Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft
File:                     3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft (raw, json)
Hash identifier:          q2GSvL03pUNsukUDEJ9J42D1jO8nmDUxpdWN2lZ68Ic=
Subject key identifier:   3A:23:97:2D:05:39:0C:AA:71:F8:67:6E:75:D1:3C:87:2D:E6:93:D7
Authority key identifier: DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
Certificate issuer:       /CN=dd9261fe07545d893fadb09996691f3cb0757d51
Certificate serial:       018C472819A37C38EE97CFF747D42D0982A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft
Manifest number:          02E1
Signing time:             Fri 08 Dec 2023 02:00:59 +0000
Manifest this update:     Fri 08 Dec 2023 02:00:59 +0000
Manifest next update:     Sat 09 Dec 2023 02:00:59 +0000
Files and hashes:         1: 3ZJh_gdUXYk_rbCZlmkfPLB1fVE.crl (hash: CM/nEcXPuaftm828CWhRXUeTOIy1f+L6AftDtG+2QbI=)
                          2: CcqL3JbmY5UiwnYsByO4EvNWcs4.roa (hash: dnYyH3lDGKBCCmInlna4oR3x17Wzy5RAdjhXSv7KPpY=)
                          3: vEy8dC6L7wMUwOp9uunL8k68lGM.roa (hash: r5bQcOSIDaiOLCGKbk1EqbvzXRQyug4DMd8xXfZZE0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:47:28:19:a3:7c:38:ee:97:cf:f7:47:d4:2d:09:82:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9261fe07545d893fadb09996691f3cb0757d51
        Validity
            Not Before: Dec  8 02:00:59 2023 GMT
            Not After : Dec  9 02:00:59 2023 GMT
        Subject: CN=3a23972d05390caa71f8676e75d13c872de693d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:b4:75:a6:39:2a:b1:ea:d7:f5:14:a0:0d:
                    f7:d7:3a:75:7d:b1:66:7f:ac:bb:a2:b0:ca:00:af:
                    49:a7:5b:0e:16:2e:40:48:f8:c1:51:a4:37:0d:69:
                    33:14:f8:c2:66:1b:d1:ce:2d:a3:46:23:f6:19:b2:
                    3a:03:a4:8e:a9:40:d2:30:41:51:bc:77:f5:1d:32:
                    9d:4e:65:7f:df:81:a3:0b:a4:a6:74:3a:78:f6:bd:
                    3c:88:24:21:7b:b5:c6:ba:46:96:a2:01:53:f6:7f:
                    a8:3c:3c:1b:2f:ea:20:54:6e:86:f3:72:01:89:ae:
                    fd:6a:f0:15:b3:8d:31:29:da:d8:82:af:c2:f5:4b:
                    38:30:d3:ed:32:9e:b2:09:32:65:f2:98:fb:67:6a:
                    b9:ba:ee:4a:30:52:0e:f4:9a:b5:f4:7c:14:7a:27:
                    ff:be:ee:d2:ba:ec:ea:d3:77:24:97:8a:99:a7:b4:
                    2b:16:f4:0e:11:01:90:32:39:36:80:75:f3:dd:28:
                    e7:b7:b4:bc:3e:1a:6a:aa:92:8d:a8:b4:00:d3:74:
                    eb:69:ae:79:96:4a:46:15:18:a1:3f:68:ce:23:59:
                    75:85:61:35:f5:68:bf:0b:69:86:43:75:dc:92:f8:
                    2b:9a:61:f1:eb:a6:bf:9e:ca:31:11:6a:1b:55:f5:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:97:2D:05:39:0C:AA:71:F8:67:6E:75:D1:3C:87:2D:E6:93:D7
            X509v3 Authority Key Identifier:
                keyid:DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:7f:5e:ec:38:3f:27:71:84:5f:fa:39:a0:86:48:94:2e:
         97:a7:3b:ca:00:9c:43:58:3d:6a:21:90:4e:e7:2f:6d:11:04:
         8b:5a:ba:d7:a7:45:66:ff:c4:00:3a:88:ad:7c:d1:15:6b:81:
         3b:21:51:56:cd:e5:12:c2:59:a8:58:df:c8:46:34:03:36:28:
         15:e9:33:24:cf:55:54:41:82:51:91:63:6d:12:5f:8a:eb:58:
         25:fd:4b:9f:c5:70:21:c1:e5:c3:5f:78:c3:c7:b6:9e:93:a1:
         58:0e:6e:cf:81:92:d6:61:c2:63:ee:41:80:78:bc:09:46:8c:
         53:82:be:dc:dd:7e:47:88:e0:82:ef:9d:47:b8:b7:6d:4e:c8:
         6c:65:55:4b:63:86:14:cb:25:6c:f8:b0:49:56:af:81:8e:14:
         5b:e6:c4:1c:9a:ad:a8:c9:fa:9a:9e:c4:87:06:a9:30:cc:9d:
         a9:8e:2d:a0:38:98:99:52:b5:0e:86:ce:21:ea:43:44:0f:87:
         36:ba:9d:bd:e6:2e:4b:3a:5b:b8:2a:2b:40:fb:00:58:6d:52:
         04:9a:b0:45:f2:a2:3a:90:08:22:81:7e:15:7c:32:07:44:38:
         b9:62:8c:7b:75:cb:fd:e4:7d:d2:4a:ba:22:c2:d4:6a:b3:15:
         0b:e3:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----