Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.mft
File:                     Lx4lOXe_WD4OQg7Jd6js9O0VTb4.mft (raw, json)
Hash identifier:          GDYEeWkxFnYOcz1YCg1Gw2YiWHgcBYrPuainiATiZ0M=
Subject key identifier:   F6:B3:57:DE:52:AB:7A:0B:97:14:3F:89:7B:E1:91:2E:75:5D:96:60
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Certificate issuer:       /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial:       018D9B791990BC349EE42D13C827D127BA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.mft
Manifest number:          107C
Signing time:             Mon 12 Feb 2024 04:00:21 +0000
Manifest this update:     Mon 12 Feb 2024 04:00:21 +0000
Manifest next update:     Tue 13 Feb 2024 04:00:21 +0000
Files and hashes:         1: Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl (hash: fhHgLXyTihKDTBMi7eM71gwKSXUR/oFUjJYAhKnCVak=)
                          2: Y2PujBAo2Ko5kzdXvs0u7HqT2Pk.roa (hash: IDQqfsRhDs16qjE0wXoAAg3bnqdJ2feikqda4jOdIkU=)
                          3: c0rI__tD7yJ9X4APGQGL1_sDDGA.roa (hash: j+99EiZbOxWJu9FA/1L9zQ8hVimjNxlbaoBo6ENBsCY=)
                          4: p1NhUzjD-nVq04SSBLwm8TIqF5c.roa (hash: 0aZrYCDpr80PSDPmlLMMOBW9ao3/gjxy5PgQz/YGZpo=)
                          5: sVlKP1Ez4yOOYTsMgLnAcyZHYTU.roa (hash: mT+vrCCIUAj9n7MDoEWrY5NvNhQ+rHxeB5vfIpdtYvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9b:79:19:90:bc:34:9e:e4:2d:13:c8:27:d1:27:ba:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
        Validity
            Not Before: Feb 12 04:00:21 2024 GMT
            Not After : Feb 13 04:00:21 2024 GMT
        Subject: CN=f6b357de52ab7a0b97143f897be1912e755d9660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:63:62:10:80:92:0e:b4:38:e7:65:27:44:
                    64:14:7b:d5:9d:1a:ab:b1:5e:cd:a8:62:89:f6:65:
                    39:48:ea:fa:e0:a5:7f:78:81:85:a8:7f:80:38:bd:
                    f9:52:5e:73:d0:7b:6d:b6:6d:96:85:48:e0:70:4f:
                    66:cb:d1:b9:93:88:1e:33:a3:c7:40:d1:4b:02:9e:
                    03:24:07:4c:d7:d7:a5:03:db:d4:5e:2c:67:58:f4:
                    53:ea:7b:2a:78:b5:72:a8:5b:f4:f9:75:6d:42:fe:
                    60:ba:b6:6c:1a:ac:57:87:43:bd:10:08:41:c5:91:
                    1d:e1:d5:bc:ac:00:92:5d:fa:6d:c0:a6:ef:de:68:
                    b1:3c:f0:c5:ed:78:fa:47:3d:c0:cc:5a:a6:18:8a:
                    8d:af:c6:ea:ea:fb:8c:25:0a:bc:a4:3b:f1:80:7c:
                    61:72:5a:cb:9e:4f:43:3d:a2:f1:a9:84:f8:ff:00:
                    2d:52:c9:00:70:e8:b4:7b:39:32:b5:de:a0:eb:5a:
                    12:43:a4:5f:fa:8f:8a:18:8e:b4:ff:3d:dd:e6:fb:
                    7d:df:ee:95:09:ba:5a:15:f4:c4:9e:40:9f:0b:99:
                    77:97:fd:59:dd:43:5f:84:89:24:38:28:9f:7e:a7:
                    86:bf:52:8b:bf:6d:f4:90:cf:d5:81:cc:95:07:76:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:57:DE:52:AB:7A:0B:97:14:3F:89:7B:E1:91:2E:75:5D:96:60
            X509v3 Authority Key Identifier:
                keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:d7:e0:a4:de:c5:90:f7:b8:6e:52:71:52:45:18:04:59:
         b2:5d:70:0e:f7:34:a3:5f:ba:49:c9:04:ee:2e:65:0e:7b:57:
         82:3e:89:fb:d4:24:3d:11:16:4b:e5:7b:92:4d:4e:43:bf:04:
         7d:c8:87:ff:a4:3a:91:fa:aa:02:cd:9d:5f:f5:a9:ab:4b:f5:
         ea:b5:f7:e1:57:a1:1a:64:d0:45:6f:c3:56:88:92:30:9b:9c:
         8f:73:15:3f:35:e5:33:da:cd:6f:81:99:b4:e2:32:aa:42:2c:
         3b:56:90:47:50:c4:4f:b4:2b:84:1f:59:17:93:e0:e4:e1:cd:
         88:c2:af:2d:51:5f:b4:78:3c:e6:7e:1f:fa:3e:5e:96:12:b5:
         42:1c:8e:9a:fc:c7:81:91:cd:25:1f:2a:76:a2:03:2c:2f:c6:
         34:07:7a:27:f6:e1:5e:00:4f:2d:fc:1f:a6:72:dd:4b:cf:e7:
         e1:6d:53:d2:8f:03:39:64:fb:37:e0:3d:40:71:9e:ad:d5:3b:
         06:9e:5c:21:6e:c8:7d:b5:bb:99:2c:4d:a3:56:0c:ac:5e:20:
         21:0b:b9:43:80:de:f0:8d:ac:a3:a1:0b:a8:e0:ae:91:89:7e:
         cc:90:77:be:65:79:26:1e:f6:8d:15:3b:35:32:1a:34:03:b1:
         2b:ab:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----