Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.mft
File:                     e4QV_6siDzFina0ecWQj4s1wPrA.mft (raw, json)
Hash identifier:          jiOiExYZzcxN9m50dAG4hnjAP94AwJx221RFXvGJ/DU=
Subject key identifier:   A6:B4:31:59:21:E4:4B:DD:E5:24:04:85:D3:85:F7:77:76:D9:1C:89
Authority key identifier: 7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0
Certificate issuer:       /CN=7b8415ffab220f31629dad1e716423e2cd703eb0
Certificate serial:       018BC7EA188F87EEC168A3BBE435B1100159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.mft
Manifest number:          0F85
Signing time:             Mon 13 Nov 2023 09:01:29 +0000
Manifest this update:     Mon 13 Nov 2023 09:01:29 +0000
Manifest next update:     Tue 14 Nov 2023 09:01:29 +0000
Files and hashes:         1: 5nEE6j6zRpHCcC4hjvf76dMYjWw.roa (hash: XKT9lMf5Xc+0JIcq1XuAa1o8FdOffLq8D8NJeEGlEC8=)
                          2: e4QV_6siDzFina0ecWQj4s1wPrA.crl (hash: SMKfwRg8P0obswklc5cH9I6ttgLQhTOoVw4YpG7cmow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:ea:18:8f:87:ee:c1:68:a3:bb:e4:35:b1:10:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8415ffab220f31629dad1e716423e2cd703eb0
        Validity
            Not Before: Nov 13 09:01:29 2023 GMT
            Not After : Nov 14 09:01:29 2023 GMT
        Subject: CN=a6b4315921e44bdde5240485d385f77776d91c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:8f:66:c3:c7:74:db:84:70:b1:9b:f8:c8:
                    1e:5b:48:a6:b1:44:9e:8b:74:a4:3d:19:8b:02:03:
                    f2:36:ce:74:3c:28:76:fd:9e:c5:57:ea:2d:3e:7d:
                    9a:1f:a4:37:dc:6a:d9:62:02:91:ef:4a:cc:89:55:
                    48:f7:bf:93:22:f2:ed:0f:fa:36:5a:62:f8:57:60:
                    e2:74:ad:02:13:68:9a:1d:de:30:07:a9:08:ba:d3:
                    0b:6b:4c:fd:9c:a9:97:a0:39:11:02:b2:12:3f:a9:
                    54:a5:f3:5e:ae:30:ee:10:1c:bc:9c:f6:25:4d:24:
                    bb:b7:44:12:8c:fe:c0:3e:b8:92:49:02:14:66:bd:
                    14:bc:02:34:f9:ef:5d:e1:65:72:33:f7:bf:e8:52:
                    22:d5:b3:71:66:9b:ed:2a:58:77:14:1f:ea:d6:6a:
                    dc:5a:59:67:fb:a2:73:c1:23:35:70:80:21:29:95:
                    bf:19:e3:b3:ee:da:83:98:5a:0c:17:aa:da:08:62:
                    b4:11:b2:54:71:fd:58:57:ab:29:cd:a4:69:66:db:
                    e1:3d:54:90:e1:f1:8d:bd:1c:f3:5e:be:29:28:ab:
                    17:98:3f:d3:2c:b8:37:52:ab:f0:ac:a2:2b:87:bc:
                    c4:f4:2f:63:a9:f3:b3:b8:88:19:86:20:26:eb:9e:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:31:59:21:E4:4B:DD:E5:24:04:85:D3:85:F7:77:76:D9:1C:89
            X509v3 Authority Key Identifier:
                keyid:7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:fa:b3:cf:a8:94:6b:b8:8a:2c:31:5d:21:ce:ac:19:69:
         13:63:fb:c6:b7:d2:29:b6:f4:66:23:d6:20:8d:e8:f2:a9:a5:
         d6:a3:42:e5:71:ed:46:17:52:aa:2e:53:9f:39:62:d2:5a:25:
         56:9c:fb:18:01:f7:fd:d5:7e:59:c7:eb:44:37:0d:9f:52:eb:
         6d:37:44:44:62:51:64:51:7b:d7:30:ca:23:87:a9:98:3e:67:
         ad:68:77:4e:f1:ef:87:b4:58:ae:76:4e:28:78:50:7e:2a:6f:
         68:f0:79:1f:52:35:9e:07:57:7c:f3:ad:00:f1:4f:17:08:7e:
         4b:a0:9b:ae:e3:b1:86:71:11:ca:d2:9e:00:b1:2c:70:c8:0e:
         e4:02:87:b5:08:b3:81:4f:e2:a4:d1:d2:24:09:6f:4d:d7:51:
         e7:2f:2e:b6:1a:c5:8a:b9:cf:f2:10:72:50:a2:f9:e9:d1:b7:
         24:a8:5b:39:fa:60:22:e2:73:a4:00:e2:bc:08:55:4b:37:0f:
         ad:e4:0b:4a:69:48:21:fe:78:ad:1c:a0:f0:d3:93:de:97:af:
         cf:4f:d5:b5:35:26:81:3f:f7:25:4c:a6:a1:17:2b:ac:26:35:
         a4:1f:81:d5:b6:dc:1c:28:3b:dc:09:5d:0f:2c:9a:64:6f:27:
         bd:85:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----