Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.mft
File:                     yo06_TIjlVZbDtUZpYP17_iklF8.mft (raw, json)
Hash identifier:          CJ9ab3OEdINwIDOwm8jLmk8t2lwweKrnUrQyNoT7ZnI=
Subject key identifier:   86:C6:53:DB:59:7B:96:84:72:8D:5B:8C:82:E7:10:75:B8:DD:51:59
Authority key identifier: CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F
Certificate issuer:       /CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
Certificate serial:       018ACFA660B77DC5D1FF14F89C773B298401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.mft
Manifest number:          04B2
Signing time:             Tue 26 Sep 2023 04:01:41 +0000
Manifest this update:     Tue 26 Sep 2023 04:01:41 +0000
Manifest next update:     Wed 27 Sep 2023 04:01:41 +0000
Files and hashes:         1: yo06_TIjlVZbDtUZpYP17_iklF8.crl (hash: rxwvASaridbHVY5lAALm6JLgF2xLC4xk6X4+c6jphAM=)
                          2: yvA1pXqez4tQB-dHjehn0giZyuE.roa (hash: yZ4s4+KhRd/KRLipWGvAV0dULOAoGAlPD63kZjKOX/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cf:a6:60:b7:7d:c5:d1:ff:14:f8:9c:77:3b:29:84:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
        Validity
            Not Before: Sep 26 04:01:41 2023 GMT
            Not After : Sep 27 04:01:41 2023 GMT
        Subject: CN=86c653db597b9684728d5b8c82e71075b8dd5159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:dc:70:b0:8c:35:55:84:62:d7:5c:04:e2:
                    3d:71:75:fe:20:d6:f4:99:fb:5f:de:76:3b:b8:8f:
                    e5:9a:72:d8:39:10:82:5e:d9:43:db:d8:bb:02:28:
                    0b:71:7e:08:15:93:ed:4b:01:42:8d:d8:24:65:16:
                    dd:08:af:da:89:56:db:77:02:fd:b3:59:a9:17:37:
                    e4:76:ab:46:54:75:17:3f:2f:18:22:cf:7c:24:10:
                    70:32:c6:cc:56:6f:aa:fb:d4:b7:6a:8e:d8:61:2f:
                    8f:08:3a:be:ff:6a:c1:0d:ed:a6:27:71:8d:a2:fb:
                    05:15:8d:ab:cc:24:2e:5b:1c:72:68:88:97:fc:e1:
                    40:b2:16:4b:2c:62:36:c7:f1:2c:1e:57:99:aa:0e:
                    dc:72:60:14:25:0a:a1:51:c9:50:cb:5b:63:fd:ef:
                    6f:c5:36:3a:f7:8b:2f:ba:b8:b3:c3:17:a2:77:8c:
                    7e:bd:82:26:9b:ff:11:1b:59:75:f6:6e:2e:8b:17:
                    69:f0:ad:cc:fd:ff:4f:bd:85:30:36:69:1f:6e:73:
                    55:a1:2b:6d:0b:48:8f:50:dc:d6:03:91:d5:31:6a:
                    55:d8:59:70:d8:24:79:6b:7a:62:9c:7d:a8:cc:9b:
                    68:bd:35:32:2b:5a:10:6d:54:62:31:2c:e2:70:b9:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:53:DB:59:7B:96:84:72:8D:5B:8C:82:E7:10:75:B8:DD:51:59
            X509v3 Authority Key Identifier:
                keyid:CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:83:94:e0:c4:af:d0:0d:6d:f2:da:1d:d0:c3:63:62:4e:59:
         c2:b3:85:46:e1:cc:20:13:7c:67:df:e5:a2:cf:d1:13:46:82:
         60:51:35:77:76:98:79:a9:25:b7:6e:e2:23:bf:9b:a8:3a:13:
         a2:9f:a3:45:f1:8d:09:7a:66:e3:05:bc:e0:8a:be:3f:fc:89:
         b0:09:da:63:b4:9e:15:27:f7:fa:9f:5c:f7:7e:c4:9d:6f:aa:
         51:a9:c8:45:be:b1:b8:50:0e:5e:1a:e1:e8:c9:aa:e9:dd:bb:
         a4:b3:76:b1:50:4b:cd:5f:29:68:6d:8e:49:04:86:b8:43:03:
         20:7c:be:d2:8d:58:72:45:9f:c7:91:07:24:70:c9:1a:35:85:
         07:17:2b:b1:84:89:26:b8:c9:e1:58:da:1b:b4:bc:26:0b:8f:
         00:32:3f:7e:fe:db:03:cb:bb:55:90:b2:15:92:1e:45:1b:2e:
         ff:79:d8:23:79:40:ed:ea:07:34:d6:ba:f6:65:43:8c:52:37:
         d5:af:c4:03:2c:7c:b4:9d:6f:4c:3e:0e:0f:39:2c:5e:2d:cc:
         a0:cb:21:3a:69:60:32:d3:05:db:f0:55:45:9d:11:e5:f9:d1:
         bb:82:c8:89:f8:76:fa:3c:94:56:16:fb:85:c1:cb:dc:72:40:
         2b:5a:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----