Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.mft
File:                     eDw0t3l8xm3_TkoKEnNHne1q6WE.mft (raw, json)
Hash identifier:          WxdCBsG5P7MS6h9LSOebUx5VwW26hal8hA/9O+iuyn0=
Subject key identifier:   08:9C:5A:0C:24:19:27:F8:77:A7:B0:EB:D2:F8:55:30:FE:93:39:BF
Authority key identifier: 78:3C:34:B7:79:7C:C6:6D:FF:4E:4A:0A:12:73:47:9D:ED:6A:E9:61
Certificate issuer:       /CN=783c34b7797cc66dff4e4a0a1273479ded6ae961
Certificate serial:       018CEE18A9BFD42EEC614EDB0A5AB038242C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDw0t3l8xm3_TkoKEnNHne1q6WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.mft
Manifest number:          0813
Signing time:             Tue 09 Jan 2024 12:00:42 +0000
Manifest this update:     Tue 09 Jan 2024 12:00:42 +0000
Manifest next update:     Wed 10 Jan 2024 12:00:42 +0000
Files and hashes:         1: Uw7zQaDW5rZXs03JApSGk5KKf24.roa (hash: wlaNxXHkkVLSitZus71zka0linnO5FSbGe1zUQkc2/A=)
                          2: eDw0t3l8xm3_TkoKEnNHne1q6WE.crl (hash: 73KUjmlLyJhNGKRzed0U6EpgdhNjXmQQyfqjedVELu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:18:a9:bf:d4:2e:ec:61:4e:db:0a:5a:b0:38:24:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783c34b7797cc66dff4e4a0a1273479ded6ae961
        Validity
            Not Before: Jan  9 12:00:42 2024 GMT
            Not After : Jan 10 12:00:42 2024 GMT
        Subject: CN=089c5a0c241927f877a7b0ebd2f85530fe9339bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:9a:9a:d8:73:61:26:6f:66:c1:61:d1:7f:
                    bf:e5:40:3a:ca:e8:bf:89:3c:1e:b1:53:23:5a:b6:
                    83:fd:4b:e0:88:13:b0:14:95:1d:20:e0:28:18:48:
                    1e:d6:b7:2d:61:b2:34:83:53:af:f1:28:da:17:bb:
                    6f:8f:d5:f6:e5:1b:7f:73:ae:6a:04:67:22:6b:fb:
                    d2:d2:de:0e:82:c3:90:c9:82:76:58:ab:06:5f:41:
                    22:1d:73:a1:02:1f:0f:6c:bb:80:67:5f:f9:e9:72:
                    26:9b:ce:d0:79:c6:7e:a1:49:cd:fe:20:2b:65:33:
                    a2:e6:4b:fa:95:c9:4b:50:08:ad:9c:a4:be:75:bf:
                    86:78:10:d1:ec:ea:4c:13:e5:df:4a:6e:6c:4b:57:
                    e6:3f:3e:a7:26:8b:37:da:9b:d0:8f:ef:fc:b1:09:
                    3d:0b:84:82:a2:d6:88:4e:42:dc:e2:eb:09:2b:44:
                    56:66:9e:34:2f:1d:8e:7b:5f:23:e6:0f:4c:3b:57:
                    57:42:c2:25:7e:c7:5d:27:59:bb:c9:f8:bc:0c:44:
                    ff:b1:47:d1:64:7a:60:3d:59:f3:5b:55:c3:d2:dd:
                    ff:68:2f:20:4b:20:48:77:4f:86:73:43:06:0f:c0:
                    0b:b5:df:e6:1c:4e:5f:60:5b:22:51:99:ec:ef:4a:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9C:5A:0C:24:19:27:F8:77:A7:B0:EB:D2:F8:55:30:FE:93:39:BF
            X509v3 Authority Key Identifier:
                keyid:78:3C:34:B7:79:7C:C6:6D:FF:4E:4A:0A:12:73:47:9D:ED:6A:E9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDw0t3l8xm3_TkoKEnNHne1q6WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:9d:e4:62:ce:57:19:22:d3:4a:f5:01:9a:35:d8:82:4f:
         ec:50:14:19:c4:80:64:a9:e7:5f:8f:50:85:bf:37:1c:d2:21:
         bc:01:16:40:90:86:bc:89:10:00:5b:e6:61:25:d2:90:f3:a8:
         8f:a4:66:15:15:29:39:8b:55:1d:0d:33:7c:35:d0:e4:bd:cf:
         a3:0d:ae:7f:84:14:72:6c:54:2c:1a:d4:f2:13:17:37:4b:4b:
         bc:93:47:df:84:d5:2c:97:26:16:81:0f:0f:cb:cb:ee:c0:0c:
         6b:8e:27:49:44:c4:ea:cd:3c:f2:43:7e:88:23:45:95:e6:37:
         92:54:25:ad:de:5d:9c:75:21:ac:94:a6:98:6a:2a:25:3b:1d:
         cf:86:2f:af:a3:90:26:b4:1c:d6:60:b3:ad:1f:bd:d3:0c:af:
         7c:7d:68:5d:88:63:cb:56:8a:24:df:19:22:9f:60:e9:6f:11:
         f6:cf:c7:ba:6c:27:dc:65:d0:db:58:42:f8:55:98:b7:3c:4d:
         cd:b3:22:d1:5f:10:56:53:52:5a:8b:60:af:6f:5a:6b:0e:fa:
         7d:68:8e:e5:e8:9d:07:90:fc:92:48:16:4a:5f:e5:93:e5:72:
         f9:e4:5d:64:96:f6:0a:01:56:97:2c:13:59:f9:42:40:e7:97:
         fa:ac:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----