Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
File:                     ROKbxnH5ndWb2pRVdxORUGMbHXE.mft (raw, json)
Hash identifier:          aLEC6BjA2H5NSuhZy6mTmF0mntu5X0s8TcNmfEG7QPQ=
Subject key identifier:   BA:24:F3:F6:DC:5E:A9:06:5F:56:95:AB:A2:5E:0B:F2:26:63:3F:25
Authority key identifier: 44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
Certificate issuer:       /CN=44e29bc671f99dd59bda945577139150631b1d71
Certificate serial:       018B6948F0FBB51BF8F3E07FB7C4872D13E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
Manifest number:          0898
Signing time:             Thu 26 Oct 2023 00:01:09 +0000
Manifest this update:     Thu 26 Oct 2023 00:01:09 +0000
Manifest next update:     Fri 27 Oct 2023 00:01:09 +0000
Files and hashes:         1: 1-RaJfIyPa4i2KChD2H3MUvkeM00.roa (hash: +YNj+E8p5EPi1dAGJkOhXTt1QIj5aTxycNQWk4zSWH8=)
                          2: 8S80SKy50E0o4qLnM_kDRiwsX3I.roa (hash: MX2uiucyTpgNB3SkfqfAweTFgeyCOqErwX9lmVd0RLc=)
                          3: ROKbxnH5ndWb2pRVdxORUGMbHXE.crl (hash: KE7VmzDKasfeyZis+aSFDh1TOyN7v/TsRBpnBLINVLM=)
                          4: s894IBvXTLHBhTOJRr3klX5t1AY.roa (hash: ZgHbxYChYD+NjPZOS8OE1XsvR1HaYc3IpqHh4zvIe7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:69:48:f0:fb:b5:1b:f8:f3:e0:7f:b7:c4:87:2d:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e29bc671f99dd59bda945577139150631b1d71
        Validity
            Not Before: Oct 26 00:01:09 2023 GMT
            Not After : Oct 27 00:01:09 2023 GMT
        Subject: CN=ba24f3f6dc5ea9065f5695aba25e0bf226633f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:59:64:12:d4:fd:8f:6a:c1:27:b3:0b:13:
                    4f:f4:0e:1a:2e:81:e4:28:c3:bd:0d:03:ad:0c:15:
                    50:45:8b:73:b4:50:a4:81:1c:00:f8:e7:dd:20:c7:
                    4e:b2:1a:d8:07:9d:f4:21:ac:b5:c0:a7:5c:30:8a:
                    ac:69:78:9d:19:08:72:42:e8:a9:9d:1b:dd:c8:4b:
                    7e:4e:ea:60:a2:2e:d2:11:13:fa:1e:99:9a:5c:15:
                    b7:c1:ea:18:f4:e0:f4:8e:43:77:12:29:06:5f:48:
                    ee:86:a3:57:fe:16:49:94:06:54:56:02:6d:fa:ef:
                    70:43:a2:7d:53:ab:b1:d7:ed:bf:d1:22:41:47:de:
                    5b:9e:c2:3c:8e:7e:7d:34:80:35:77:18:1d:de:ad:
                    a2:b6:18:41:28:75:da:25:ee:be:8c:46:1e:2b:f7:
                    ed:59:61:90:6d:94:ce:64:81:ab:6c:75:3d:ad:97:
                    1a:bb:9b:4c:91:e8:23:5f:82:dd:76:24:b4:35:06:
                    14:a6:2e:5d:8f:e9:3d:9f:1e:b5:a2:29:04:82:9f:
                    a5:53:1d:50:47:25:2c:af:43:5b:7c:e0:5d:3b:6b:
                    b8:1f:52:d1:62:e2:30:8b:22:84:c1:bc:2d:59:3f:
                    bb:ad:e0:29:17:2d:f4:00:32:de:b8:b4:bd:3a:a9:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:F3:F6:DC:5E:A9:06:5F:56:95:AB:A2:5E:0B:F2:26:63:3F:25
            X509v3 Authority Key Identifier:
                keyid:44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:82:5d:7b:d2:b1:1f:8d:e9:62:f6:47:b0:5a:d9:a9:9d:
         25:53:a5:cb:57:4b:3b:fc:b6:7c:d1:01:38:f6:e0:6a:b3:1d:
         b3:8f:d0:83:cb:b9:9e:a9:4c:22:79:1d:d7:30:b8:d1:1a:85:
         79:ef:45:de:ec:9b:1e:7e:93:f9:fb:0b:a3:66:76:d4:46:a2:
         24:bd:cc:33:37:e4:98:bd:6f:f8:c3:07:57:54:7e:9f:2c:a0:
         4e:f0:4f:e5:68:e6:e4:7e:3e:38:d9:ad:11:82:94:4c:9e:a6:
         cb:0b:e7:9d:fd:1d:7f:72:63:5a:ee:74:e4:93:c4:91:c7:da:
         6f:a4:42:93:e3:b3:4d:e1:da:46:08:39:66:1c:3a:27:63:93:
         de:a0:76:d8:70:c0:b4:20:6e:b8:d3:40:71:bb:29:0c:d2:18:
         e9:0c:7f:80:b4:c5:93:e9:72:97:60:9a:40:19:b0:b2:75:f8:
         c7:e3:71:91:ae:87:df:ac:91:a5:45:14:e9:38:ca:6f:3d:b3:
         95:de:96:0d:7b:7c:52:65:09:f1:7d:8a:5a:69:2c:7a:98:95:
         56:fc:a9:af:9b:eb:f8:d3:b3:8b:e2:b5:b6:a8:d5:13:16:5b:
         01:5b:c0:e7:df:0c:60:e6:88:0f:ed:ec:4a:9f:ca:0b:27:4c:
         a9:73:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----