Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
File:                     6BfgUv6NoKgK_xCEteWXYG0U4iA.mft (raw, json)
Hash identifier:          d+stjgHhf7Tr/qIK8LWJK+PFW3fbHT+B6VsLUAMjGsg=
Subject key identifier:   AA:78:98:0A:28:C8:14:01:BC:2C:21:E9:80:E5:68:FF:13:F0:D7:7B
Authority key identifier: E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
Certificate issuer:       /CN=e817e052fe8da0a80aff1084b5e597606d14e220
Certificate serial:       0189D303F9D4C542E46AE2B7E16ED2037C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
Manifest number:          0885
Signing time:             Tue 08 Aug 2023 02:40:00 +0000
Manifest this update:     Tue 08 Aug 2023 02:40:00 +0000
Manifest next update:     Wed 09 Aug 2023 02:40:00 +0000
Files and hashes:         1: 6BfgUv6NoKgK_xCEteWXYG0U4iA.crl (hash: T67oif3Vg1iVFdbqhUFGPqAl43NdW3PfWqSA+1yxPpw=)
                          2: EloWADIGDzwtR6WcYcIwDni08tM.roa (hash: 247Zw9tBGKh3SnYQ27D4qBbr7jMgaI5cs6I1HjtwdZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d3:03:f9:d4:c5:42:e4:6a:e2:b7:e1:6e:d2:03:7c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e817e052fe8da0a80aff1084b5e597606d14e220
        Validity
            Not Before: Aug  8 02:40:00 2023 GMT
            Not After : Aug  9 02:40:00 2023 GMT
        Subject: CN=aa78980a28c81401bc2c21e980e568ff13f0d77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:42:2e:0f:cf:a7:ed:30:8a:73:a8:02:7a:
                    43:5c:78:33:08:53:ee:1f:ae:90:d8:6a:e2:a9:f1:
                    59:a2:4c:f4:97:0e:14:25:f9:eb:e4:fb:1b:35:9d:
                    cc:a6:6d:b5:2b:f5:43:b3:50:2b:9b:bd:ab:67:9c:
                    8f:96:05:55:53:44:06:33:e2:e8:e7:3f:31:b8:d4:
                    a4:6c:66:04:be:9b:8c:13:0a:ef:fd:cd:98:44:89:
                    ba:3d:69:bc:02:4b:c2:4b:f2:20:b2:8a:fd:79:42:
                    5e:eb:d3:56:84:79:9f:78:21:74:d8:83:b7:42:42:
                    4a:ca:a2:7f:d8:a6:e2:da:d2:7c:fa:15:0e:f2:50:
                    48:41:17:4d:c9:5a:e8:24:ed:ca:4d:38:8f:8b:c4:
                    27:80:a8:4a:9d:df:ec:43:c9:57:f9:94:fa:d1:17:
                    cc:1b:95:77:d8:74:6e:2d:e9:3b:a1:d4:20:65:fb:
                    ee:2e:45:2e:cc:e6:23:d7:b9:33:d6:25:6a:59:cc:
                    28:2f:ca:d8:64:19:e4:26:17:7a:10:70:df:84:c1:
                    70:f5:c0:02:8b:5f:f0:ca:92:c3:52:04:d4:92:c3:
                    b9:ab:ad:ac:09:ac:f5:3b:63:eb:14:66:e1:5a:97:
                    b3:b9:b0:68:b0:8b:f6:39:19:b8:fd:61:11:eb:56:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:78:98:0A:28:C8:14:01:BC:2C:21:E9:80:E5:68:FF:13:F0:D7:7B
            X509v3 Authority Key Identifier:
                keyid:E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:c1:64:11:72:3d:e3:f3:f6:65:dd:79:46:08:47:c9:47:
         92:03:f7:d6:39:75:00:bc:70:56:c8:34:93:2f:64:41:56:af:
         20:a9:1c:8a:2a:4d:e3:95:ea:e9:78:f0:e8:56:b8:54:44:2d:
         1a:a8:32:f3:4d:79:4a:a2:5b:ee:30:2f:c1:b7:e3:9a:bb:7d:
         1e:6a:23:a8:54:09:12:13:12:69:3b:50:a7:3f:4e:67:fb:a8:
         6f:67:c4:a0:0e:29:5b:9e:61:e5:15:62:9c:52:08:53:39:89:
         18:2e:e0:c6:e0:53:1d:3f:1c:da:6d:3f:63:95:c6:cc:50:03:
         66:dc:1f:0e:9f:d2:d8:db:5f:02:01:70:39:99:58:f9:51:92:
         da:45:52:45:b7:d3:cf:7e:15:58:e9:0a:80:04:20:86:31:d9:
         0b:be:37:b2:1f:34:93:f5:f0:46:9d:e3:36:e7:5b:ab:5a:18:
         e9:3b:d4:d1:9e:04:71:bb:24:ac:0a:7d:52:b3:98:1e:a4:2a:
         a1:ed:60:bb:7b:40:31:f0:03:96:53:e6:3f:33:b4:c8:95:4d:
         d7:5d:2f:b8:b5:3b:c4:1d:86:68:a3:cf:71:79:7b:75:29:f8:
         3a:46:ef:50:a7:5c:fd:12:60:2f:35:48:24:94:16:32:a2:0c:
         9a:c4:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----