Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
File:                     73OJCflNmWhDa7Tgmi1HzHkBczw.mft (raw, json)
Hash identifier:          vkVlVz11PoeBCuIV8yxqopmMeQJ8ZewRScRRoSoU/+g=
Subject key identifier:   67:7D:B8:CD:3C:F3:8B:29:5F:E7:FD:B0:31:0F:1E:4B:6E:11:5A:C6
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Certificate issuer:       /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial:       018CED7469CD377055E5A27755DA02497D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
Manifest number:          08FA
Signing time:             Tue 09 Jan 2024 09:01:18 +0000
Manifest this update:     Tue 09 Jan 2024 09:01:18 +0000
Manifest next update:     Wed 10 Jan 2024 09:01:18 +0000
Files and hashes:         1: 73OJCflNmWhDa7Tgmi1HzHkBczw.crl (hash: 0MmFa3leh6JaR3wVUcseFPZbyQcSJbumVrz/CVj8jRA=)
                          2: 9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa (hash: 3sKn0WrYK94DKIhNBA2kyP3IMTl1ktdvMS3KrMYTjVw=)
                          3: UN9vSirRPlkQNZSLz6S-4q_0hgc.roa (hash: k4buypy7OfYmZUOCVpHMcT9rXbCNMeWUDz6Gb5HIJ4A=)
                          4: UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa (hash: C4k3lDPwvLNaFUHOIozNkug71hQ+DUjeo2/eAbptufI=)
                          5: rwbFhws32F2lDHYN3wGoo8mpEEw.roa (hash: HnUOdmy4ZYedx9GnzS05cWnRyB1XV7Pohkcxxl402jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:74:69:cd:37:70:55:e5:a2:77:55:da:02:49:7d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
        Validity
            Not Before: Jan  9 09:01:18 2024 GMT
            Not After : Jan 10 09:01:18 2024 GMT
        Subject: CN=677db8cd3cf38b295fe7fdb0310f1e4b6e115ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:66:86:08:2f:6b:51:7e:b0:71:b2:e5:03:
                    7a:f4:ba:34:99:9f:33:5f:72:89:9a:d3:79:ac:97:
                    bd:1f:69:28:02:a7:e8:d5:13:89:17:3e:4a:eb:da:
                    cc:ae:94:ea:45:82:bc:80:fb:9c:49:2a:46:12:b9:
                    8c:bd:83:b3:24:8f:ef:dc:06:c3:2a:52:92:94:b5:
                    d4:c8:1d:1e:7d:15:cd:bb:ce:73:2b:4f:70:bc:2c:
                    0a:07:16:6c:eb:95:53:88:e8:9f:9e:75:dd:59:9b:
                    7c:1a:c5:bf:c9:5b:3c:ec:47:16:67:76:43:e1:4d:
                    ac:f3:a5:79:df:c7:bf:17:fb:38:78:5f:d8:4e:eb:
                    8a:1b:7b:46:cb:5a:3f:dc:2d:32:59:6e:9e:99:76:
                    cc:f8:94:75:6a:df:22:08:39:b5:36:f1:82:3f:30:
                    5c:26:8d:75:18:a1:47:d7:af:d0:3d:ad:72:a7:53:
                    10:c5:19:1b:d6:b2:5c:47:e9:d8:a3:33:32:b4:3d:
                    a1:bd:bb:a3:51:7d:1e:80:68:6e:04:a6:3d:1e:78:
                    61:70:10:f8:71:66:ca:5e:1a:8a:8f:bf:c1:76:1f:
                    d6:25:da:d6:f5:ac:e2:7e:c9:eb:8b:d3:ff:5e:1c:
                    97:71:1d:d2:9a:87:40:e2:58:92:9b:71:de:4e:2d:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:B8:CD:3C:F3:8B:29:5F:E7:FD:B0:31:0F:1E:4B:6E:11:5A:C6
            X509v3 Authority Key Identifier:
                keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:d5:76:0c:12:5a:13:c6:df:91:ca:4e:61:08:c1:23:b9:5c:
         df:f4:3c:ec:d6:f6:e1:3b:31:e6:05:bb:ca:54:00:ef:e4:7f:
         27:bc:13:f9:e0:8e:cf:41:79:b3:91:23:6f:4d:52:ef:c5:39:
         0f:09:9c:25:48:a2:a7:ce:c3:1d:9a:10:84:b3:96:f8:5c:15:
         24:42:98:21:28:86:ab:5e:f1:c3:2b:15:29:d4:21:c7:a7:08:
         73:61:23:5b:b5:00:23:60:81:70:67:ce:10:e6:08:bb:96:3c:
         7b:18:74:56:4e:03:3d:66:ac:05:24:a6:52:3f:45:39:25:81:
         a3:b0:1a:27:ca:b9:bc:0a:3d:88:1e:c4:5d:56:ed:42:38:aa:
         c4:17:e1:39:ce:d6:e4:e8:ab:45:79:84:4b:e7:be:28:22:a3:
         1b:9b:de:10:73:25:32:16:2e:2d:8c:c1:4c:ff:f4:6b:9f:9d:
         48:5a:21:4f:b1:0e:d1:b6:91:3e:fe:34:c3:4c:80:55:96:f3:
         fa:1a:1d:f1:32:54:b3:8e:71:7a:5a:6e:9a:58:9b:e6:6d:4c:
         83:ad:0c:1c:2b:d7:73:47:5d:06:da:ca:36:57:cb:d4:55:08:
         19:eb:60:11:4b:a4:9f:4b:84:48:9f:fa:00:3d:6a:98:03:28:
         95:95:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----