Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.mft
File:                     qEJnkLn6ZwnJd7fF5RUrqr2gf8c.mft (raw, json)
Hash identifier:          PO36MfJq3ntomKjfPCKjnPgR26Ph/mELXhWA7BiCjPs=
Subject key identifier:   76:8A:14:40:B8:F1:35:CD:2B:89:48:69:B7:BF:7C:13:20:68:A4:B4
Authority key identifier: A8:42:67:90:B9:FA:67:09:C9:77:B7:C5:E5:15:2B:AA:BD:A0:7F:C7
Certificate issuer:       /CN=a8426790b9fa6709c977b7c5e5152baabda07fc7
Certificate serial:       018B3C6FC71FF701B250AE289DFB7907B8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.mft
Manifest number:          01DC
Signing time:             Tue 17 Oct 2023 07:00:40 +0000
Manifest this update:     Tue 17 Oct 2023 07:00:40 +0000
Manifest next update:     Wed 18 Oct 2023 07:00:40 +0000
Files and hashes:         1: cQQLLFcjHA-AV0cCZb-j0qFS_Nk.roa (hash: HPcbxpP7xfy34TkM50FUBdH8wkNVTiXj1t4II2Br+z8=)
                          2: qEJnkLn6ZwnJd7fF5RUrqr2gf8c.crl (hash: +Vjbmp7XJnltlJvyR/I0iB/Q9Qe4QEclr15Nbm9Q4FE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:6f:c7:1f:f7:01:b2:50:ae:28:9d:fb:79:07:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8426790b9fa6709c977b7c5e5152baabda07fc7
        Validity
            Not Before: Oct 17 07:00:40 2023 GMT
            Not After : Oct 18 07:00:40 2023 GMT
        Subject: CN=768a1440b8f135cd2b894869b7bf7c132068a4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:80:a3:34:6f:7c:e1:7d:53:75:06:02:a6:4a:
                    b2:a2:8b:d0:b8:b2:dc:6a:7d:6e:87:f1:b8:39:06:
                    3e:f1:a4:14:6b:4e:de:44:ea:19:78:ee:fb:85:14:
                    08:ce:1e:33:08:fa:d3:bf:a2:6f:ab:fc:7d:4e:9f:
                    cd:20:3a:c6:2a:9e:0b:e3:68:ef:45:f7:1c:52:12:
                    cb:6f:f2:c7:43:11:f9:0a:d5:5a:65:71:dc:dd:5b:
                    9f:46:97:2f:49:7f:b9:de:ee:3d:ab:10:8e:e6:a3:
                    1a:8f:7e:a3:d3:3c:0f:c5:f5:6e:5c:25:3e:db:76:
                    59:a7:42:38:b4:26:8e:da:eb:4a:42:a9:fe:20:31:
                    36:a6:ef:ee:cf:03:01:f9:2f:6a:66:08:3a:4a:da:
                    d7:5e:3e:1b:62:94:02:d6:70:8c:ee:6c:d6:d0:60:
                    27:5a:73:46:3b:82:55:50:93:12:a3:dd:b6:b2:4f:
                    0a:08:d6:7d:53:d3:34:94:bc:95:bc:58:c1:20:53:
                    0a:f3:c6:b7:fa:c7:a8:43:8b:d8:f2:1c:06:cd:46:
                    6a:2e:8b:5a:da:7d:05:32:e0:41:97:49:2c:04:90:
                    61:c4:2b:aa:7f:5a:17:c3:34:cf:d2:bf:51:14:60:
                    06:dd:b4:fe:98:15:4b:11:82:c9:5d:e8:e5:6c:87:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:14:40:B8:F1:35:CD:2B:89:48:69:B7:BF:7C:13:20:68:A4:B4
            X509v3 Authority Key Identifier:
                keyid:A8:42:67:90:B9:FA:67:09:C9:77:B7:C5:E5:15:2B:AA:BD:A0:7F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/470ab7-760d-4729-8dc9-651d2a7617f5/1/qEJnkLn6ZwnJd7fF5RUrqr2gf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:a3:70:e7:68:d9:11:d2:16:03:3e:72:fa:bd:ff:41:4d:
         5d:e8:f0:8b:d9:ec:75:40:af:39:0b:2d:37:d5:a2:3f:97:f5:
         a8:ac:f9:a2:29:4f:ab:04:34:13:bc:33:73:b3:c4:ef:cc:0d:
         7c:1a:21:52:2a:8b:fe:39:f3:be:1f:85:90:50:8b:16:4c:93:
         92:d4:ef:42:98:d7:a7:33:d4:c1:54:71:80:ff:c3:fd:14:52:
         c0:f0:8a:fb:b2:98:95:cd:95:d2:71:01:85:95:44:a5:b0:e5:
         80:af:7d:97:53:01:0e:50:7a:75:b6:58:58:5d:c7:46:24:ff:
         d1:23:de:c9:50:a1:0b:21:eb:30:d0:8d:28:88:6e:91:79:9e:
         9a:bd:14:f3:01:12:28:29:99:32:12:fb:80:8f:2d:ea:0f:04:
         f1:c0:48:b7:da:b1:39:9b:fc:41:85:7b:f3:06:07:37:98:cc:
         ea:32:f6:65:7c:2e:8d:b7:f2:22:cd:ba:ec:b0:c7:f4:4a:35:
         30:c6:84:4c:ef:45:26:9c:1d:67:2e:7c:78:68:64:19:58:27:
         ec:26:78:5b:71:a4:85:43:10:45:b5:a4:c3:d2:81:bf:60:53:
         08:8e:78:80:75:f8:9d:47:25:7e:f1:c8:a8:4d:a6:60:16:a5:
         e0:d8:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----