Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c938af-46b2-44f3-80de-052f5fd4e28b/1/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.mft
File:                     rF_d0Ki7Z2HkGvzy23Zd61bNuFY.mft (raw, json)
Hash identifier:          gb/RQCSSk9tw8uzgDoQBFzGYIgcLzNhBzCYRsbJYFJ8=
Subject key identifier:   E8:5D:AC:7A:69:8C:EE:72:11:1F:15:39:8D:6D:08:05:E6:01:EE:7B
Authority key identifier: AC:5F:DD:D0:A8:BB:67:61:E4:1A:FC:F2:DB:76:5D:EB:56:CD:B8:56
Certificate issuer:       /CN=ac5fddd0a8bb6761e41afcf2db765deb56cdb856
Certificate serial:       018AFA90851871B8540F7B17AB160D6FF03B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c938af-46b2-44f3-80de-052f5fd4e28b/1/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.mft
Manifest number:          0867
Signing time:             Wed 04 Oct 2023 12:01:29 +0000
Manifest this update:     Wed 04 Oct 2023 12:01:29 +0000
Manifest next update:     Thu 05 Oct 2023 12:01:29 +0000
Files and hashes:         1: N2DiRZsln06UH4QzNJo5mESOmrQ.roa (hash: 9xOcVAU8lv1Li0y7k5m6gNbMuh6ewzTdH1gmAHQ5Utg=)
                          2: rF_d0Ki7Z2HkGvzy23Zd61bNuFY.crl (hash: 2lDGICoJnDYqXukBsAom0VOLrV0+NMQCaeP71+z8egc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fa:90:85:18:71:b8:54:0f:7b:17:ab:16:0d:6f:f0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fddd0a8bb6761e41afcf2db765deb56cdb856
        Validity
            Not Before: Oct  4 12:01:29 2023 GMT
            Not After : Oct  5 12:01:29 2023 GMT
        Subject: CN=e85dac7a698cee72111f15398d6d0805e601ee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:63:98:48:2b:36:c9:fa:33:a2:67:24:e2:
                    df:b7:7b:87:e8:1f:33:7e:9e:35:de:84:af:3b:bd:
                    fd:26:b8:64:0d:9e:22:3d:01:f3:f2:e8:db:20:cf:
                    e6:11:5d:b1:27:53:cb:dd:07:92:10:28:1a:92:91:
                    d8:7f:11:fe:14:d3:94:fb:44:dd:d6:22:4c:4f:ca:
                    56:19:7a:4e:08:84:39:16:e2:fa:38:44:31:9b:23:
                    01:e3:69:f4:75:0f:c1:d8:2a:ba:c7:74:20:79:58:
                    d9:af:b5:ac:2c:10:8d:7f:b8:65:25:51:bf:0f:0d:
                    71:a3:23:91:69:70:dc:bd:fb:32:f5:77:57:ea:6c:
                    ac:f8:d2:48:3a:08:0b:bd:fc:19:9e:04:e4:a5:fb:
                    f4:68:df:73:6c:bf:c1:07:ff:b9:db:bb:7b:26:4f:
                    dd:86:1c:1e:69:c5:9f:16:18:4f:9c:05:ab:a8:36:
                    c4:15:4a:56:4e:70:7d:fc:28:2a:13:53:67:04:21:
                    8f:17:6a:0f:1e:31:25:e0:e1:f9:8a:5e:ca:50:6e:
                    86:b0:5f:b7:86:e8:ad:3b:e1:c1:9d:f5:83:17:0f:
                    51:9e:ea:4d:36:fb:17:28:1f:f8:ea:43:92:32:8f:
                    2c:a1:d2:02:04:4c:2a:4b:69:1e:8d:e2:b9:3c:37:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:AC:7A:69:8C:EE:72:11:1F:15:39:8D:6D:08:05:E6:01:EE:7B
            X509v3 Authority Key Identifier:
                keyid:AC:5F:DD:D0:A8:BB:67:61:E4:1A:FC:F2:DB:76:5D:EB:56:CD:B8:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c938af-46b2-44f3-80de-052f5fd4e28b/1/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c938af-46b2-44f3-80de-052f5fd4e28b/1/rF_d0Ki7Z2HkGvzy23Zd61bNuFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:01:6c:39:e3:4f:f8:8c:72:1d:7d:cb:49:90:fd:0f:7e:
         5e:83:6f:d7:c1:99:be:76:79:a8:4a:73:1c:50:aa:a9:56:79:
         9a:57:62:5f:1c:42:e0:23:d7:cd:d4:56:3f:28:6f:e7:35:23:
         f0:69:4b:69:1b:6c:6e:5d:2c:30:e0:e2:86:aa:47:cd:f1:f4:
         df:30:48:a9:c0:05:78:27:cd:2d:dc:93:d1:43:8d:75:7b:27:
         c6:56:59:37:b2:82:38:92:40:88:cc:3d:0d:c5:c5:9e:03:d7:
         d0:72:b3:62:07:c3:cc:af:12:a0:b4:dc:2e:f6:7c:08:10:04:
         17:68:7c:60:90:ef:d4:f3:16:7f:df:e0:66:18:4a:5d:6f:7b:
         4f:ee:2e:b8:f6:e3:b4:43:fe:8e:27:7a:89:29:83:5f:7a:d1:
         c4:71:96:b9:e1:37:b3:d7:0f:8d:87:60:94:1d:5c:11:48:57:
         61:2f:a5:a5:38:58:f5:30:36:d3:65:c4:f2:4e:72:eb:c3:8f:
         02:ec:41:c2:88:84:f4:0f:f8:01:f7:41:87:fa:2c:b0:b0:46:
         7b:1b:b2:01:04:cd:d5:76:1b:89:9e:90:7e:e9:33:22:87:8e:
         1d:d1:63:42:81:60:a2:c3:97:97:1a:1c:d8:05:03:36:0e:35:
         d0:d7:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----