Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.mft
File:                     Au38-zNcnXaIjYG3Ps2KQLr-z_w.mft (raw, json)
Hash identifier:          uXsvIsIZOHtozLJIGC7ighoq7YB18ZQcXNZh8uyjf9g=
Subject key identifier:   6F:E3:D7:C4:E4:34:1A:47:73:D0:9C:06:2A:3D:CD:30:7A:83:7C:17
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Certificate issuer:       /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial:       018BEB882F1BBC62A30D3A1E9C69CCC3779C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.mft
Manifest number:          085E
Signing time:             Mon 20 Nov 2023 07:00:52 +0000
Manifest this update:     Mon 20 Nov 2023 07:00:52 +0000
Manifest next update:     Tue 21 Nov 2023 07:00:52 +0000
Files and hashes:         1: Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl (hash: bQtH65xsBe8qJmRRc71LP8yV09wvTt9HzUoGrLeO8mc=)
                          2: HSvlLBKbcrF06rQgLZq0OOaA9Pk.roa (hash: xlipYBJtIJNLNa2qxagWTZA65SQSiogcuULygbQjeCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:88:2f:1b:bc:62:a3:0d:3a:1e:9c:69:cc:c3:77:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
        Validity
            Not Before: Nov 20 07:00:52 2023 GMT
            Not After : Nov 21 07:00:52 2023 GMT
        Subject: CN=6fe3d7c4e4341a4773d09c062a3dcd307a837c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:6a:1d:e5:b5:7f:d2:53:7c:1b:ed:92:4c:
                    52:11:0b:3b:a2:c4:37:4f:0b:44:9f:60:91:e5:aa:
                    49:93:17:9d:df:c0:d1:20:0e:94:20:9e:e2:75:a6:
                    7b:3c:82:8a:7d:1a:93:a4:78:bb:f3:f1:45:c9:f6:
                    b2:0c:58:b6:5b:07:34:12:6e:be:26:05:0a:05:d8:
                    e7:6e:e4:49:66:c2:95:89:8e:d8:2a:60:ca:77:52:
                    95:04:ae:98:d1:9d:bb:f6:20:1c:31:67:f2:ef:75:
                    2c:de:fd:f6:d7:fd:95:a8:4e:0c:df:11:3d:44:e4:
                    ca:be:b2:e8:52:82:66:28:76:79:1f:23:c1:54:f9:
                    ec:0e:2f:66:8c:89:35:14:0a:c5:5b:58:fb:ac:3f:
                    4d:4f:af:19:0b:c6:1b:47:19:ee:e3:7f:76:b5:9a:
                    a8:b1:f1:e6:5a:c2:f5:27:f3:08:b9:42:1a:15:35:
                    b4:d0:d5:63:9e:07:6a:3c:31:db:73:9f:59:88:a5:
                    e0:a7:5b:8c:67:b0:8b:7e:c1:9e:a8:e2:83:de:a8:
                    c4:4e:11:93:d4:38:fc:51:d5:3d:32:53:c8:53:bb:
                    a3:6a:9b:78:11:56:c4:17:6b:89:83:2e:74:6d:b9:
                    da:c3:ec:47:b2:1c:b7:40:4d:be:27:6d:6a:57:44:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E3:D7:C4:E4:34:1A:47:73:D0:9C:06:2A:3D:CD:30:7A:83:7C:17
            X509v3 Authority Key Identifier:
                keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:96:65:53:36:67:7d:29:4b:01:e9:14:d7:01:d1:b9:f1:b2:
         71:e3:61:66:6a:0b:d1:7e:b2:80:d6:23:ce:2e:e9:40:55:a1:
         77:cc:7e:5a:49:e0:82:49:67:14:b5:92:d7:dc:3a:d1:d0:f2:
         27:99:e0:7d:5f:58:2d:c3:a6:af:c1:20:4a:e3:24:ae:1e:f6:
         ec:29:31:60:f0:df:73:e2:9a:b4:49:6b:56:ba:46:1a:76:fc:
         e3:9d:7b:3f:e0:3c:c6:79:a5:42:62:01:43:2a:36:0f:34:e6:
         62:bd:c6:36:4f:c9:2c:4e:be:13:70:fe:e9:5d:95:7a:f5:18:
         50:47:fd:8b:d2:e5:ba:c6:ce:9b:eb:ff:bb:85:0c:c5:53:8b:
         cb:32:7e:4a:0d:44:ef:7e:a7:55:e7:31:cf:04:dd:3a:5f:cf:
         72:37:6e:90:36:66:0a:46:55:5e:8f:65:3f:2f:57:23:7e:8e:
         10:21:80:be:e4:37:b7:38:13:d0:1d:a1:cd:cf:5a:1d:24:63:
         de:ec:f5:0f:45:ce:2f:44:c5:c2:0f:bd:23:25:b9:5a:58:fa:
         3d:5f:51:1d:f9:04:f7:f7:98:c8:71:02:fc:90:de:a7:6d:5c:
         e8:3f:10:a1:7b:5f:3b:1c:b0:a1:fb:76:36:98:ce:6c:a0:b5:
         55:c2:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----