Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.mft
File:                     2AYuTMJvLfdu8wjOem48g0TJ0DE.mft (raw, json)
Hash identifier:          +dSV6J7w2+p5/sX3zx81cLZLh1nWsU0qI8qSMKOszyA=
Subject key identifier:   BD:8D:E1:C4:83:0F:C5:BE:49:E4:F8:47:62:56:89:64:F4:84:AE:1F
Authority key identifier: D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
Certificate issuer:       /CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Certificate serial:       018E1CA61632A91AA88784030CF48E0B5FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.mft
Manifest number:          08AB
Signing time:             Fri 08 Mar 2024 06:00:30 +0000
Manifest this update:     Fri 08 Mar 2024 06:00:30 +0000
Manifest next update:     Sat 09 Mar 2024 06:00:30 +0000
Files and hashes:         1: 2AYuTMJvLfdu8wjOem48g0TJ0DE.crl (hash: FqGjubFJ6/06B79B0mkXXLyT7TdKrJdmKfbwxQH2eQE=)
                          2: C0M38EBMx-pNnQyGORpEaiqVTXE.roa (hash: X+OpyZYR1RP/S0aVWIFISO4XfwPjLaNGk0hyx28aQYQ=)
                          3: PA7mRTXaRLj1mPL0pQKV7ZsW9SY.roa (hash: acOK7CtbLNIhPceSfNWvYmV/VhI68G30NbuqbO7MfSk=)
                          4: Uz34yN8uTX638Q-Q_uagdY3BuLo.roa (hash: dAhQG2QHFd/OlCrVyt+xHzK9gfCTLzjerRNVSuY/pao=)
                          5: hQsMu_GNjirXykr_Xi2yXLo0V_g.roa (hash: XnFLsiZROJNcRHfXUORklJb2UTnPbsWe3rK6WkUhQE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:1c:a6:16:32:a9:1a:a8:87:84:03:0c:f4:8e:0b:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
        Validity
            Not Before: Mar  8 06:00:30 2024 GMT
            Not After : Mar  9 06:00:30 2024 GMT
        Subject: CN=bd8de1c4830fc5be49e4f84762568964f484ae1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:64:64:07:7c:d9:eb:69:91:76:91:92:08:
                    4e:9e:32:de:ac:f2:f1:fa:88:e9:c7:24:3e:c3:cd:
                    05:87:4a:c7:83:73:78:fc:14:f6:fd:14:41:7d:7c:
                    d7:16:28:55:ec:c6:2d:00:be:a7:c1:01:77:c5:6e:
                    71:c4:a4:85:63:ff:d3:2a:06:53:c3:07:e9:2e:ce:
                    a2:d4:31:13:93:ad:1a:0f:43:67:cb:22:c3:a7:79:
                    af:08:e5:27:1d:ba:78:98:75:4b:50:56:26:e0:b4:
                    21:c0:c1:d4:66:e6:f1:29:6e:12:33:76:7f:0e:2d:
                    9e:f1:aa:42:8c:0a:bf:44:7b:06:de:07:bc:0d:44:
                    a2:bf:db:3c:43:47:c2:21:12:71:91:be:c6:94:ca:
                    6f:a4:16:86:d3:76:95:46:fc:3f:75:54:7e:9f:fb:
                    ca:29:f0:da:21:f0:9c:a1:a3:0e:68:ff:f1:68:0d:
                    0b:bd:49:96:c0:99:31:84:16:63:f7:c1:f6:20:f1:
                    b3:eb:0f:d2:dd:b2:95:8b:d7:ab:d1:a8:19:25:70:
                    e4:3b:e8:d1:33:9c:be:66:d7:f1:8e:f5:c5:9f:82:
                    b3:55:dc:cc:01:00:33:87:3a:05:65:67:54:3c:ac:
                    17:f4:d8:69:9a:cc:a3:fc:25:49:cc:57:a8:3b:48:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:E1:C4:83:0F:C5:BE:49:E4:F8:47:62:56:89:64:F4:84:AE:1F
            X509v3 Authority Key Identifier:
                keyid:D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:8c:d3:9e:0e:ce:5f:f6:17:3d:77:f2:b4:85:6c:1f:eb:
         f0:d0:42:3f:6f:16:a9:61:73:5b:55:3c:4c:30:0d:34:02:87:
         69:9e:49:22:54:8b:42:4e:7a:a2:6f:47:0f:e3:42:58:95:5f:
         90:aa:09:42:b5:f8:56:1f:33:ac:04:45:a6:68:6a:d5:f2:46:
         cb:6d:70:83:fc:5f:5f:cb:a3:61:a7:21:9f:b3:a7:d3:7a:2b:
         1b:8f:b3:54:c0:63:ca:bd:44:3b:1c:81:d9:e2:44:ae:a0:bd:
         87:c0:2c:76:f3:93:9e:91:ad:c2:e8:03:0b:e9:93:97:f8:ba:
         8e:d0:38:f1:c9:1e:49:1e:98:7d:9d:33:62:dc:a4:e2:ac:ba:
         b2:6e:56:e3:74:23:f0:a4:31:71:5b:96:0b:b8:51:c4:86:80:
         96:db:93:0d:7b:2e:1b:5d:5e:b0:49:4d:c3:0d:33:54:61:70:
         09:f1:c9:3f:db:23:ad:bd:7a:17:11:a1:20:69:af:45:94:9f:
         d4:af:b0:ec:18:89:ef:5b:8a:dc:7a:b4:de:82:5d:9b:4d:f2:
         e2:d9:2a:f3:8d:f0:1f:65:86:d4:86:3a:2e:b8:14:d7:5d:32:
         08:c6:e6:76:26:dd:9b:5b:58:e5:76:8e:21:50:a0:55:91:b2:
         59:9b:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----