Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.mft
File:                     JobX4QaxMLqFeI2sNzTLYosTnEk.mft (raw, json)
Hash identifier:          hKcjK9qMyrkKirPpjJ8QDwTiHqBYK2o05SI4TDOR/9A=
Subject key identifier:   A3:5D:DE:A8:76:AB:3C:C6:60:1B:84:24:FC:07:AF:92:6D:C0:B5:81
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Certificate issuer:       /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial:       018680DE29814C600E075BE642493A7C0BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.mft
Manifest number:          0C98
Signing time:             Fri 24 Feb 2023 00:41:28 +0000
Manifest this update:     Fri 24 Feb 2023 00:41:28 +0000
Manifest next update:     Sat 25 Feb 2023 00:41:28 +0000
Files and hashes:         1: 1-AFDT1m8iGjuA3GJthrbhJeAsoU.roa (hash: 0/cAN4NtVmB+HjGSam7+26cEjMAJdJLJsKj0d1mv+Z4=)
                          2: 2dwbqqJHBI-1C6FxO3hRcUYRJAM.roa (hash: of7D/UKtXwiX2uqFD0HoNZ9y0SNNfazhseCGwy9jBPI=)
                          3: JobX4QaxMLqFeI2sNzTLYosTnEk.crl (hash: Wwnxakju6EoNRl/wCYg/Djvucb2ZgUpRhUyzAWKCYso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:80:de:29:81:4c:60:0e:07:5b:e6:42:49:3a:7c:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
        Validity
            Not Before: Feb 24 00:41:28 2023 GMT
            Not After : Feb 25 00:41:28 2023 GMT
        Subject: CN=a35ddea876ab3cc6601b8424fc07af926dc0b581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:95:4f:f5:8c:a4:cd:c3:70:c6:0e:f6:86:
                    55:f9:fd:20:04:ef:8e:0e:d8:54:39:c3:18:f3:33:
                    d8:3f:0e:ed:c4:ca:0d:0c:bf:9c:03:cf:d8:16:8f:
                    fd:d4:56:5c:d1:32:62:ff:03:2d:ec:fa:4d:e5:28:
                    5e:ee:39:8c:b2:fd:78:7a:76:91:b4:97:10:c8:65:
                    18:5c:49:e2:c1:a0:62:8f:50:97:4f:7c:27:24:51:
                    db:fa:f8:a6:8f:28:83:d3:11:39:02:f2:02:2e:d7:
                    cf:d5:69:b1:66:1b:02:39:e5:28:06:9a:cd:63:c1:
                    6a:f2:6c:63:ee:cd:e0:80:28:95:8d:2f:bb:54:ba:
                    15:13:e4:eb:14:5d:2a:77:35:e7:f2:b2:41:ea:ae:
                    b2:51:7f:2f:1b:78:bd:fe:00:8f:06:52:3d:1c:64:
                    e9:bc:ee:bb:2a:64:67:a8:14:b8:8e:e3:8e:1e:4e:
                    ef:d9:5f:f0:21:be:33:f6:fc:87:da:00:c0:7e:9a:
                    89:f8:03:b4:7a:11:74:7c:62:d9:2f:f3:8e:c4:8b:
                    43:cc:9c:a4:c4:06:25:2b:6b:ba:3a:da:89:09:f7:
                    a7:9a:be:c4:d8:04:03:df:1c:87:93:84:bc:5b:64:
                    eb:ce:da:2f:92:04:42:f2:b9:4a:57:1c:36:b7:37:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:DE:A8:76:AB:3C:C6:60:1B:84:24:FC:07:AF:92:6D:C0:B5:81
            X509v3 Authority Key Identifier:
                keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:26:d1:ef:93:52:d1:bc:ae:fe:11:ac:91:86:6b:61:a8:cc:
         f5:34:c1:74:92:17:bb:c1:34:c1:94:e8:c0:93:9e:da:84:47:
         e7:62:58:d2:cf:ca:20:1a:fd:94:f0:c0:14:ad:aa:c9:cf:82:
         85:d9:3a:6b:8d:cb:8c:a9:b6:2d:ed:06:13:41:34:f8:ba:ac:
         4b:94:bf:a3:64:1d:0e:c2:b9:96:31:00:d3:38:07:46:fa:49:
         c6:72:0d:7b:39:ea:ce:7f:da:fb:50:ba:88:9c:c6:56:83:16:
         06:0b:2f:63:b3:9a:79:0f:c6:50:be:58:ea:4f:fe:08:c6:f4:
         d1:e8:f7:23:b9:eb:c9:76:68:2c:2e:dd:34:47:e4:ed:b5:c2:
         ff:cf:81:ff:92:26:43:4b:1d:6c:98:99:68:65:7c:b8:8b:55:
         84:2d:ac:1b:c4:7e:8b:c4:59:52:81:94:2d:c1:82:19:5d:49:
         e5:95:1a:4b:17:79:43:44:54:22:46:5d:3a:6f:77:ce:1e:b3:
         b0:0e:25:9f:2e:2c:c6:b8:5f:ef:05:5c:3c:8d:59:b8:ea:f0:
         1a:15:30:08:7d:47:34:09:69:e7:45:35:95:c4:ed:24:73:d5:
         8b:16:f1:a9:13:70:a2:e1:19:fa:34:ce:21:9f:dd:4e:b8:20:
         e0:64:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----