Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
File:                     HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft (raw, json)
Hash identifier:          bX0/RkkB5aVOCCCLTepc3q7rf9pFgAFtxPnDCOPZ4yk=
Subject key identifier:   5D:42:D9:87:81:68:72:B4:91:80:C9:84:A0:01:74:02:B9:92:11:5E
Authority key identifier: 1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
Certificate issuer:       /CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
Certificate serial:       01894E598C79062928BF32DA0D9FD7EDF816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
Manifest number:          089A
Signing time:             Thu 13 Jul 2023 08:23:58 +0000
Manifest this update:     Thu 13 Jul 2023 08:23:58 +0000
Manifest next update:     Fri 14 Jul 2023 08:23:58 +0000
Files and hashes:         1: HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.crl (hash: CP/h3MxICEcSYh5IpAONL2hJ7I5zpf+DNiCU1Q47eMg=)
                          2: lL7SL7zIkM5O8PsnYbxNbH9CIUg.roa (hash: vMWsUklIOTBbWTlJH6+mhpYqGJXfnzrHr5Y/owaYZKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4e:59:8c:79:06:29:28:bf:32:da:0d:9f:d7:ed:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
        Validity
            Not Before: Jul 13 08:23:58 2023 GMT
            Not After : Jul 14 08:23:58 2023 GMT
        Subject: CN=5d42d987816872b49180c984a0017402b992115e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:c7:0b:9e:73:e3:c6:6b:eb:05:c9:61:24:
                    40:a9:ef:8f:fc:09:2b:0b:3d:49:1b:6f:7e:e9:34:
                    7d:32:70:7d:ba:6d:a9:d9:5b:49:41:41:ca:8a:79:
                    73:a2:7f:b4:d0:3e:3d:c0:c1:03:0d:b7:d9:63:82:
                    8d:c5:7b:23:a0:ee:39:bc:c5:45:61:f6:e3:78:69:
                    dc:f1:9d:c2:0b:6c:d6:47:02:4d:31:6a:be:47:58:
                    2a:1e:a5:bb:35:5c:7b:ab:42:fc:a5:81:8d:38:f4:
                    6c:2c:6e:88:4b:c6:67:dd:b0:d6:f5:fd:b3:6f:e8:
                    f5:af:93:32:9a:42:3d:3e:c5:19:01:0b:fd:b2:a7:
                    97:ac:1c:9f:8a:01:f6:19:32:9a:0a:58:13:3a:42:
                    0a:87:87:31:e6:17:7b:f9:ee:f6:51:c2:58:fa:f1:
                    08:75:b4:57:3b:05:d1:2b:fe:50:6c:34:de:5e:16:
                    f4:b8:cf:c6:77:79:29:32:7f:78:d9:24:af:a8:64:
                    9c:e3:97:1a:b7:b4:90:62:c6:f1:5b:6a:ea:c7:18:
                    8f:a1:ba:75:d2:70:75:e2:d9:cd:10:e9:5e:cf:2e:
                    4e:aa:b7:4c:85:68:1b:be:77:e7:02:14:ba:2b:0c:
                    49:7a:2f:01:5b:e1:32:2e:cd:f8:64:f0:f6:93:d4:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:D9:87:81:68:72:B4:91:80:C9:84:A0:01:74:02:B9:92:11:5E
            X509v3 Authority Key Identifier:
                keyid:1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:27:72:f9:01:79:8e:dd:7c:71:b8:2c:96:2c:8b:71:92:
         ce:b7:b8:45:d3:2a:6e:9e:59:0d:35:78:66:3c:d1:2e:d1:75:
         78:79:cf:41:eb:20:e5:07:26:52:2f:a7:1d:4a:d7:0f:66:e2:
         1c:2c:eb:0c:05:27:95:15:76:88:8c:17:61:29:2e:83:63:d8:
         85:29:d2:13:ca:cd:5e:f8:52:ad:07:8d:e1:c7:78:ba:c5:82:
         3d:77:e3:39:68:d0:a1:03:05:4b:4b:d5:b0:a4:62:e6:43:74:
         ff:16:2e:eb:be:aa:b7:85:66:fb:3a:32:c9:a7:52:5e:ce:47:
         a7:3b:ed:68:76:c8:b9:c8:68:e4:6e:36:97:f9:25:4d:a5:89:
         ef:1e:29:dc:b9:8a:b8:2c:22:2a:bf:f0:40:66:51:b8:12:e4:
         0f:f3:d7:7b:47:f2:65:3a:73:3d:e3:5c:7b:fd:f6:b0:79:e2:
         3f:33:37:cf:3f:a1:b6:08:19:9f:8b:ed:a8:76:6f:83:9a:29:
         00:5d:27:fd:42:80:85:84:81:2e:98:33:9e:67:7a:c6:91:1d:
         c2:c1:cb:12:08:19:9a:04:4d:eb:00:c6:a7:aa:aa:c4:5c:70:
         69:61:fe:b7:37:88:9c:12:75:7e:c7:49:77:3a:cf:46:41:77:
         47:a3:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----