Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.mft
File:                     xCPROyob2ozAf6tVyqZKNB4x9AM.mft (raw, json)
Hash identifier:          syU9/JJTNrA7C3jWb3AZogQOzL2aHpnzR1zdZP70bZA=
Subject key identifier:   FF:7D:B7:B8:60:F4:DE:48:4D:EC:04:58:C1:50:47:DB:CE:2E:D4:B7
Authority key identifier: C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
Certificate issuer:       /CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
Certificate serial:       018BCE2345574337BF23B110C8A6500A7920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.mft
Manifest number:          0767
Signing time:             Tue 14 Nov 2023 14:01:39 +0000
Manifest this update:     Tue 14 Nov 2023 14:01:39 +0000
Manifest next update:     Wed 15 Nov 2023 14:01:39 +0000
Files and hashes:         1: Tbgav8x2GozHJnm9jcmaSdhAG2U.roa (hash: rxzC5DG+jmvW95K53iuaq8hJGsekLVwUFZecI/uFl/4=)
                          2: xCPROyob2ozAf6tVyqZKNB4x9AM.crl (hash: EEuBhLN/UlufQpodbN94d7ZzaTMn5tgrijnJwfgvW4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ce:23:45:57:43:37:bf:23:b1:10:c8:a6:50:0a:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
        Validity
            Not Before: Nov 14 14:01:39 2023 GMT
            Not After : Nov 15 14:01:39 2023 GMT
        Subject: CN=ff7db7b860f4de484dec0458c15047dbce2ed4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:77:c1:5d:bf:1a:84:5d:72:27:a3:0d:bc:
                    e7:3b:68:56:c8:10:6a:71:6d:78:a0:dc:39:c9:24:
                    17:0f:fb:11:2f:76:60:20:3b:9d:67:80:be:d9:22:
                    3e:e8:ce:81:24:9a:c5:b4:79:fd:4c:e5:7d:7f:dc:
                    81:c2:7d:d1:4e:5f:24:51:e9:49:c0:dc:74:b2:1b:
                    99:ea:e4:39:6b:7d:a3:f5:e1:32:58:b9:2f:e4:f1:
                    44:07:c6:81:14:b9:23:53:df:be:60:e6:1e:76:47:
                    f0:92:fe:31:8f:cf:8f:8c:fa:24:6b:05:6c:90:0b:
                    cc:7f:da:f7:a8:3b:1d:34:e7:8c:62:fd:41:0e:39:
                    60:ee:d7:a9:23:7a:6b:54:c6:e0:8a:10:ec:92:47:
                    c3:e6:0f:a4:37:9e:47:49:20:fc:7c:9f:77:66:d8:
                    16:0f:58:24:20:3f:de:f3:c3:fb:7e:e4:17:e0:fc:
                    e6:be:07:03:9f:50:9d:a7:e6:8a:4a:d8:9e:21:79:
                    57:c9:5c:98:86:97:26:66:8c:52:f0:e8:e9:e5:b2:
                    41:2b:ce:cf:19:fa:20:8c:5b:a5:7e:0f:1c:f4:a9:
                    ba:99:ed:40:9b:6a:29:72:8d:3d:f6:3f:4a:6a:29:
                    00:24:6b:bd:3b:0f:ef:cc:91:8d:e3:f8:f9:80:98:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7D:B7:B8:60:F4:DE:48:4D:EC:04:58:C1:50:47:DB:CE:2E:D4:B7
            X509v3 Authority Key Identifier:
                keyid:C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:63:de:55:25:45:50:88:4b:ec:66:a3:a5:4a:b7:f1:2f:bc:
         8a:86:e7:80:7b:54:3a:4c:2f:4c:d3:ab:61:0d:b5:31:42:79:
         ca:bf:c7:71:52:f8:76:08:dd:5a:be:fb:82:f3:70:3b:f0:1b:
         1a:0e:26:71:1c:f3:a4:46:ec:58:9c:67:8b:9f:1a:57:19:a5:
         fb:3b:1e:1e:53:27:9f:1d:30:7b:20:f7:b3:9b:c6:21:0b:77:
         24:a5:59:4b:5c:de:17:6e:2a:de:c9:29:ec:91:db:d7:9c:8a:
         c5:19:32:e0:cb:15:16:2f:06:32:dc:9c:b3:c6:d1:79:4d:d6:
         9a:fb:82:e8:b8:dc:c6:fb:9c:d2:78:f0:db:d2:7a:58:04:34:
         d6:ad:90:0a:db:e6:2b:e6:f5:73:71:9e:bc:b0:a6:df:3e:59:
         ac:73:9d:7c:36:84:e3:49:d3:f3:a2:21:13:04:00:ef:6e:bd:
         4f:50:17:00:db:5a:fa:0c:2a:df:7f:73:4e:f4:6a:40:54:27:
         8a:ac:62:0f:39:56:db:79:cc:03:68:d4:06:99:42:d1:24:e8:
         f7:62:50:0d:48:1f:db:1a:65:85:80:6e:87:2d:a0:bd:5c:4a:
         8e:80:70:87:8e:4e:81:cf:02:e5:d2:7b:ab:cb:7f:53:7c:e2:
         c5:55:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----