Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft
File:                     MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft (raw, json)
Hash identifier:          orxXDl/u6bKwFV73FnoB+ufnd39EcozFNf4ptlpxog0=
Subject key identifier:   89:C1:A2:F3:EF:46:F4:C2:11:91:A9:F3:81:73:69:1D:58:03:56:A3
Authority key identifier: 31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA
Certificate issuer:       /CN=313f49d36296a1565b85107c29aea38920df0dfa
Certificate serial:       018CB2A924396CC2EED4B589480FABA24EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft
Manifest number:          0E23
Signing time:             Thu 28 Dec 2023 23:01:18 +0000
Manifest this update:     Thu 28 Dec 2023 23:01:18 +0000
Manifest next update:     Fri 29 Dec 2023 23:01:18 +0000
Files and hashes:         1: MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl (hash: jjFZOh8IoeYzrik9+1Ezp/DlfsIJ/EJwEt1vdH/i+ZE=)
                          2: MzYoxEbR75ls_bfOelNdacEhZuo.roa (hash: bSFn6PZ2jpptEeSaSbx+nbDsrRn9EabvxxCJ/8+MEnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b2:a9:24:39:6c:c2:ee:d4:b5:89:48:0f:ab:a2:4e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313f49d36296a1565b85107c29aea38920df0dfa
        Validity
            Not Before: Dec 28 23:01:18 2023 GMT
            Not After : Dec 29 23:01:18 2023 GMT
        Subject: CN=89c1a2f3ef46f4c21191a9f38173691d580356a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:ec:d2:f7:ac:5c:c4:b7:5e:f0:c3:38:b0:
                    f0:49:ac:8c:f8:dc:72:12:5f:12:37:a0:11:be:7c:
                    a2:a4:a2:c0:9b:bc:1d:1e:97:24:48:49:cb:73:94:
                    05:c5:ba:56:f5:41:8a:88:fc:3f:f7:96:54:63:e4:
                    3b:b4:25:ca:85:80:66:68:99:c0:a0:05:62:c5:96:
                    71:a2:fd:9b:93:3e:85:0c:29:34:3b:45:2f:41:5a:
                    b1:d0:e9:94:85:e3:0d:11:a5:b4:56:ba:2f:07:38:
                    78:81:2a:36:f1:62:7d:9c:db:f6:47:e0:cb:63:9a:
                    d8:f6:b4:fe:55:95:ff:d9:21:f3:97:cc:7b:b9:fd:
                    47:94:9a:bb:84:8b:3d:fe:7b:d9:08:46:f3:9f:00:
                    26:0f:77:6a:5d:7a:79:4f:2d:47:2d:1c:65:26:cd:
                    22:22:ba:78:86:f9:31:3c:25:c0:ff:e5:78:47:18:
                    7e:65:32:cd:7b:c1:45:01:0f:ff:e8:4c:c0:35:c0:
                    27:be:74:56:72:92:ac:a2:76:51:35:91:d6:4d:a2:
                    a0:b5:04:99:30:5e:75:8b:b3:9d:4f:be:1c:9f:97:
                    f2:04:63:47:3e:26:f8:e8:23:f1:60:44:21:68:a3:
                    23:67:dc:99:5b:7e:bd:66:d4:b7:08:64:cf:17:4d:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C1:A2:F3:EF:46:F4:C2:11:91:A9:F3:81:73:69:1D:58:03:56:A3
            X509v3 Authority Key Identifier:
                keyid:31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:29:04:a6:b8:a7:c1:3a:24:4b:b8:d9:52:d2:1c:bd:3b:
         0a:63:5b:53:7a:b6:df:2d:f6:99:1a:ec:67:94:ae:59:0e:2e:
         16:db:57:3c:78:b0:77:61:65:9e:b2:e6:77:65:c0:d1:f9:b6:
         9d:c1:79:dd:71:5b:65:d8:a7:55:4f:f6:fa:cc:01:6e:cf:23:
         ab:7b:2d:da:dd:92:87:1b:95:6a:1b:ef:e2:f7:ad:c9:0a:ef:
         28:dc:8f:ad:bd:51:78:f6:5b:be:ea:c5:cf:a8:08:5c:53:27:
         73:0a:73:05:ce:07:3c:0e:e4:40:bd:b5:ce:58:7f:37:ab:14:
         f6:2f:bb:ea:94:ae:b7:54:03:03:a0:c4:84:59:aa:dc:00:da:
         ed:e7:d3:79:2c:d4:ac:00:03:35:c2:c7:7c:c4:54:d6:5a:56:
         79:64:2f:08:ce:85:8b:1f:a2:a9:29:0f:1b:d8:a6:e5:8b:56:
         e6:d3:80:64:05:ef:da:70:a2:a6:b2:93:a4:49:90:4e:77:86:
         c5:c3:1e:34:35:f2:30:61:99:9a:64:a7:a1:be:70:52:e2:8a:
         e5:a5:e0:ca:96:29:55:a6:a2:60:87:d2:e5:df:8e:d5:c3:e2:
         74:bf:6a:78:5a:79:a2:81:e7:12:fc:34:f8:17:76:f4:c7:dd:
         c3:1a:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----