Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft
File:                     Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft (raw, json)
Hash identifier:          QQuSlZMFmaQC/Jln7MxLD5ZF45olQlS/trWrTgW1F8w=
Subject key identifier:   66:63:30:3A:82:B3:95:9B:C6:75:0D:55:A4:45:9C:FC:F1:04:7E:41
Authority key identifier: 1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Certificate issuer:       /CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Certificate serial:       018B7F62EA7F70CAF7A120329CEF5EAD3DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft
Manifest number:          089F
Signing time:             Mon 30 Oct 2023 07:01:10 +0000
Manifest this update:     Mon 30 Oct 2023 07:01:10 +0000
Manifest next update:     Tue 31 Oct 2023 07:01:10 +0000
Files and hashes:         1: Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl (hash: QJKoo7Merx+8wHke6xmZFsBSJkZQ0aE6RgRRGI1s+f8=)
                          2: LjlubRVnKzj7UDwkF8z7gCKfqJ8.roa (hash: yQRCyDwFf35dBC10vcG/uvKSXGp2WHBtPsf09k5dWAY=)
                          3: bubohaI5Rppyq-LUa5IZc5b-F_c.roa (hash: QpgNaumBq06xWhP4uoC+Zx3S6dOV7tWO+/CzPTRVIS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:62:ea:7f:70:ca:f7:a1:20:32:9c:ef:5e:ad:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
        Validity
            Not Before: Oct 30 07:01:10 2023 GMT
            Not After : Oct 31 07:01:10 2023 GMT
        Subject: CN=6663303a82b3959bc6750d55a4459cfcf1047e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:a3:c9:22:c1:40:43:af:27:72:cd:4d:97:
                    0a:59:e3:57:2e:b0:b5:fb:b9:d8:45:4d:17:c8:69:
                    31:28:7d:5c:98:12:95:ea:48:82:21:f5:51:b4:59:
                    cc:3f:19:3b:ea:03:58:2b:6a:b7:a2:9b:32:a4:7b:
                    9f:01:28:bd:fd:95:8f:4c:c1:c0:30:99:34:6d:7d:
                    4a:1e:cf:c8:db:17:d7:cf:79:e4:80:a9:bd:d6:6e:
                    9c:6c:3e:d7:cf:b3:96:6d:77:ba:16:bd:c7:b6:f4:
                    89:d1:37:a1:08:21:f1:15:9e:70:19:d9:14:2b:52:
                    55:38:a5:96:05:88:f6:8f:36:71:cc:77:8f:11:ac:
                    8a:02:c4:ce:7c:f4:8e:b9:4d:f4:96:ce:d8:34:1e:
                    0d:70:17:aa:da:72:7e:e9:a8:db:92:82:98:c0:11:
                    cc:11:cf:f5:4b:39:cb:6a:5f:98:b0:0e:47:1b:7f:
                    a7:cf:1f:6f:fe:f8:a6:d0:c7:b3:c3:4b:75:c7:42:
                    93:5b:03:32:4a:f8:e4:94:fc:0f:eb:c9:cf:66:ac:
                    e9:8e:1f:a8:a2:3d:8b:1e:97:40:57:bf:f2:b8:b5:
                    9e:92:2d:40:06:6a:16:5a:a0:2b:36:19:5c:34:9a:
                    ec:56:13:91:f9:37:71:86:61:14:82:77:31:92:52:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:63:30:3A:82:B3:95:9B:C6:75:0D:55:A4:45:9C:FC:F1:04:7E:41
            X509v3 Authority Key Identifier:
                keyid:1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:b5:ac:7d:57:c4:58:a1:ba:e9:49:16:49:5a:5c:d8:21:
         20:2e:2d:69:bf:cf:ed:27:d3:44:8a:0e:b6:3d:bb:55:70:b9:
         e2:dd:64:19:29:50:6d:8d:57:32:4f:5d:bd:5e:b3:03:f7:01:
         b9:d3:21:0d:32:48:1d:cf:71:67:18:99:2f:ed:70:e8:c9:dd:
         f7:24:53:b8:68:9b:c0:f5:cd:b5:3b:f7:2a:93:75:e1:58:e9:
         a4:8c:fd:87:d9:1f:3d:ce:3d:2b:50:73:ed:ed:a4:af:d0:04:
         22:a0:8a:c7:5d:56:26:86:f6:e2:c6:b4:20:5e:29:5c:65:5e:
         7b:6b:ec:a5:56:6a:8c:f9:62:6a:a8:13:5f:ba:f3:67:e9:aa:
         40:f9:c4:76:8a:08:b3:d7:71:f5:a9:a2:1b:68:b8:cc:e4:73:
         7a:47:73:a8:03:ea:cf:c1:ef:cb:84:37:b3:85:90:77:b3:f5:
         18:e1:1d:47:74:ba:6d:50:67:e2:f4:59:c5:09:ac:6f:68:78:
         99:96:d3:6b:e8:d3:50:89:b1:bb:c3:1e:d0:6a:83:02:d6:24:
         e7:b1:88:f1:97:16:f7:b0:da:d3:3b:da:03:20:3e:54:95:61:
         13:40:dd:74:f7:96:02:21:f6:a5:9e:eb:8c:27:db:1c:aa:00:
         ac:3d:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----