Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft
File:                     2JrgAUoUYnBer34iZC7ZuZh_kTE.mft (raw, json)
Hash identifier:          5BkubwjeVjQ4PORoEFx69KyLqBaTijxGRG9xJ1owIrA=
Subject key identifier:   BE:5E:63:A7:2F:A9:B0:63:41:2B:54:47:9B:29:3D:65:57:4A:90:6D
Authority key identifier: D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
Certificate issuer:       /CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Certificate serial:       018D3A4535FB29E0B8414DA849240B3F6F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft
Manifest number:          0D5C
Signing time:             Wed 24 Jan 2024 07:00:30 +0000
Manifest this update:     Wed 24 Jan 2024 07:00:30 +0000
Manifest next update:     Thu 25 Jan 2024 07:00:30 +0000
Files and hashes:         1: 2JrgAUoUYnBer34iZC7ZuZh_kTE.crl (hash: 7RGq+mwYruy3rTi+pZO6TtMtA2MzMsXikZGWJQ+T11w=)
                          2: nDXhWYs4EKdUQv8-JeZybipB-hQ.roa (hash: 5BUgCHGmETVEQNMkTHW+xnrjYNOgf3CBgNS5xxy+E9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3a:45:35:fb:29:e0:b8:41:4d:a8:49:24:0b:3f:6f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
        Validity
            Not Before: Jan 24 07:00:30 2024 GMT
            Not After : Jan 25 07:00:30 2024 GMT
        Subject: CN=be5e63a72fa9b063412b54479b293d65574a906d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:99:b3:bc:da:4f:49:9a:f9:62:6f:b9:0e:
                    a2:b5:39:ef:87:c5:7a:ad:f6:8f:f0:bb:12:a1:d5:
                    e7:3e:86:25:6e:69:54:6e:d1:16:83:71:2a:5c:68:
                    09:57:76:73:dc:b4:1a:98:7d:c2:2e:a9:08:6e:03:
                    3b:29:02:e8:e9:aa:e4:63:91:97:32:27:35:76:dd:
                    fc:3b:59:71:62:5e:a3:25:3e:eb:8e:0a:d8:54:9d:
                    81:a2:28:fd:39:33:92:6f:f1:46:8a:93:8b:7c:81:
                    fc:77:75:b1:e3:8a:0a:c6:18:a0:64:fb:c3:4c:31:
                    96:e5:60:07:17:d8:0c:cc:22:1a:12:39:c2:8e:44:
                    ca:58:f8:0e:90:28:60:4c:54:37:c5:c7:07:88:f2:
                    af:ed:d4:27:bb:a2:ba:4f:f0:98:23:92:44:a6:7a:
                    1b:55:8c:9c:be:6f:d1:44:57:7d:8f:e6:7a:85:fa:
                    ec:fb:6c:4d:b3:b0:7a:c8:f7:4d:d5:33:58:91:fb:
                    24:03:d6:e5:04:ec:dc:af:ca:d4:cb:f6:87:8a:db:
                    fb:72:48:b1:26:be:49:a7:8a:61:e8:68:20:3b:88:
                    68:ea:30:ad:98:88:78:16:a1:6e:21:e6:c4:53:84:
                    c1:a0:77:86:d1:ff:67:76:1c:d7:25:f7:98:53:06:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:63:A7:2F:A9:B0:63:41:2B:54:47:9B:29:3D:65:57:4A:90:6D
            X509v3 Authority Key Identifier:
                keyid:D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d1:8c:a6:1e:37:6c:9e:0a:cc:18:e5:f2:3e:0d:35:77:d8:
         a9:c1:c7:83:41:03:48:82:66:6c:4e:1b:24:ab:55:7a:d3:7d:
         04:ee:30:2d:01:48:bc:85:f2:bd:28:f3:52:a5:fe:10:e7:8a:
         9e:76:b7:25:6a:38:51:d1:14:2e:ff:dc:66:44:1e:b9:48:2d:
         31:6c:db:ed:da:26:a9:57:c1:fa:b7:03:34:83:97:ba:32:5d:
         3c:9b:46:6d:2b:9f:55:10:57:54:72:9f:d0:36:f1:4c:3f:ed:
         76:e4:8b:0f:6d:81:d6:e4:d6:b2:db:14:13:b9:d5:2d:a2:8d:
         27:ff:92:15:2c:43:9c:90:3f:f2:ec:7b:24:fa:98:7f:76:82:
         de:91:e9:0f:7d:ca:5b:45:dc:b2:9f:97:b3:0b:4f:77:88:3c:
         cc:0c:9c:3f:0f:82:46:9e:4a:b8:34:9e:f2:d1:5e:2b:d5:be:
         00:25:e5:15:37:d8:49:1e:ae:cd:33:ea:2d:5d:37:86:fe:d8:
         ea:38:0c:c3:af:50:6e:6c:38:da:10:4a:c2:b6:81:72:c5:15:
         00:da:be:fd:02:3b:90:10:4f:87:44:14:43:4c:f1:e3:fd:12:
         19:fe:5e:68:16:7c:a6:f3:65:63:9d:ff:49:74:05:65:60:59:
         53:3b:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----