Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.mft
File:                     dWgoR_g9uCjn8Ewstc622MQjf6s.mft (raw, json)
Hash identifier:          PBuZSb0mxACyKNfGEm9fp5/IHL20OkKBDua15psUUus=
Subject key identifier:   15:4F:CB:5C:29:2C:AB:34:99:B7:13:1D:F8:26:95:C1:6A:3E:A2:3A
Authority key identifier: 75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
Certificate issuer:       /CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Certificate serial:       018E2FF637BE831668CCEA77C1318659525A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.mft
Manifest number:          10C7
Signing time:             Tue 12 Mar 2024 00:00:49 +0000
Manifest this update:     Tue 12 Mar 2024 00:00:49 +0000
Manifest next update:     Wed 13 Mar 2024 00:00:49 +0000
Files and hashes:         1: FwjYu59IHrP1xjmjmN9SQelTdUI.roa (hash: SHA37VB59XxBBHafmsVB+ZcMkytFcgJUaCyzpBp/nww=)
                          2: dWgoR_g9uCjn8Ewstc622MQjf6s.crl (hash: Ic5zzNjKsc0J4QptwBlotb8N0IuKgVe+qVp27FD7630=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2f:f6:37:be:83:16:68:cc:ea:77:c1:31:86:59:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
        Validity
            Not Before: Mar 12 00:00:49 2024 GMT
            Not After : Mar 13 00:00:49 2024 GMT
        Subject: CN=154fcb5c292cab3499b7131df82695c16a3ea23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:b4:e9:db:f9:45:49:90:7a:a4:65:86:7d:
                    1a:3e:45:bb:2d:6e:a0:0d:bf:c6:14:37:7c:7e:f6:
                    a2:9e:5a:04:c2:0d:a5:24:41:8e:ed:c4:e6:0a:38:
                    6f:1d:0a:02:1e:2a:58:ce:ef:33:fe:2a:5f:7b:3f:
                    da:49:ee:16:0d:74:65:ac:2b:39:2b:40:b1:e3:2b:
                    a2:65:3f:9a:ae:6e:75:7b:21:0a:e1:ee:ec:19:a4:
                    e3:e2:2a:38:3a:95:05:5a:13:34:78:48:35:4c:08:
                    c4:ed:7b:2d:60:3b:0b:33:d6:11:a7:fc:a0:4d:c1:
                    3d:b9:fc:5d:b2:cf:22:d2:df:36:9d:58:ec:2c:6d:
                    86:0d:3d:9d:a6:ff:91:b1:7e:36:48:7f:47:60:17:
                    e3:ce:4d:f1:94:cd:31:89:2f:80:40:37:0d:af:68:
                    03:e5:50:13:92:06:23:50:5d:13:38:98:ad:47:29:
                    31:38:17:62:0e:da:10:2b:cf:ab:86:4a:0b:67:d2:
                    fc:ca:51:3d:91:d2:2d:e9:ce:dd:13:fe:5b:32:87:
                    9a:ba:71:6b:de:7e:11:16:1a:46:1d:43:ee:7b:58:
                    9f:13:0f:0a:ab:35:26:e5:70:e3:ab:36:72:e6:b1:
                    86:98:eb:a7:cd:06:58:a8:31:05:5a:39:8e:cf:8f:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:CB:5C:29:2C:AB:34:99:B7:13:1D:F8:26:95:C1:6A:3E:A2:3A
            X509v3 Authority Key Identifier:
                keyid:75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:18:ce:30:e1:00:85:6a:37:b1:e1:1c:21:2b:8a:1d:47:f5:
         58:c8:70:aa:1e:9b:26:1c:e4:6b:a5:56:d3:ff:0c:4f:c0:47:
         f3:c8:1a:35:43:dc:a4:4f:db:9f:9b:54:0e:7f:f0:ca:c0:04:
         47:91:99:e3:fb:26:bf:2f:0c:80:2f:c3:cb:7a:18:0e:5d:2c:
         a0:83:c6:64:ad:5a:40:60:45:80:b8:d3:ca:a6:8c:ed:5a:62:
         87:22:6a:ec:74:c3:be:81:da:b9:d6:91:1a:57:47:31:da:4e:
         e3:2e:49:e5:c5:89:a8:77:25:6a:31:8a:71:6c:9f:33:1a:54:
         c9:36:07:56:9f:57:51:aa:30:3d:fb:e2:83:e3:61:46:c9:19:
         32:12:8c:23:db:39:ac:5b:e2:b2:ef:ee:f0:b9:61:51:96:24:
         33:86:bc:f0:16:a0:cb:75:f6:5b:58:0b:f8:f6:0d:9c:01:ac:
         97:75:fe:cc:3f:75:a4:ce:48:4b:fd:b1:9a:5d:42:b0:04:65:
         13:35:0f:ab:73:14:31:c1:8e:34:a3:5f:2e:1b:30:00:4d:78:
         c2:0f:0a:11:1c:9b:2d:74:4c:29:fe:7f:8d:7e:51:74:d6:a9:
         95:e6:2b:ed:b9:f8:c8:0e:73:3f:18:fc:32:a0:9f:d2:ec:f2:
         3d:3f:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----