YOEDFAX1JbOdN7x3CJU0AbYTKOdDy5R0w=)
                          2: b5v1TUF4woQNUhtQ8lkLajCvT68.crl (hash: +Gw/7hpq0v4DeV5mHCNO7s96ClqNUdbkgHB/erfKtHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:de:29:07:fc:e1:f4:e5:87:fa:c2:38:4d:5a:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
        Validity
            Not Before: Oct 17 09:01:14 2023 GMT
            Not After : Oct 18 09:01:14 2023 GMT
        Subject: CN=34d9c1ee20e68498a50afe0b468e2ae99b247c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:b3:19:a1:d4:ca:85:ae:24:29:bc:2e:d3:
                    66:c9:5d:12:65:63:a2:d6:8c:1c:f0:90:84:ea:87:
                    ca:44:82:2d:cc:01:7d:49:f5:6d:07:8f:83:bd:ba:
                    c6:2c:59:48:ae:f3:79:96:97:4f:50:8a:f9:8d:8b:
                    62:b2:31:8b:a0:ff:00:c6:c7:31:ef:f6:15:72:70:
                    45:e0:52:85:a7:32:59:5c:6b:ca:b4:a6:96:85:c6:
                    a5:fd:c7:f8:57:90:57:55:67:dc:7c:48:77:89:52:
                    d8:e5:a7:b0:84:c5:03:b2:99:ab:85:0b:d1:88:01:
                    04:0c:d5:d4:57:fa:d5:9f:05:4e:15:c2:c1:05:b2:
                    c5:91:21:10:ee:bf:50:73:fa:e3:db:32:be:90:a4:
                    9d:36:ab:03:3c:8b:b2:3e:b7:21:91:34:9d:6e:26:
                    2c:55:f3:be:71:90:38:ac:4a:90:3e:1f:d0:86:ab:
                    dd:ec:5e:74:7c:92:d7:76:2c:64:0e:7d:56:79:17:
                    2a:f8:e7:93:fa:6d:2d:3d:e0:1c:a5:f7:d0:c6:5c:
                    3b:fe:bf:49:f5:d3:e8:ca:38:d1:a9:f9:df:df:f0:
                    07:3c:c5:00:d7:09:cf:b0:22:55:98:c0:80:08:12:
                    cc:38:0b:5f:17:85:02:d2:73:55:68:76:2d:31:67:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:C1:EE:20:E6:84:98:A5:0A:FE:0B:46:8E:2A:E9:9B:24:7C:5B
            X509v3 Authority Key Identifier:
                keyid:6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d4:8b:85:6d:e5:43:88:39:f1:85:9c:c2:8d:70:00:cf:f2:
         b6:4e:33:d5:d6:a8:84:fe:4b:33:5c:96:c3:f7:8f:cd:db:af:
         21:d8:3f:b2:a1:b9:0b:f7:db:cb:ec:97:8b:fb:8e:f5:de:e1:
         55:df:ea:c6:28:54:17:39:1f:88:8c:7b:6c:20:10:5a:76:1f:
         b7:42:94:c6:8f:0c:82:ec:79:d2:d0:0f:31:1b:3e:55:6d:78:
         57:87:36:1f:f9:7b:f2:7b:b7:9c:02:23:32:15:64:c1:e9:7d:
         aa:49:1b:b9:82:41:b6:b5:e0:bf:3a:71:19:0f:ac:4d:21:47:
         d4:1e:06:d4:ad:74:1e:c1:12:db:a9:f2:7c:ae:4b:52:61:31:
         17:8c:de:1e:b7:18:0c:47:19:62:ed:f6:0e:82:bd:17:68:03:
         0f:66:77:ee:77:2b:ba:f6:6b:a4:c2:58:22:df:37:48:9d:1d:
         e3:15:4e:59:c8:85:1c:04:83:4b:1f:7e:98:35:d1:df:e7:77:
         9c:ad:16:bf:db:6a:ff:6d:95:93:ef:a6:6e:0f:f0:95:34:30:
         4e:5e:04:fa:e6:d3:cc:14:f0:f0:6a:9f:e8:4d:37:ab:9d:7b:
         34:f4:16:66:af:e8:ad:ce:68:d1:c5:b0:e9:49:dc:28:b1:81:
         92:f2:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----