Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.mft
File:                     e6mXfQxlbOEZ5sih2zSqMUivqGg.mft (raw, json)
Hash identifier:          cNIZX4Z2oqK4hZAOrXVl6GdAxQ2/S4aWmNbSLehtrAI=
Subject key identifier:   18:05:7A:59:5A:80:FC:04:66:F9:E1:49:9C:0B:8B:C2:FD:A7:71:A6
Authority key identifier: 7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68
Certificate issuer:       /CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
Certificate serial:       018C8ABFB64858934371A4A762EE204EAF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.mft
Manifest number:          0937
Signing time:             Thu 21 Dec 2023 05:01:08 +0000
Manifest this update:     Thu 21 Dec 2023 05:01:08 +0000
Manifest next update:     Fri 22 Dec 2023 05:01:08 +0000
Files and hashes:         1: e6mXfQxlbOEZ5sih2zSqMUivqGg.crl (hash: InLfOkrtDX3H9Niyfx8o7bGh6i7FKTgmFZyt1sLyC+M=)
                          2: sA1vezfgmdNMw1TtkrpWqcSFejo.roa (hash: 8Fo5BythZ7vAX+TWM0JIJ6gDvkPEGKFJ0BOTsrKLbxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:bf:b6:48:58:93:43:71:a4:a7:62:ee:20:4e:af:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
        Validity
            Not Before: Dec 21 05:01:08 2023 GMT
            Not After : Dec 22 05:01:08 2023 GMT
        Subject: CN=18057a595a80fc0466f9e1499c0b8bc2fda771a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:59:92:fb:23:72:cb:c6:f5:41:43:ce:3a:
                    49:fc:06:af:f8:a9:59:cf:4d:ef:db:dd:0b:8e:69:
                    5f:08:f8:01:b9:7d:7a:15:2b:80:7a:2f:f9:b7:73:
                    3a:d5:4a:2b:69:b1:39:47:cc:0f:6a:9a:da:f0:55:
                    2c:9a:64:98:b1:31:12:35:fd:da:7b:3c:b2:24:55:
                    c9:3a:1d:8c:48:49:e9:5d:8d:2d:cf:f4:40:86:14:
                    7e:95:e9:03:f7:dc:1c:c8:81:71:c2:ff:17:ff:b7:
                    0e:60:b6:88:f2:cb:45:fb:80:72:b8:f1:87:99:bd:
                    bc:bc:b5:80:42:4e:3e:d3:35:82:12:ed:7c:4a:cb:
                    99:c1:14:4a:22:66:74:0d:61:a4:8a:c9:55:3a:b6:
                    a6:fd:fb:fb:9b:20:b3:02:c8:c5:a8:9f:69:8a:91:
                    9a:9c:ef:6d:95:ce:55:aa:b9:14:e5:e1:9a:88:f4:
                    f6:39:9b:41:eb:a8:c4:87:ee:d4:3c:e6:66:c5:79:
                    38:4c:88:6b:95:8c:38:50:d3:88:f9:ca:69:da:1e:
                    2d:79:10:ac:e4:f3:af:b3:17:e1:17:d1:8e:d2:40:
                    a5:8b:93:43:26:cd:6d:7d:0e:12:6a:ea:cb:db:2a:
                    51:7e:11:b1:5e:05:b5:13:35:88:91:49:73:94:21:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:7A:59:5A:80:FC:04:66:F9:E1:49:9C:0B:8B:C2:FD:A7:71:A6
            X509v3 Authority Key Identifier:
                keyid:7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:7e:2e:46:57:bf:b9:4c:9d:2f:e5:95:2e:a7:90:ec:2b:
         ff:51:3b:a2:19:40:84:eb:98:ab:53:bb:6f:c9:07:e2:be:e1:
         73:2c:dc:63:ff:2a:ea:cb:df:e4:09:b4:48:8a:07:0d:58:e8:
         50:0a:b9:03:9c:d0:a7:90:b0:ff:37:b2:48:52:03:74:55:58:
         a2:f2:5b:e4:1d:17:61:d5:2a:63:44:d0:4e:51:d2:c2:eb:b4:
         d4:64:75:4a:d6:8b:2c:95:de:4b:5c:19:f4:aa:f3:29:32:d8:
         fb:04:5b:c7:d5:b2:7d:0e:0f:18:d2:4c:5b:1c:7d:e4:44:87:
         55:ab:59:00:f9:23:e6:78:53:44:df:7d:78:05:1f:3b:0b:3f:
         be:17:08:7c:dc:04:6d:2c:8e:bd:b0:7b:c7:af:ea:4d:ae:2b:
         b1:52:2c:91:a6:ca:83:d7:e8:11:0e:ab:d5:07:04:bd:84:fc:
         c6:1b:03:15:16:88:e2:37:ca:0a:bb:e6:56:c8:1e:f2:31:0e:
         b0:a8:04:b8:1c:de:b8:67:40:ab:0c:08:71:58:e3:ea:53:d2:
         ad:9b:93:55:fe:39:51:94:99:4f:43:3e:a9:00:21:f6:f1:25:
         1f:61:31:f8:07:7f:6d:40:b4:b2:46:43:f1:99:68:5e:d1:c5:
         c1:c3:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----