Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.mft
File:                     f2uVRVxfDYCQ42YsaRwiaQ6aEW0.mft (raw, json)
Hash identifier:          sPGvhK+ToWFZlf9bW/eaFVp3KTHneUOdO1JmDa6/nmM=
Subject key identifier:   ED:85:EF:3B:25:A3:E8:E2:1F:E7:B1:68:C1:4C:A4:6F:24:AF:2A:7F
Authority key identifier: 7F:6B:95:45:5C:5F:0D:80:90:E3:66:2C:69:1C:22:69:0E:9A:11:6D
Certificate issuer:       /CN=7f6b95455c5f0d8090e3662c691c22690e9a116d
Certificate serial:       018A83B071C2CE210210C12EAD5A1C147A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.mft
Manifest number:          0867
Signing time:             Mon 11 Sep 2023 10:01:33 +0000
Manifest this update:     Mon 11 Sep 2023 10:01:33 +0000
Manifest next update:     Tue 12 Sep 2023 10:01:33 +0000
Files and hashes:         1: f2uVRVxfDYCQ42YsaRwiaQ6aEW0.crl (hash: F/q0KB0HvV6AlLZ0Xevxl3TBGbRYYA+fPw+e1msn2m4=)
                          2: nwCD9fNvN46eDRzk6EmypbFtjls.roa (hash: RUxoYuQeZFrOiSg68trlZh3JCJQ3wEIkfsm01D/i8IE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:b0:71:c2:ce:21:02:10:c1:2e:ad:5a:1c:14:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6b95455c5f0d8090e3662c691c22690e9a116d
        Validity
            Not Before: Sep 11 10:01:33 2023 GMT
            Not After : Sep 12 10:01:33 2023 GMT
        Subject: CN=ed85ef3b25a3e8e21fe7b168c14ca46f24af2a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:9e:fb:9b:ae:cf:aa:0a:62:e8:b3:0c:b0:
                    00:fe:f5:3b:2c:36:c4:5d:f8:78:d5:4d:d3:06:c2:
                    18:1a:a4:9e:04:1b:4c:be:e9:11:bf:9c:78:3d:71:
                    fb:29:e8:48:20:f6:8e:b1:71:dd:5b:22:cd:e2:57:
                    72:62:62:9a:c0:ea:03:f1:48:c3:6f:16:67:e3:77:
                    bd:b5:6d:a7:fa:75:a6:c1:45:87:ac:2b:5f:56:6e:
                    2f:59:f9:75:67:6a:aa:a9:40:63:bb:d3:44:e2:7e:
                    86:99:e5:7e:2d:61:cf:2c:87:eb:89:5a:25:58:35:
                    34:36:41:c5:3d:56:dc:ae:52:c9:39:f5:6b:cb:16:
                    dc:27:d2:48:d4:a3:f1:51:ba:7a:14:8d:95:34:16:
                    38:ba:3a:a8:58:e5:1c:cf:e6:72:3a:f8:05:bc:62:
                    94:d2:ae:c8:fa:cb:05:5a:66:0b:c0:4e:e8:fb:82:
                    7a:b3:0d:a6:29:0e:33:fc:e8:b9:dc:1f:cf:c2:f1:
                    a1:bc:91:b2:6b:a0:e5:e6:2e:c1:8d:52:20:ad:34:
                    ab:ee:af:f8:75:06:05:40:3d:1b:14:b3:eb:e0:d6:
                    23:35:df:84:a3:d0:38:f7:ca:48:ef:be:dd:7a:44:
                    14:67:54:20:06:3f:92:3c:82:e3:ca:1e:d5:2f:90:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:EF:3B:25:A3:E8:E2:1F:E7:B1:68:C1:4C:A4:6F:24:AF:2A:7F
            X509v3 Authority Key Identifier:
                keyid:7F:6B:95:45:5C:5F:0D:80:90:E3:66:2C:69:1C:22:69:0E:9A:11:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:bc:37:7f:91:4c:6a:4c:4b:c8:aa:13:f6:17:f5:46:2f:
         d6:15:7a:87:16:75:be:df:5b:7e:e8:d6:09:11:23:0b:76:f3:
         ba:8e:ab:b8:ca:d8:aa:05:98:ba:e9:cd:7e:94:e8:98:02:b9:
         5e:23:9f:e1:39:c8:3a:03:56:a6:0e:26:ed:65:d9:a9:0d:50:
         da:db:65:b9:7d:cd:5c:fd:48:d3:6b:6a:d6:c1:b6:55:3d:bb:
         4e:ba:27:b8:f4:72:2a:e2:e3:bc:10:ed:e7:cd:45:1b:c4:5d:
         cc:2c:d5:8c:4f:fc:dc:8a:3e:a2:b1:a9:98:72:f0:a7:b5:42:
         45:59:34:43:f5:55:a9:d8:d5:5f:77:13:a8:b8:5c:49:cc:df:
         39:80:74:68:f2:51:ac:e4:08:20:93:f0:f1:8c:c1:fe:36:4a:
         c2:d7:c5:2e:ce:1c:91:c5:06:ef:c0:bd:c7:35:b9:95:40:03:
         93:ab:01:b2:d0:16:56:2d:98:30:88:93:a5:6d:b3:96:d6:aa:
         5f:5c:19:e7:06:96:ec:a1:c2:fa:ad:83:cd:0b:bf:35:2f:7c:
         99:23:cd:f9:14:97:c6:56:3e:08:ab:37:d5:f5:85:5e:2c:1e:
         d6:c8:94:25:f3:c3:6c:7e:72:c0:90:ed:34:d7:86:50:11:bf:
         17:70:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----