Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.mft
File:                     oRT_2FMbI55vD3Pm9t5jhFFF-s0.mft (raw, json)
Hash identifier:          zCRfnHtc9LEC6WZVgX87dqTowKpHmqn+awiFf2qr+k0=
Subject key identifier:   C9:A9:AD:F7:1D:6A:2B:C4:5F:48:28:B4:2C:DC:3A:A2:B2:B3:5A:6F
Authority key identifier: A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
Certificate issuer:       /CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Certificate serial:       018DCF6748C23AE097B6F8029E6D8763E415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.mft
Manifest number:          109C
Signing time:             Thu 22 Feb 2024 06:01:08 +0000
Manifest this update:     Thu 22 Feb 2024 06:01:08 +0000
Manifest next update:     Fri 23 Feb 2024 06:01:08 +0000
Files and hashes:         1: 6ePUbi8ws_xD0m0uhGc3HUIIF2s.roa (hash: sHZ2DLRt4LvViTtqMZd3VWs29JpXc9ypu3+gynn6Gu4=)
                          2: R44n5IrmmOQuBtqRWP3KkkpKvWI.roa (hash: e/6DHMfy0AIJsy/5zrlhqi36Z5umMw0vVlp/dPYQfXc=)
                          3: oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl (hash: pBr1RoiMjP7HYqLhPIr2KimebWNUjgk07qGEO3A0ejk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:cf:67:48:c2:3a:e0:97:b6:f8:02:9e:6d:87:63:e4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a114ffd8531b239e6f0f73e6f6de63845145facd
        Validity
            Not Before: Feb 22 06:01:08 2024 GMT
            Not After : Feb 23 06:01:08 2024 GMT
        Subject: CN=c9a9adf71d6a2bc45f4828b42cdc3aa2b2b35a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:4a:6c:4e:ad:bc:dd:2f:44:e5:51:c6:6d:
                    98:c0:dd:ae:3b:2b:f2:64:7e:ea:7e:6c:d4:0f:a8:
                    3c:13:b9:cf:cf:f4:a1:bc:93:6c:0f:3d:e6:a7:cc:
                    19:9b:81:6a:19:5d:59:63:84:9c:07:10:71:f1:28:
                    c0:cc:10:bc:73:ad:5f:ac:b7:25:c0:cd:aa:1f:bc:
                    d2:95:73:19:f3:33:0b:51:55:c5:55:8c:58:ea:6e:
                    04:2e:ee:e2:56:75:e6:82:e6:61:59:c2:3b:6d:21:
                    f6:fd:8e:99:e6:b1:dd:64:38:6e:99:98:8c:c2:b8:
                    ed:12:fa:42:26:f1:e2:31:f1:f1:d8:98:a7:b0:db:
                    24:ab:bb:ad:20:74:8d:df:c1:d0:53:2e:4e:ad:01:
                    2c:31:18:91:6a:b4:3e:21:02:df:fb:1e:da:83:07:
                    0e:c6:15:68:c5:0c:07:6e:4c:cf:45:e8:f3:2b:8c:
                    08:cb:90:71:d8:be:60:86:f9:75:0f:12:14:82:ac:
                    3a:01:45:39:17:a5:b3:41:cf:95:61:a3:c0:72:d7:
                    95:fb:67:75:4c:f1:4f:93:aa:f0:ba:0c:42:fc:42:
                    38:ec:ee:5f:60:e0:d5:87:51:3a:12:34:91:64:81:
                    56:ae:43:09:4b:9d:d2:87:b4:8a:12:8b:3b:0b:5b:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:AD:F7:1D:6A:2B:C4:5F:48:28:B4:2C:DC:3A:A2:B2:B3:5A:6F
            X509v3 Authority Key Identifier:
                keyid:A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:2a:1a:28:97:a4:41:13:dd:d5:dd:e8:3b:f7:fd:57:f9:
         0e:6a:65:e0:71:92:8a:fa:9b:d0:ec:f9:b5:6c:1d:74:7b:93:
         bf:32:f4:5c:10:35:2b:f1:a0:0d:94:e3:83:19:72:dd:2a:eb:
         a2:bc:9c:e5:e7:ee:56:d7:85:cc:55:1d:97:61:05:78:03:c2:
         70:94:9e:ea:34:19:f2:01:fc:37:96:85:f6:61:c0:b5:7a:0a:
         3f:40:7c:13:5e:f2:24:22:db:15:6b:44:08:b4:40:87:b8:42:
         1d:b0:2a:fc:ba:26:ab:a1:00:8b:1d:f8:0a:f3:b9:9a:b6:44:
         a5:0f:a7:b0:d7:51:20:9d:ba:45:d9:78:ec:e7:ce:20:a9:5a:
         04:1a:0d:a4:82:dc:96:4e:5f:22:c4:30:eb:80:99:d0:7d:9c:
         42:14:b5:72:3e:48:df:71:6f:2f:cf:59:98:89:56:61:e8:5d:
         3e:a0:de:7c:6f:27:92:a9:c3:4c:e6:e2:52:f1:2e:82:6d:fe:
         ab:b0:49:e8:4b:dd:0b:7d:a5:87:8a:7d:ec:8d:93:dc:11:96:
         07:d2:40:a0:13:85:d7:46:99:d2:6b:92:80:e9:8e:67:bc:30:
         c2:1d:a4:29:60:a9:a3:7b:8f:e2:0f:cc:bb:55:3e:b6:60:93:
         41:87:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----