Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/bhpLlKLoybJd3IxgqyVKuBkPt4U.mft
File:                     bhpLlKLoybJd3IxgqyVKuBkPt4U.mft (raw, json)
Hash identifier:          9EeF6CrVIPVJZpC99TTVAnoDXIpP02FCl0EK51N8NXE=
Subject key identifier:   1F:AC:5D:F6:60:EC:E8:31:F0:E9:BB:09:AE:60:DD:30:A2:0F:6C:62
Authority key identifier: 6E:1A:4B:94:A2:E8:C9:B2:5D:DC:8C:60:AB:25:4A:B8:19:0F:B7:85
Certificate issuer:       /CN=6e1a4b94a2e8c9b25ddc8c60ab254ab8190fb785
Certificate serial:       018AA78605FAD686BA05AE27C880E3C78781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bhpLlKLoybJd3IxgqyVKuBkPt4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/bhpLlKLoybJd3IxgqyVKuBkPt4U.mft
Manifest number:          0867
Signing time:             Mon 18 Sep 2023 09:01:32 +0000
Manifest this update:     Mon 18 Sep 2023 09:01:32 +0000
Manifest next update:     Tue 19 Sep 2023 09:01:32 +0000
Files and hashes:         1: AR1bImffp3DqZfE0IsHuYTX14Vw.roa (hash: +R/Sf7q/E5O23ePKj4eSQ6mpMbsoHbH+mrOAStM+U6c=)
                          2: bhpLlKLoybJd3IxgqyVKuBkPt4U.crl (hash: 7D5lX7A2HO9U3Qra6YMRsbwusPlUqKYd9Pa0nVX+t+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:86:05:fa:d6:86:ba:05:ae:27:c8:80:e3:c7:87:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1a4b94a2e8c9b25ddc8c60ab254ab8190fb785
        Validity
            Not Before: Sep 18 09:01:32 2023 GMT
            Not After : Sep 19 09:01:32 2023 GMT
        Subject: CN=1fac5df660ece831f0e9bb09ae60dd30a20f6c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:4d:73:47:cd:38:63:51:38:40:2b:c2:cc:
                    ef:f7:42:67:1e:44:59:8a:3d:d6:57:bb:b0:fd:46:
                    72:4b:9b:20:dc:41:ff:2e:27:38:bc:75:32:d7:38:
                    e7:bd:d0:8a:f6:50:dc:cf:75:b2:45:6d:65:34:4e:
                    84:4c:64:76:be:57:89:5a:b2:71:5e:c5:02:e6:7d:
                    e5:72:4f:5d:a0:e3:05:d8:3a:b2:00:19:06:5e:38:
                    23:3f:fe:a7:f5:1f:5a:11:59:e1:6a:7a:22:80:76:
                    9d:89:86:6a:8e:40:d3:30:9a:dc:7f:df:a7:5a:e7:
                    0f:1f:4f:b5:07:2b:cb:f2:10:89:58:da:b2:b1:af:
                    35:4c:47:6f:96:fd:59:ca:37:18:b2:b2:e9:00:82:
                    2e:1e:25:b5:44:21:b6:4a:37:8a:23:6b:22:35:fe:
                    ea:b9:f6:0c:27:78:15:68:4a:40:a6:37:f3:45:d2:
                    d5:d4:65:d3:dc:46:32:c2:67:ff:3e:6f:b3:42:9c:
                    cd:ab:6c:b4:7c:42:1d:1f:8f:a3:0f:f1:c7:8f:7d:
                    c1:70:24:35:05:f5:4f:46:5c:20:8a:5b:dc:84:13:
                    3e:d6:d8:e7:bd:8f:ef:0c:8b:5c:7e:ca:f3:c6:a7:
                    bc:db:0f:53:e1:c1:07:b3:46:4c:f5:88:7f:ce:67:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:5D:F6:60:EC:E8:31:F0:E9:BB:09:AE:60:DD:30:A2:0F:6C:62
            X509v3 Authority Key Identifier:
                keyid:6E:1A:4B:94:A2:E8:C9:B2:5D:DC:8C:60:AB:25:4A:B8:19:0F:B7:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhpLlKLoybJd3IxgqyVKuBkPt4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/bhpLlKLoybJd3IxgqyVKuBkPt4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/bhpLlKLoybJd3IxgqyVKuBkPt4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b5:4c:f9:b8:c4:6f:19:ff:95:48:5f:bd:8c:a3:cc:81:b0:
         4e:10:1f:c9:fe:89:70:2b:a9:11:41:61:93:e7:63:bc:4b:f0:
         79:f4:c7:2f:92:29:2e:69:78:29:cf:7b:1b:44:16:36:b2:4d:
         1a:4f:03:6b:be:04:9c:2d:a4:bf:3d:5f:54:4b:09:4b:d6:77:
         2d:a0:52:04:44:a0:99:28:36:38:db:67:c6:69:83:29:5e:3c:
         0a:6b:96:0c:25:7d:4e:e9:ff:b6:10:db:1e:cb:ed:c0:5f:31:
         38:9b:01:46:72:b6:8f:bf:61:43:10:14:5d:b7:a5:2c:4d:c6:
         8e:a7:bc:4f:42:f7:ec:9f:a8:04:30:52:55:c0:8f:0a:62:02:
         52:79:ce:07:d7:60:98:b6:98:21:17:5f:49:ad:62:76:9d:c0:
         32:94:2a:eb:78:46:b5:20:f2:e5:7e:c4:9d:7a:a7:49:64:94:
         8b:fb:ba:8d:fb:d6:6d:f0:19:66:3f:39:9f:ab:30:21:68:ab:
         44:05:ee:31:40:b3:1b:fe:5e:f9:32:b9:14:1e:61:9e:b4:ee:
         28:b7:f4:05:d4:f1:fd:a2:9f:90:e9:7b:de:10:37:91:1f:f8:
         a1:aa:6a:68:e5:cf:f0:bc:ec:f1:c2:8c:64:8a:a1:c9:fd:e2:
         5c:81:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----