Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.mft
File:                     iTz63G28Hdm6DkdAbO2zBsaoWVc.mft (raw, json)
Hash identifier:          YS2MwsHOaTEnedoX2zIdXITdaPims8MqxGTjuwZa00U=
Subject key identifier:   3D:C6:67:F8:49:B5:60:AF:62:75:68:75:A2:FC:6D:73:EA:43:21:27
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Certificate issuer:       /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial:       018BCE22C9C6718D4E9A592B98F53094B88C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.mft
Manifest number:          07EB
Signing time:             Tue 14 Nov 2023 14:01:08 +0000
Manifest this update:     Tue 14 Nov 2023 14:01:08 +0000
Manifest next update:     Wed 15 Nov 2023 14:01:08 +0000
Files and hashes:         1: 5HnE5f0crGXSWWgjgvjxRjJM1rk.roa (hash: wzj3JXVyr33ZfRFaUODMCj+ZtYXAfhoBlFfzlm17YtI=)
                          2: iTz63G28Hdm6DkdAbO2zBsaoWVc.crl (hash: 1BGH0C9v7AZgGUcx7LIZD80C9QXu02RR90uS20tzEEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ce:22:c9:c6:71:8d:4e:9a:59:2b:98:f5:30:94:b8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
        Validity
            Not Before: Nov 14 14:01:08 2023 GMT
            Not After : Nov 15 14:01:08 2023 GMT
        Subject: CN=3dc667f849b560af62756875a2fc6d73ea432127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:5c:ab:d2:1c:b4:de:0d:0b:2b:18:c2:df:
                    55:6c:83:85:33:e8:33:18:69:c6:98:69:f1:b0:d3:
                    69:4a:99:78:29:54:c1:d0:6e:90:70:23:cc:d8:cc:
                    ed:2f:15:be:3a:1a:3b:c6:f6:d6:cc:84:25:b4:52:
                    89:84:ef:c1:c5:00:19:05:a0:0e:e3:78:2c:08:9c:
                    7e:ac:3c:7b:3d:40:b3:da:16:76:2b:a3:53:0c:e6:
                    92:87:40:e8:33:5c:42:7c:fd:f2:65:80:28:e7:5c:
                    b2:00:b8:a9:9c:07:14:39:60:cd:e6:5a:0f:0c:85:
                    19:08:54:00:99:91:c9:9a:84:c6:95:0f:61:3f:38:
                    b6:78:0c:35:08:fe:83:2b:3f:5d:6f:9b:9d:e8:bc:
                    24:02:6b:8e:7c:38:fb:33:15:9f:3a:c4:a6:26:36:
                    e0:61:a8:7d:ee:09:31:03:a0:57:69:cf:ee:2b:cb:
                    dd:83:24:41:b3:35:a6:40:83:aa:b6:39:97:ec:29:
                    1b:6d:38:77:25:54:bc:d7:a7:a9:ea:16:3d:b5:2d:
                    96:78:ac:46:28:12:98:5e:d2:67:74:47:d1:74:f2:
                    f6:ce:2f:b2:79:c8:0f:40:e4:7d:31:0b:a8:47:50:
                    bf:75:2f:e6:d9:ec:35:81:5b:43:97:3d:8d:a3:fe:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:67:F8:49:B5:60:AF:62:75:68:75:A2:FC:6D:73:EA:43:21:27
            X509v3 Authority Key Identifier:
                keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:02:81:20:64:cd:b2:1e:02:16:3d:e9:a8:5a:d7:ba:32:
         07:42:08:66:d0:b7:6a:cf:3c:db:c8:f9:f1:39:02:a7:6c:96:
         40:1d:d1:39:e3:cc:52:63:8e:a0:65:1b:7b:ec:81:07:e3:44:
         41:e2:65:8f:30:e3:0e:34:19:7d:af:3f:b8:32:5a:18:44:67:
         06:ec:b3:d4:b4:a4:32:9c:02:79:f9:dc:e5:0e:32:9f:95:03:
         ed:2a:32:44:3f:b2:5a:62:cd:7e:4f:18:e8:02:ba:9a:64:a4:
         24:ff:24:4c:35:d2:20:19:d2:85:1f:ca:78:3f:61:bf:2d:da:
         2d:26:76:ce:61:5c:bc:eb:d4:44:65:9a:57:95:2b:45:e5:77:
         0c:61:23:33:ae:08:f1:d7:cf:30:71:1b:85:76:78:fe:a3:ed:
         42:ab:e2:65:14:7e:29:ff:b6:ca:f5:5b:91:b6:eb:5d:4d:1a:
         b8:42:04:d8:f7:ba:13:06:60:5b:53:db:98:f0:24:1b:84:bf:
         47:5e:2c:ea:07:d1:92:c1:40:64:bf:d9:82:3c:4a:1f:97:6c:
         e5:51:40:23:90:85:59:5e:97:36:21:20:e4:34:21:72:18:2a:
         50:3e:16:8e:aa:ff:36:44:00:f9:66:1c:59:09:26:f0:cc:59:
         48:29:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----