Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft
File:                     10deyw9oClbSD1gbvc5SHPt-tG0.mft (raw, json)
Hash identifier:          QTJlydWPm0vmjMs8YxNyN2wMfOrlgV6iJeG6GePZ4b8=
Subject key identifier:   97:78:B4:BF:7A:F4:6A:23:74:48:D8:60:0E:4B:3B:95:25:2D:C8:5D
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       018CEE4F9C5A0971980CD9E05C484160822C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft
Manifest number:          098D
Signing time:             Tue 09 Jan 2024 13:00:43 +0000
Manifest this update:     Tue 09 Jan 2024 13:00:43 +0000
Manifest next update:     Wed 10 Jan 2024 13:00:43 +0000
Files and hashes:         1: 10deyw9oClbSD1gbvc5SHPt-tG0.crl (hash: AgVXqLg7gBimg5dtLQMCt/mIJElC6oqjvIXc180pUBU=)
                          2: B0_1LneUfwPox5JpoXP_TCqaVs4.roa (hash: +YqRKmNkwqx8MGLz4uDmXX79VrvDouNpjFnOaPql3fA=)
                          3: CrTleAgl0-LZTN7EYV-ozb1g4D8.roa (hash: CMXoV8TSdqAwvN946jDp8ZonPGmk8rvDl9DBYd0e2wI=)
                          4: JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa (hash: l2uZFgQjtW/uHkOn3XiELxEIclKc3wO6oXrwIajeTpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:4f:9c:5a:09:71:98:0c:d9:e0:5c:48:41:60:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Jan  9 13:00:43 2024 GMT
            Not After : Jan 10 13:00:43 2024 GMT
        Subject: CN=9778b4bf7af46a237448d8600e4b3b95252dc85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:41:d9:2a:57:7b:a6:f3:59:1f:eb:5a:e3:
                    e9:ea:80:17:d6:83:15:18:6c:70:1e:de:ed:3d:23:
                    d3:3d:1c:fb:48:fe:17:f7:3e:e6:4a:1c:1b:16:ad:
                    24:27:24:37:b9:32:b6:0c:22:82:7d:3e:ed:75:5e:
                    72:a0:c8:d1:fc:87:5e:50:8e:a7:09:54:62:28:b7:
                    b8:04:1a:7e:e8:f1:e7:0b:e2:d8:eb:ea:1f:bc:d6:
                    60:12:9d:df:70:20:40:f7:5a:62:7a:dd:d0:e0:d4:
                    4f:a0:8b:33:e0:c9:8e:b8:7c:b4:14:0c:5c:11:4c:
                    03:5a:48:b5:61:37:ce:ec:c4:87:35:81:f7:21:13:
                    39:91:e3:e6:20:67:dd:9f:7c:cf:29:b1:6f:79:a4:
                    4d:ea:57:e8:c0:36:bd:7e:00:b5:a9:14:be:0c:9b:
                    3d:58:a0:47:41:c3:c6:7d:5b:4a:e4:36:d9:55:de:
                    8b:66:44:72:6e:df:38:59:28:2b:0d:ef:8d:62:e9:
                    93:42:f0:3c:96:1c:ef:79:19:18:47:c1:67:91:db:
                    f2:62:3a:df:4b:71:35:99:96:32:f5:ad:96:f8:b4:
                    8a:4b:d3:45:86:87:32:6b:cf:06:60:3b:e0:14:43:
                    bc:ac:56:89:16:d9:f4:4a:f6:f8:f9:41:58:85:47:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:B4:BF:7A:F4:6A:23:74:48:D8:60:0E:4B:3B:95:25:2D:C8:5D
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:40:5a:1f:1e:da:0e:96:d2:48:02:f5:4d:b0:a0:cb:3e:
         ff:b0:66:74:01:f7:5d:8c:9f:82:78:a9:16:e0:4a:5a:6f:e9:
         6d:5b:97:c9:dd:08:d7:75:0b:e2:1a:31:c0:86:9c:74:27:74:
         12:d5:3f:82:97:72:01:2a:aa:3e:60:e7:8e:ea:fe:a0:95:5b:
         f4:a2:3b:5c:4f:ac:b8:14:e0:4f:ce:23:5b:3f:7d:4e:85:5a:
         b1:02:64:2d:f6:04:5f:05:d1:b6:a4:38:4c:54:ca:d8:d4:87:
         58:48:4a:fb:bc:f2:14:19:6e:c5:90:79:c6:5b:6e:79:b3:76:
         e2:3a:f2:ab:47:f1:c0:ec:63:83:44:0b:55:7e:29:36:5b:ed:
         fd:4b:53:dd:40:48:34:22:a9:89:67:a2:5a:66:c1:71:4a:0a:
         a8:3b:a9:f1:58:8c:35:d4:7e:94:44:6e:bb:e4:ef:64:67:02:
         41:77:38:68:4d:6f:c5:8f:6f:e6:49:6a:47:c5:2b:a6:9a:dd:
         4e:9a:e9:f2:92:00:3a:0b:d7:c9:cd:f0:c9:55:90:30:53:39:
         5d:a7:ec:99:e1:ac:91:5a:18:c6:28:0f:60:ab:a5:d5:23:26:
         5a:ba:21:84:e8:59:d5:85:31:13:23:70:bb:63:98:fb:e1:5f:
         04:52:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----