Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.mft
File:                     B-QF6dm3V-gUG0xjjWX1QRrbDi8.mft (raw, json)
Hash identifier:          4IdHYEnURo29Ij1MXa75vsED+fgY1q3w366pr0qHojg=
Subject key identifier:   23:68:27:2F:0D:09:EE:57:52:2A:0D:43:1D:C5:CE:7A:8E:B0:5C:F9
Authority key identifier: 07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F
Certificate issuer:       /CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
Certificate serial:       018BB23E97C4BC638797F853DF30E6339BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.mft
Manifest number:          0869
Signing time:             Thu 09 Nov 2023 04:02:08 +0000
Manifest this update:     Thu 09 Nov 2023 04:02:08 +0000
Manifest next update:     Fri 10 Nov 2023 04:02:08 +0000
Files and hashes:         1: B-QF6dm3V-gUG0xjjWX1QRrbDi8.crl (hash: h2Q7JqKfsNJS8DNV6gWviMODQ1kl2BmhojJZUHD81SY=)
                          2: LhErn5-kVWctDuaVAG5CBNfZZ64.roa (hash: V4UBIU5MR2z+ymeWHpMe+iaYYAm9XPRosXyE4DKuu1s=)
                          3: TKptWyUHEJz0ednTJxSVLeCjyUI.roa (hash: mVODXlxGkECGxAB1Sk0imVK+aPJXiY1TvyrNC1XH9p0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b2:3e:97:c4:bc:63:87:97:f8:53:df:30:e6:33:9b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
        Validity
            Not Before: Nov  9 04:02:08 2023 GMT
            Not After : Nov 10 04:02:08 2023 GMT
        Subject: CN=2368272f0d09ee57522a0d431dc5ce7a8eb05cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:bf:ea:ef:77:f2:b4:72:28:d3:5a:12:cf:
                    4e:34:f8:1a:09:3b:46:01:c0:c4:2f:b8:0e:31:75:
                    9c:e9:a0:b6:2d:6f:05:82:eb:c7:9a:e7:a8:eb:3b:
                    22:3f:a4:c2:30:60:dd:fe:f9:39:c5:f3:24:26:b7:
                    2b:3b:2f:ac:40:f8:67:b5:3e:e7:37:c3:b1:57:12:
                    dd:8d:91:f4:12:80:d8:a8:a5:77:32:02:9f:49:31:
                    68:b1:d9:ae:8c:88:f7:5d:cc:ee:51:19:67:1f:6e:
                    8a:71:00:82:df:80:ca:fb:41:3d:df:18:6e:27:5e:
                    cf:18:a5:43:a0:6b:a3:1e:72:84:4a:8c:0a:4d:0b:
                    bb:4b:f6:d4:15:12:03:77:49:d0:6f:fb:4d:95:1d:
                    a4:e2:ec:b4:5e:08:82:07:27:ef:53:08:58:48:35:
                    ec:79:3c:55:7f:ff:f9:9b:34:80:f4:8c:95:61:6f:
                    bf:30:07:66:62:06:3b:9e:a3:dd:65:dc:90:3c:15:
                    1a:70:a6:d7:91:e1:1d:bc:c7:42:5f:ad:6b:0f:b0:
                    35:d2:34:8b:01:5f:50:a5:24:80:b2:7e:c2:2c:d6:
                    89:14:be:da:c1:90:8b:96:68:2f:ee:2e:95:b1:d3:
                    0c:c6:12:bb:b5:86:d2:44:8e:75:54:9d:2a:53:c6:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:27:2F:0D:09:EE:57:52:2A:0D:43:1D:C5:CE:7A:8E:B0:5C:F9
            X509v3 Authority Key Identifier:
                keyid:07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ef:b1:f0:5d:75:b2:33:10:19:ca:ce:f5:60:66:c9:a0:fb:
         a5:3b:3a:af:04:e2:cf:2b:08:b9:b8:4f:fd:e5:22:ca:69:e4:
         e1:74:95:7a:83:ba:c2:04:a0:fe:34:22:84:85:88:db:5c:db:
         8b:bf:61:ee:96:cd:f7:e7:3d:7b:00:9b:a0:9c:7a:50:e3:61:
         45:dc:0c:1e:f1:98:f7:da:f6:63:91:33:f7:90:31:96:c8:51:
         62:3a:99:22:de:e5:64:a8:8a:83:58:1a:fd:c1:cb:5f:55:64:
         2d:9a:84:3d:d8:7d:9a:74:c6:f0:95:32:c1:92:72:3c:a5:8d:
         a1:3a:42:3d:4a:2a:30:b3:58:c7:8a:23:08:a4:1b:25:08:ce:
         b1:a7:16:04:39:ef:cf:32:9b:1c:5d:95:ac:84:14:36:c0:5b:
         38:95:c5:a3:e1:c5:37:f2:9a:5c:28:c2:b5:04:3b:22:01:21:
         b7:d9:75:65:36:d0:5f:a8:50:fc:de:be:3a:5f:e8:94:22:ac:
         79:d5:aa:63:63:98:1e:08:f9:73:34:ba:f7:5b:06:6b:f2:9e:
         e8:68:8d:cc:75:b7:8b:39:6a:d5:77:f4:8e:57:cf:e0:f4:38:
         6e:43:f2:df:9c:03:68:a8:80:97:14:4b:99:07:ea:1f:5a:5f:
         a8:9c:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----