Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.mft
File:                     Rs-nB5wUOhftWQJiuseGj8vIQro.mft (raw, json)
Hash identifier:          0Ztjs1shYJiyzc5xVJNsTfKQ4WrnSBt1afVkLLIjLK4=
Subject key identifier:   08:44:36:CB:5C:1E:04:66:F8:5D:7C:67:D8:0B:DA:A9:39:BF:BC:45
Authority key identifier: 46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
Certificate issuer:       /CN=46cfa7079c143a17ed590262bac7868fcbc842ba
Certificate serial:       018BC744F2C9D808BFF3036BC00EAB06E63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.mft
Manifest number:          0405
Signing time:             Mon 13 Nov 2023 06:01:06 +0000
Manifest this update:     Mon 13 Nov 2023 06:01:06 +0000
Manifest next update:     Tue 14 Nov 2023 06:01:06 +0000
Files and hashes:         1: Rs-nB5wUOhftWQJiuseGj8vIQro.crl (hash: BWuctol4kg6LQkB9if8bKfAI4JDpbP1m/AoAG0wV0tI=)
                          2: o6XRYqAwljzltLILmMOwH87qrs0.roa (hash: 6UDxdeZ3tWQLXapkLlv60DB4/cJJTV9uqCnIHkuJkJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:44:f2:c9:d8:08:bf:f3:03:6b:c0:0e:ab:06:e6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfa7079c143a17ed590262bac7868fcbc842ba
        Validity
            Not Before: Nov 13 06:01:06 2023 GMT
            Not After : Nov 14 06:01:06 2023 GMT
        Subject: CN=084436cb5c1e0466f85d7c67d80bdaa939bfbc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:b1:36:54:ec:92:e7:8f:df:59:15:bf:53:
                    b5:c7:7b:07:24:ee:63:95:65:d1:80:e9:15:4e:eb:
                    ee:78:b5:1b:93:67:cd:5b:43:47:2b:0d:4a:34:7f:
                    53:47:8c:36:f4:b2:f2:11:95:69:6e:8e:be:33:35:
                    94:52:bb:70:2d:cf:47:70:ea:58:f9:37:85:06:ef:
                    84:9f:36:5a:25:cf:5d:24:8c:e6:bc:1a:7b:c2:2c:
                    a3:3b:4e:ef:a7:b4:ff:5a:bc:94:04:a0:95:87:63:
                    fb:e3:f1:8b:36:c6:46:6d:c9:03:3d:60:06:fe:d7:
                    ad:5b:0e:ad:21:9c:e5:7e:99:1a:a8:ec:54:df:1e:
                    e3:8d:5f:83:3b:bd:54:55:24:47:b1:cb:58:44:89:
                    60:b0:bd:e7:fc:33:16:b6:e1:a7:63:9d:90:b2:8c:
                    b4:c2:3c:e8:01:87:46:31:52:79:97:d0:f2:a4:55:
                    44:d6:d8:1d:99:20:19:b7:ef:e3:60:94:85:ff:32:
                    66:1b:6b:fe:bb:59:62:4b:69:d4:56:76:cf:73:5e:
                    a8:f3:e1:47:ac:ee:7d:61:56:b0:c2:af:34:f2:1e:
                    a5:46:7f:85:e2:ab:b0:d5:57:e9:cd:09:be:c3:67:
                    8e:19:01:50:ad:08:12:48:d9:0c:86:c0:f2:fc:f2:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:36:CB:5C:1E:04:66:F8:5D:7C:67:D8:0B:DA:A9:39:BF:BC:45
            X509v3 Authority Key Identifier:
                keyid:46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:49:74:4d:ea:73:04:70:c0:77:5e:13:c7:06:67:ab:bc:
         91:ea:d5:9f:20:ab:d1:78:49:09:fe:8c:4b:2c:8a:41:0f:0b:
         71:34:9b:db:14:c2:3a:bc:b5:74:3f:9e:00:be:cb:db:6c:f3:
         07:38:b4:b8:53:ea:6f:da:03:e8:67:e0:81:72:1d:4f:43:92:
         f4:74:c5:df:5c:35:8a:f4:fa:e6:4f:69:32:24:f8:cb:58:fb:
         63:57:2b:83:7f:b6:5e:77:0c:91:38:85:4f:74:2d:f4:a5:80:
         c5:cf:4a:8a:c0:f7:b7:ec:96:0c:1a:d2:5f:38:82:9b:12:66:
         be:f3:a7:b8:6a:74:e6:48:e3:1c:05:db:6c:77:ee:b9:b8:04:
         db:33:a6:e2:d3:04:83:24:19:c6:35:54:4f:b1:69:6f:43:7a:
         75:f0:57:16:90:2c:3c:a7:45:be:95:77:61:bf:55:2a:49:a7:
         49:81:bd:7c:86:9b:25:1a:da:73:de:48:b4:33:1b:04:dc:3f:
         6c:01:6b:da:be:e2:79:44:18:84:54:34:69:30:38:0d:5c:89:
         af:5e:32:a7:39:41:64:8b:86:07:79:65:e9:61:bf:4e:ad:74:
         7d:d5:d3:c1:38:71:26:82:02:72:13:5d:bd:fa:4c:d8:73:f9:
         ae:1a:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----