Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.mft
File:                     Ft6KM6As_o__ddCYD1WXcck_69Q.mft (raw, json)
Hash identifier:          c7uOkPE1Mh7mezX6N+2+q6wn+ytcj+8gVP3cdtXd1jk=
Subject key identifier:   52:03:B7:75:8C:7D:C6:72:22:CD:43:15:6B:E1:8B:0D:56:39:EB:61
Authority key identifier: 16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4
Certificate issuer:       /CN=16de8a33a02cfe8fff75d0980f559771c93febd4
Certificate serial:       018C10A7A60B5DB6A815C7E4187073DA8264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ft6KM6As_o__ddCYD1WXcck_69Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.mft
Manifest number:          02A2
Signing time:             Mon 27 Nov 2023 12:01:11 +0000
Manifest this update:     Mon 27 Nov 2023 12:01:11 +0000
Manifest next update:     Tue 28 Nov 2023 12:01:11 +0000
Files and hashes:         1: Ft6KM6As_o__ddCYD1WXcck_69Q.crl (hash: CfFuIbJXY491oVJkTHftYugbOY7yjlpx7zkxHZWMHU0=)
                          2: IaKhoFTC0ilECfNvZalwMCLoJaE.roa (hash: PHJz2qlUYd7YCcFugvBnDYag0aeEWVGE91IBVZUZOx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:10:a7:a6:0b:5d:b6:a8:15:c7:e4:18:70:73:da:82:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16de8a33a02cfe8fff75d0980f559771c93febd4
        Validity
            Not Before: Nov 27 12:01:11 2023 GMT
            Not After : Nov 28 12:01:11 2023 GMT
        Subject: CN=5203b7758c7dc67222cd43156be18b0d5639eb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7b:8c:52:eb:eb:9e:23:e1:82:4d:47:6e:9d:
                    b8:4e:74:13:47:ac:54:1d:41:8e:b2:5e:13:b1:e3:
                    0f:66:e6:ae:ab:b0:d6:75:12:0b:4f:e2:32:f5:2e:
                    02:c5:aa:55:01:0b:5d:8d:71:44:e3:f2:86:ee:59:
                    ac:5d:f1:f6:38:2e:0c:97:3e:ab:79:90:ae:66:43:
                    5b:69:32:c4:11:e0:6e:f3:b4:59:bb:af:7e:79:07:
                    00:e2:34:00:de:01:7f:b0:46:72:e1:c9:d6:91:cb:
                    26:8d:3b:fd:13:66:bc:22:3f:c7:25:f9:4b:12:fb:
                    d0:cf:e1:22:8f:a4:4e:a0:bf:06:5e:84:1a:73:9e:
                    da:cf:3a:4e:db:ea:8d:43:dd:e1:b3:fe:3f:00:2c:
                    5a:e1:a5:9e:98:a8:2f:c8:1b:59:1d:67:ca:d4:a0:
                    28:fa:1f:9a:af:0e:82:c0:d7:3f:e4:ac:29:01:a0:
                    6f:89:ae:d4:c9:8f:31:24:2d:5c:2c:ca:7f:a6:93:
                    4b:0b:5c:5a:ab:a8:aa:45:de:5a:fc:fd:17:87:d0:
                    01:b3:4e:24:91:2e:d3:42:df:c4:06:d5:16:0f:ff:
                    b3:81:dd:d3:64:66:ea:7d:24:fe:ad:67:ea:7b:cb:
                    29:51:07:a8:b1:b6:c2:b9:f5:b8:47:f0:ba:a6:63:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:B7:75:8C:7D:C6:72:22:CD:43:15:6B:E1:8B:0D:56:39:EB:61
            X509v3 Authority Key Identifier:
                keyid:16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ft6KM6As_o__ddCYD1WXcck_69Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:d6:50:0e:24:db:1e:54:0a:3f:1d:ec:98:58:48:8d:03:
         ac:11:2f:a7:6c:53:42:68:91:ef:8f:bc:f0:e2:5b:29:35:ce:
         34:b2:4b:46:35:2a:1f:af:76:07:d6:be:25:83:bc:2b:c9:33:
         a7:36:10:ae:31:67:03:59:65:32:2e:e6:a0:92:6b:4a:d3:69:
         64:82:0a:92:d2:25:21:79:f4:90:15:75:31:1a:83:00:de:1e:
         46:99:ca:a2:0a:d1:80:74:ab:15:f7:0d:e4:3e:4a:eb:e8:38:
         7c:f9:c3:d7:56:bc:2a:fb:80:52:a2:39:cc:08:15:c9:8b:2f:
         5c:7e:52:eb:a4:52:74:72:3e:63:96:22:0c:90:28:4d:80:f9:
         80:0f:b5:be:0f:bd:25:07:6b:40:f7:1f:a9:a1:c0:5e:44:18:
         ea:a2:ee:7c:1d:94:ec:46:78:94:88:95:76:e3:79:cd:c4:bc:
         44:40:08:95:05:74:76:95:0e:20:6d:fa:ee:d1:32:e6:7c:83:
         b1:c4:b1:9a:a7:28:66:ff:c5:d7:c7:bf:2c:be:9a:4e:ff:b5:
         24:1f:bb:a0:56:75:fc:3b:39:6b:94:67:36:57:b2:49:1f:8d:
         ce:04:9c:41:d1:7a:e9:81:4b:84:bd:5c:fa:67:14:a5:ee:75:
         fa:64:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----