Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft
File:                     s3k9sWAZvnNxetsj1uUcTfDdELE.mft (raw, json)
Hash identifier:          mjl9y1XgYgB95GRY0hui7FdFEjsaHec6gywoC4XStSE=
Subject key identifier:   96:75:19:8B:6D:47:5F:25:D8:3B:AD:B0:B2:B2:9C:DD:46:D5:D7:6C
Authority key identifier: B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
Certificate issuer:       /CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Certificate serial:       018CA8CAB525BC9D9120D9EADB6538E4A805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft
Manifest number:          0928
Signing time:             Wed 27 Dec 2023 01:01:46 +0000
Manifest this update:     Wed 27 Dec 2023 01:01:46 +0000
Manifest next update:     Thu 28 Dec 2023 01:01:46 +0000
Files and hashes:         1: 1HbF1EFYT8lVKKagEEw5zeVG6MI.roa (hash: +1f/aliLiX7qUKfNIoZqWM/Ff/FxZaqKzThIQcL3VG8=)
                          2: s3k9sWAZvnNxetsj1uUcTfDdELE.crl (hash: AuAQGNR7DXTlGRJ+CiX2OnABRvjNdHmr0cjdAA4zifQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a8:ca:b5:25:bc:9d:91:20:d9:ea:db:65:38:e4:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3793db16019be73717adb23d6e51c4df0dd10b1
        Validity
            Not Before: Dec 27 01:01:46 2023 GMT
            Not After : Dec 28 01:01:46 2023 GMT
        Subject: CN=9675198b6d475f25d83badb0b2b29cdd46d5d76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:ac:4a:49:0a:c6:96:15:7e:3a:b9:51:5b:
                    b7:51:1e:93:d6:03:04:df:39:30:35:80:21:89:71:
                    79:4d:52:c8:15:66:bd:b7:dd:8f:ee:00:65:f6:41:
                    86:2d:4d:41:f2:70:3a:db:3c:0e:c8:b0:bf:d5:9f:
                    19:7d:4c:d5:ab:0c:c0:6c:69:84:b6:35:43:99:a6:
                    ac:c0:d7:1c:5c:84:53:13:c6:91:0f:30:3c:2c:20:
                    7f:85:33:e9:12:6e:6d:52:70:53:eb:47:ae:ea:d5:
                    b5:78:e7:39:75:cc:7b:76:ad:d6:15:81:8f:5d:5a:
                    e2:5f:fe:b9:b9:ff:d2:65:68:29:37:dd:7d:b0:4e:
                    5a:27:eb:66:0f:1a:c2:a2:30:26:eb:64:d1:01:7c:
                    e6:32:c0:2a:f9:19:1a:b7:67:5a:30:38:eb:09:b1:
                    56:ad:97:da:a4:02:d6:c9:9f:a8:46:10:f8:53:6c:
                    32:c5:13:44:b8:da:10:6b:90:a2:06:fa:80:a9:0e:
                    e0:33:b3:fa:11:b3:ab:7d:36:42:be:b0:08:e6:88:
                    77:9c:62:9b:72:d4:0b:f0:84:d9:9c:87:c9:7d:bf:
                    3b:6a:b9:b2:60:ed:4f:b3:b4:3a:e2:58:6f:5b:c8:
                    37:06:51:c1:00:4f:f6:41:85:61:3e:18:87:d0:4b:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:75:19:8B:6D:47:5F:25:D8:3B:AD:B0:B2:B2:9C:DD:46:D5:D7:6C
            X509v3 Authority Key Identifier:
                keyid:B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b8:e6:ad:5c:97:ee:0f:13:da:d4:ab:22:ad:7f:08:3d:44:
         8e:1f:d9:67:13:64:22:93:a9:ca:bc:f4:97:b0:c1:80:4c:bc:
         94:bd:6c:6b:1b:e1:4a:70:a4:e0:2c:93:e1:10:8d:52:11:55:
         a6:95:a6:de:e3:0c:39:55:f3:f0:8a:67:0d:82:2c:9a:80:27:
         09:68:cb:04:1f:f6:8b:99:1a:de:41:75:5a:2e:41:1a:34:48:
         d8:13:22:bf:52:41:e4:75:40:b1:9a:fa:80:71:4c:4b:51:4b:
         a6:8c:33:f3:02:3f:3d:8e:80:72:ac:d9:4d:5d:5b:97:c9:35:
         85:05:24:dc:8c:8d:5c:96:ce:ea:41:2e:fd:21:54:66:60:9c:
         02:16:d4:2b:ca:f3:ae:67:77:98:c4:60:fc:dd:12:b8:e7:cf:
         cb:17:6a:97:07:6a:81:96:51:08:c2:43:fa:9c:de:45:1f:17:
         65:8d:e4:bc:1e:d0:12:0d:e7:68:a0:68:60:c6:52:00:d4:d6:
         a0:1b:cb:47:6c:13:8c:aa:22:14:86:3f:91:f6:1f:56:08:6b:
         14:12:21:4e:03:92:53:d1:dd:0f:5f:00:f5:94:f2:ee:f8:1b:
         d0:5d:ac:36:55:e0:50:59:4f:b1:63:0d:4c:d5:99:5d:c3:7c:
         14:b7:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----