Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.mft
File:                     s76g2lblX6LrUA8VDcR47Ryzna8.mft (raw, json)
Hash identifier:          VaCteIFHZmC2RIV2cRa21aObse8RwWzJM+8VqNxRxjw=
Subject key identifier:   34:2B:93:2A:EC:F1:4F:38:D4:39:48:30:51:7F:0B:98:3F:6E:18:22
Authority key identifier: B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
Certificate issuer:       /CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Certificate serial:       018B93C53A87AFF91DAEDA0E6F50502D7170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.mft
Manifest number:          0917
Signing time:             Fri 03 Nov 2023 06:00:58 +0000
Manifest this update:     Fri 03 Nov 2023 06:00:58 +0000
Manifest next update:     Sat 04 Nov 2023 06:00:58 +0000
Files and hashes:         1: 1-6kskZEUHZOqjs6PSpx-mwBR478.roa (hash: A11zYfrkhlWz2KqYQfyVAAUrCGng9LHTiRUkOgM5IAI=)
                          2: XSncXPtQFrR6OnvjwCgjlXBOnuo.roa (hash: rd3Hq9XOP2VOFYgoOm/3MT8hh96eW3ccA06wMc+ZiZE=)
                          3: e0MMumXd52y4dGbPwVRUj6beBWc.roa (hash: 89+CsqgY1uRhx5jykTJkPiAYcPEAQexUXZmPIjC2bio=)
                          4: s76g2lblX6LrUA8VDcR47Ryzna8.crl (hash: RZK+/aDUvtyPzB7vEhEThqwzVFbHgRlSxG6mx2q1AVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c5:3a:87:af:f9:1d:ae:da:0e:6f:50:50:2d:71:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
        Validity
            Not Before: Nov  3 06:00:58 2023 GMT
            Not After : Nov  4 06:00:58 2023 GMT
        Subject: CN=342b932aecf14f38d4394830517f0b983f6e1822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:e1:5e:b5:fa:ad:ee:b3:ba:a4:78:c0:14:
                    b5:ea:c8:24:42:1d:a3:ed:8f:3a:93:4b:93:48:7a:
                    00:bd:c8:9c:3e:44:db:d0:14:c2:4e:fa:df:2a:fb:
                    39:09:96:17:ac:85:88:d6:81:c3:1a:03:5d:d8:3f:
                    51:f2:c4:76:0e:cd:02:b5:85:23:33:f4:41:da:cd:
                    ae:8e:90:e2:b0:bb:24:ca:35:8f:66:d9:e6:16:81:
                    41:82:59:a4:7b:11:53:f0:09:b1:0c:61:39:ae:94:
                    f4:39:09:bd:5f:96:20:67:60:94:7d:6c:61:fd:f5:
                    03:fc:7e:61:07:a2:e7:59:4e:0a:7d:37:35:28:23:
                    c5:89:fb:e1:6b:e3:ab:01:b8:5c:23:28:77:50:c8:
                    d9:c3:fc:49:aa:b5:59:f4:68:75:be:9e:5f:49:4b:
                    80:ae:20:4c:0c:1e:07:bd:46:88:29:a6:45:3a:65:
                    13:45:4d:a5:14:f2:78:ad:99:02:d2:3c:0e:13:e3:
                    1a:d5:98:d8:ec:63:9f:3e:1f:88:e5:3b:2d:26:99:
                    f7:0d:4f:da:a7:81:2e:88:25:10:5c:52:18:94:71:
                    9f:81:86:ec:b1:8f:70:2a:7f:f4:f1:1c:a3:1a:92:
                    5f:fa:1e:2b:2a:11:26:c0:04:9f:1c:3a:3b:0d:a2:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2B:93:2A:EC:F1:4F:38:D4:39:48:30:51:7F:0B:98:3F:6E:18:22
            X509v3 Authority Key Identifier:
                keyid:B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:30:35:57:ee:80:a9:2a:01:ef:6d:74:14:7c:70:07:b2:
         30:c9:a0:61:ac:dd:8c:56:38:9f:b2:4b:6d:32:60:8c:11:6c:
         af:14:a6:03:d6:37:13:ea:b9:92:bc:94:13:06:f4:1e:01:5d:
         58:58:bc:fb:83:66:37:9e:6d:9c:44:58:6d:f6:87:79:80:85:
         f1:d7:ce:82:51:a4:2b:e7:2b:2f:dc:fe:fa:2b:fe:b9:6d:78:
         2b:8a:28:72:09:58:bc:09:10:d5:58:5f:b0:3d:0f:2b:d4:37:
         03:ae:13:5f:68:bf:29:b8:59:f5:e8:e7:6a:aa:71:a0:dc:b1:
         58:05:c9:3f:f0:96:90:f4:47:5f:71:44:58:c8:d3:92:01:72:
         68:d8:9f:94:ff:7b:a4:65:da:61:d2:34:48:f4:14:d4:28:c7:
         6a:a9:aa:7f:07:91:9d:77:46:81:43:7f:fa:21:ca:91:c5:75:
         a2:60:22:b6:97:47:24:c0:7f:21:a5:f0:aa:df:f9:44:e8:5d:
         fe:af:1a:20:c7:e8:8f:f7:c3:52:aa:3f:c7:bf:9f:8b:27:0e:
         b0:69:20:76:a9:40:5d:e1:1f:c2:ce:d5:b5:03:df:58:0d:87:
         8b:8e:4c:bf:b3:46:33:c0:e5:fa:65:52:3d:82:90:c7:18:eb:
         64:0d:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----