Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/2w2Kj49J5u0i7iparlUvBlCjSt4.mft
File:                     2w2Kj49J5u0i7iparlUvBlCjSt4.mft (raw, json)
Hash identifier:          UZHZaQeza3u8TuFKLsEtK6QiHOyo+7TvUO8KILD3/QM=
Subject key identifier:   25:FC:44:16:BE:92:7F:82:D8:57:E1:B7:D0:A5:B4:05:46:EF:71:97
Authority key identifier: DB:0D:8A:8F:8F:49:E6:ED:22:EE:2A:5A:AE:55:2F:06:50:A3:4A:DE
Certificate issuer:       /CN=db0d8a8f8f49e6ed22ee2a5aae552f0650a34ade
Certificate serial:       018553F8DA858BE8A87E0565A2DC0D6C166A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2w2Kj49J5u0i7iparlUvBlCjSt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/2w2Kj49J5u0i7iparlUvBlCjSt4.mft
Manifest number:          0BEC
Signing time:             Tue 27 Dec 2022 14:24:55 +0000
Manifest this update:     Tue 27 Dec 2022 14:24:55 +0000
Manifest next update:     Wed 28 Dec 2022 14:24:55 +0000
Files and hashes:         1: 2w2Kj49J5u0i7iparlUvBlCjSt4.crl (hash: q6hOqIiGtMEtwfGvsLaUHDvixzLPREsee4w8JmIi9lQ=)
                          2: up6aBU0VMoWrPoGZS3p2g5Dk4tw.roa (hash: nRyAf4aEpfhw4s/cWUjQPCNNeCpTknMTpI5NyF5J6ss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:53:f8:da:85:8b:e8:a8:7e:05:65:a2:dc:0d:6c:16:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0d8a8f8f49e6ed22ee2a5aae552f0650a34ade
        Validity
            Not Before: Dec 27 14:24:55 2022 GMT
            Not After : Dec 28 14:24:55 2022 GMT
        Subject: CN=25fc4416be927f82d857e1b7d0a5b40546ef7197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:0e:67:90:4d:c2:09:30:72:f9:1d:e6:f3:
                    c6:43:2d:57:cf:a2:d2:9d:4f:da:ac:2a:f6:5e:93:
                    a5:e4:e0:96:47:db:cf:92:0d:e7:4c:2c:f1:f4:eb:
                    9a:6c:b1:e0:dc:33:db:f0:81:ab:52:5b:1d:7a:04:
                    8c:f3:3f:94:68:a2:3d:b0:66:12:cb:14:5f:55:50:
                    c0:9e:dc:0e:e7:42:6a:cb:f3:3f:4f:0b:5c:83:16:
                    f4:a6:54:e5:19:a3:db:e3:f5:7f:70:fd:16:a0:9e:
                    b6:5f:c0:d8:25:c3:7a:5c:3a:aa:01:31:db:ef:6b:
                    f0:c2:e8:eb:2e:6b:06:6b:42:60:6f:cc:32:fd:33:
                    64:b6:00:4b:ae:cf:b2:0d:ba:19:40:02:35:b2:f2:
                    1f:cf:cf:4f:25:f7:8b:77:bb:2f:4f:88:21:8c:a8:
                    46:a9:72:30:65:3c:93:5a:4e:6b:44:4b:45:10:54:
                    a6:75:f2:48:d5:f7:7d:31:b4:8e:45:17:2c:48:4c:
                    af:9e:5e:5d:f3:bd:2f:9c:aa:c7:9d:05:a9:b3:e5:
                    03:00:5b:a7:41:f8:98:cb:c6:41:22:37:80:27:02:
                    1d:46:e4:5c:a3:cf:ef:f8:f3:e9:3e:3b:2f:61:84:
                    ba:74:27:7c:d2:29:33:7e:07:91:e6:e7:b8:4e:57:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:44:16:BE:92:7F:82:D8:57:E1:B7:D0:A5:B4:05:46:EF:71:97
            X509v3 Authority Key Identifier:
                keyid:DB:0D:8A:8F:8F:49:E6:ED:22:EE:2A:5A:AE:55:2F:06:50:A3:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2w2Kj49J5u0i7iparlUvBlCjSt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/2w2Kj49J5u0i7iparlUvBlCjSt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/27e094-0817-4409-9b2a-5bd443dc7b3d/1/2w2Kj49J5u0i7iparlUvBlCjSt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ab:b1:ea:75:c9:b1:8a:31:07:75:a9:98:de:46:82:7c:ce:
         61:33:af:50:0f:e6:24:40:21:e4:38:f3:86:77:4c:5e:dc:8d:
         48:9e:ed:e6:3f:45:15:25:ed:5e:2c:ff:e7:ef:3d:d7:c7:47:
         b6:a2:d0:71:68:7e:10:be:02:ee:37:56:01:1d:3f:e0:f5:9b:
         b0:f9:5d:a5:ef:9d:12:a4:f0:b6:90:d3:d1:87:b9:86:1a:ed:
         2a:6e:0a:24:6e:de:3a:b6:ba:b6:53:3a:c9:bf:e2:8e:0d:79:
         7e:18:98:a2:cc:31:03:51:73:03:28:fb:b1:24:74:85:6d:37:
         f8:d5:6f:2d:53:c3:e3:d9:c7:7d:0d:1b:f8:a5:dc:09:fa:cc:
         a0:46:41:7d:b1:54:84:a3:46:20:85:ac:4d:5f:a5:80:1e:ab:
         27:ea:7b:94:7e:d0:b7:1a:7f:a3:0e:97:a3:b4:9e:c8:ab:ae:
         94:c9:73:8a:d1:03:c6:f4:3b:57:b2:5d:47:bb:85:0d:f5:60:
         75:5c:89:5f:e3:c3:88:26:3b:e1:16:0d:b1:b2:ad:6e:8d:08:
         ec:7d:e1:90:d4:35:5a:51:04:a7:c6:5c:b1:14:e3:97:a2:f8:
         80:44:27:8a:23:c4:08:fa:ec:d6:44:b7:3f:28:07:6c:65:b8:
         e9:02:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----