Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.mft
File:                     2JG--7O7M8UnYuoETQInRDVJ96g.mft (raw, json)
Hash identifier:          cb6zDkBm54vZB4qXtUNFqJeTqQLB3aEdPpuUqqKwpdk=
Subject key identifier:   23:DB:DF:25:08:EC:38:CE:EA:0D:43:2A:E2:7E:73:8D:D2:94:C5:61
Authority key identifier: D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8
Certificate issuer:       /CN=d891befbb3bb33c52762ea044d0227443549f7a8
Certificate serial:       0184E2237F566BE182C1D9FC271C364F7A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.mft
Manifest number:          0954
Signing time:             Mon 05 Dec 2022 11:54:47 +0000
Manifest this update:     Mon 05 Dec 2022 11:54:47 +0000
Manifest next update:     Tue 06 Dec 2022 11:54:47 +0000
Files and hashes:         1: 2JG--7O7M8UnYuoETQInRDVJ96g.crl (hash: /okWDsmCt9KS0cQtfBMWJY6KzwpdmL/Ziky/rGCopTY=)
                          2: BIZnmbKG6Uwdp5EGJrgdvpPiVbc.roa (hash: IfhnzQwSg8W3jMYDM4V6NPeg1daJ+erZZOx0BIuYg+E=)
                          3: aZTFZb-PEEXReiHtKu06UMT11Cs.roa (hash: I5juFwdVKQXx1oD4ZBksiKWe8qSf9t8mxslYLjEDWvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:23:7f:56:6b:e1:82:c1:d9:fc:27:1c:36:4f:7a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d891befbb3bb33c52762ea044d0227443549f7a8
        Validity
            Not Before: Dec  5 11:54:47 2022 GMT
            Not After : Dec  6 11:54:47 2022 GMT
        Subject: CN=23dbdf2508ec38ceea0d432ae27e738dd294c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:39:c7:a5:e8:66:0c:04:ec:0b:05:3d:28:
                    ba:5e:e1:1c:11:9f:c8:30:1c:00:ad:a2:9c:77:2b:
                    83:5e:1d:8b:16:70:f9:04:6b:9f:9a:18:85:70:5a:
                    66:61:76:55:92:a5:2d:70:4a:59:e9:a9:53:22:15:
                    0b:c1:b8:a3:54:c8:fb:41:ff:ff:59:e5:11:fc:cf:
                    29:0d:45:1b:3b:d0:53:b4:2b:fa:79:80:14:52:ea:
                    fa:3a:df:15:ba:43:35:f9:8c:99:7a:b1:0d:35:5e:
                    53:5d:fb:91:56:a3:4b:db:d9:6b:95:95:e0:f3:de:
                    b4:6f:18:b3:de:9c:f8:62:ca:29:14:ef:93:29:f1:
                    d7:0c:b5:6b:8a:81:f4:26:78:9f:0d:95:2c:82:69:
                    cc:86:2c:d5:4b:a0:ab:56:ad:35:d4:16:71:b2:27:
                    43:13:5c:f0:9a:e7:02:18:0e:d7:a8:5f:ad:3b:4b:
                    69:a8:ad:3f:aa:56:7c:a3:6c:55:c8:be:57:e9:9c:
                    00:0e:8a:cf:2d:e3:b1:a2:24:7b:16:44:2d:61:d2:
                    b0:36:f2:5c:ef:ed:cc:1d:44:f6:07:78:6d:0c:6d:
                    38:17:eb:e5:ca:c8:a2:10:07:5a:d1:ec:68:89:8d:
                    0c:c6:99:19:a6:0d:93:99:e8:bd:5d:a7:84:58:84:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DB:DF:25:08:EC:38:CE:EA:0D:43:2A:E2:7E:73:8D:D2:94:C5:61
            X509v3 Authority Key Identifier:
                keyid:D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:54:40:95:b1:3d:92:a9:b9:a9:f4:f7:74:71:3f:5e:f5:bf:
         88:96:9e:fb:23:ec:ba:89:79:f8:d9:73:0c:49:cc:16:ef:1a:
         2e:85:68:5b:da:c8:9e:0d:2d:7c:84:ab:48:cf:6a:25:ce:d5:
         d0:52:1b:13:b4:07:ee:b5:c2:9e:7c:6e:dc:e4:96:f3:66:59:
         d7:3f:66:2e:82:68:5b:14:5c:35:12:ce:1d:23:7f:8f:67:ea:
         ba:ff:78:83:91:30:a5:55:a2:f6:e8:df:0f:62:38:34:f0:f1:
         e5:cd:f1:e9:21:91:06:6c:52:30:80:df:da:3c:77:95:f9:c9:
         aa:4e:14:0a:94:60:a6:f3:86:28:8d:aa:da:aa:19:ff:cd:55:
         50:47:a6:80:37:4d:73:54:db:1a:0d:1b:86:97:bd:fa:71:21:
         9e:9e:21:ad:29:d4:47:92:8b:bb:a7:76:b5:59:4d:d1:25:73:
         9c:16:c9:33:ca:41:16:b9:12:4c:7f:a5:95:f9:65:e8:b6:ec:
         46:40:c0:b7:8b:7f:b7:5b:53:90:09:95:75:7c:51:01:a9:da:
         44:50:28:df:e6:06:65:00:e4:87:9b:6b:07:58:49:67:34:c3:
         7c:0a:b9:0b:17:1b:55:60:50:69:43:41:e4:da:24:b3:9b:63:
         e0:25:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----