Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.mft
File:                     9Te3SpT8RyVhrHlz7eKIhC_PAEQ.mft (raw, json)
Hash identifier:          YA9ntwDxJSbLVvy1mMpAUh0GrZ2SIw2r0UDfxvvviYs=
Subject key identifier:   2B:CE:0B:6E:5C:E3:D1:E3:54:68:4E:88:4F:62:9C:BC:B6:9D:E7:24
Authority key identifier: F5:37:B7:4A:94:FC:47:25:61:AC:79:73:ED:E2:88:84:2F:CF:00:44
Certificate issuer:       /CN=f537b74a94fc472561ac7973ede288842fcf0044
Certificate serial:       018A924806100383820CCF87E0AA6D9134E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.mft
Manifest number:          0EEB
Signing time:             Thu 14 Sep 2023 06:01:48 +0000
Manifest this update:     Thu 14 Sep 2023 06:01:48 +0000
Manifest next update:     Fri 15 Sep 2023 06:01:48 +0000
Files and hashes:         1: 9Te3SpT8RyVhrHlz7eKIhC_PAEQ.crl (hash: 53sVm1A+aVPZmzUWWW3QP9d1/tQx40x5OtSV04S0fAU=)
                          2: KQy_23odaHGwIJphxWVEsYYZbJ4.roa (hash: 9mMxYooGlJbRZQe5Jrya+PQeh1e1P7XgOu9dzJ9MMmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:48:06:10:03:83:82:0c:cf:87:e0:aa:6d:91:34:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f537b74a94fc472561ac7973ede288842fcf0044
        Validity
            Not Before: Sep 14 06:01:48 2023 GMT
            Not After : Sep 15 06:01:48 2023 GMT
        Subject: CN=2bce0b6e5ce3d1e354684e884f629cbcb69de724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:31:00:5d:c5:f8:c9:a5:b1:d9:b0:a1:ce:
                    c1:a6:bd:96:2b:1f:3e:dc:ba:0f:81:24:b2:cc:5e:
                    e4:1c:c3:f8:6a:a0:bd:59:e8:07:13:36:fa:e2:27:
                    75:ea:bf:ac:68:b6:bd:a6:60:db:86:42:dd:bc:8c:
                    e2:c7:2f:4a:f4:c1:4f:70:d4:f3:ef:14:65:9f:86:
                    33:59:49:bd:24:c1:da:c7:42:7d:29:b2:0b:cf:a2:
                    98:63:5f:6a:6c:26:4f:ee:8d:a4:60:6d:6b:40:b9:
                    cb:86:5f:2e:7b:6c:c3:bf:74:9d:80:14:0c:18:f9:
                    2e:e2:a9:6e:73:fb:2c:a7:97:f9:e0:2b:b2:41:b7:
                    c6:16:d5:2e:0a:d2:0d:b8:8c:56:b0:4c:35:7b:4c:
                    81:30:5d:aa:a4:b2:22:6a:1f:ae:8d:33:22:ae:6f:
                    b7:43:58:6b:f7:e2:6d:d6:21:e2:cd:c8:b7:4d:f8:
                    6a:70:c5:ec:c1:19:ba:04:03:9f:83:6c:c8:28:55:
                    f0:75:04:a2:17:cf:cd:b9:bc:dc:c6:9a:b7:36:8b:
                    99:bc:93:e7:ad:f4:22:8a:e0:12:55:27:79:c2:8e:
                    32:ee:50:7d:fc:12:0b:70:43:1a:e9:31:be:3c:18:
                    91:05:d7:35:4a:a0:3b:bd:40:3e:a0:be:0b:6d:4f:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CE:0B:6E:5C:E3:D1:E3:54:68:4E:88:4F:62:9C:BC:B6:9D:E7:24
            X509v3 Authority Key Identifier:
                keyid:F5:37:B7:4A:94:FC:47:25:61:AC:79:73:ED:E2:88:84:2F:CF:00:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:6f:c8:07:61:aa:92:87:b0:dd:ff:cd:7d:d6:e9:ab:a2:
         ab:17:c4:87:bb:d7:49:9a:06:f9:84:bb:23:00:4a:04:1d:ab:
         99:45:cd:10:6b:5b:bc:ea:b7:df:b3:ac:4a:cb:37:9b:c8:84:
         ea:aa:f9:12:6c:a5:ed:a2:b3:ad:41:16:34:3e:71:37:2c:44:
         84:c9:ab:7d:90:0f:16:97:67:87:58:bf:c8:cf:eb:af:b1:f8:
         21:f0:38:69:15:09:5d:03:2b:cc:fe:cd:e9:ea:74:01:5c:34:
         aa:d4:60:63:17:90:a4:7b:34:46:8c:2b:93:b3:ff:3c:14:bc:
         55:c9:85:c3:03:c0:9b:1b:c3:d5:58:4d:57:c2:2d:79:48:5e:
         e2:5d:99:ed:0d:ee:58:1d:f8:d1:75:50:39:b7:02:bf:5d:86:
         54:f2:76:44:48:6a:c8:29:83:63:1a:9b:64:cc:67:98:1e:6d:
         ee:bd:91:35:eb:b4:1d:3b:44:77:09:45:de:9a:98:f1:80:00:
         d4:4e:89:f2:7d:1c:1d:0f:df:21:be:3e:c1:ff:91:89:8b:23:
         58:6b:40:7a:96:e7:b9:12:47:07:93:f0:8c:15:8a:77:c5:19:
         7b:38:16:c7:eb:5a:e5:b7:20:fb:40:73:04:a3:e4:d4:6a:1a:
         36:33:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----