Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.mft
File:                     XvEE_EsLXAgnLjrng7jNd3uiqpA.mft (raw, json)
Hash identifier:          Eky7N1Vbbx13+IM88aF3vOdu6A8lcQ+TpeDQZ6FMFhY=
Subject key identifier:   14:18:5B:E5:4A:4E:B1:6F:68:B1:BE:0E:C7:FE:3F:D4:50:8D:5B:E9
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Certificate issuer:       /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial:       018C919D8D1B2E3C6292D807CD6F28B4E22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.mft
Manifest number:          0881
Signing time:             Fri 22 Dec 2023 13:01:10 +0000
Manifest this update:     Fri 22 Dec 2023 13:01:10 +0000
Manifest next update:     Sat 23 Dec 2023 13:01:10 +0000
Files and hashes:         1: 5Vhz8Hr2lBYBGx-5xRqwWzl2doo.roa (hash: t0i4w8F7H9vzITADhlgAGe8YBFiHERH7LVLNbvHN3EA=)
                          2: XvEE_EsLXAgnLjrng7jNd3uiqpA.crl (hash: 7L3asE2tyV31ukhuxHCnVpjhO9h4xdr4KedWDbR7YHs=)
                          3: lNVsObR5ZMX4JZTAjuMZb1ZN0Pg.roa (hash: 3aGipyVqCsMrnZhZBJlc8IMv/tq+yHpLpjC9TR2Qq44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:91:9d:8d:1b:2e:3c:62:92:d8:07:cd:6f:28:b4:e2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
        Validity
            Not Before: Dec 22 13:01:10 2023 GMT
            Not After : Dec 23 13:01:10 2023 GMT
        Subject: CN=14185be54a4eb16f68b1be0ec7fe3fd4508d5be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:b1:00:eb:9d:de:5c:f9:52:29:fb:6d:39:
                    08:10:93:21:14:89:67:09:6c:26:fb:cb:e6:26:0b:
                    01:21:76:ab:fe:7a:4c:ec:69:bc:47:e2:62:97:fa:
                    31:24:d6:c6:90:91:9e:21:dc:34:0e:28:92:29:75:
                    d6:55:4e:9d:ca:7c:c0:0b:5e:10:66:2c:15:e6:62:
                    62:39:24:15:ac:5d:f0:3e:46:47:6d:af:69:d9:76:
                    2f:16:50:38:af:8a:87:fc:fc:66:2c:c4:07:94:af:
                    cd:0e:8f:7f:cc:ec:a4:a7:17:bd:c4:94:bc:9b:63:
                    63:36:49:69:22:45:d6:98:6a:05:8f:bb:8a:99:1e:
                    dc:92:af:5d:e1:5a:90:8d:18:2d:f2:d6:30:1a:b7:
                    e1:20:4e:bc:f5:22:10:81:f3:d3:03:b2:de:92:03:
                    8a:9b:8c:6f:9c:81:89:e2:c5:b0:e5:cf:f7:71:5f:
                    7d:ae:81:77:20:45:6d:5d:41:83:06:13:27:ac:2d:
                    4d:19:e4:88:ec:03:a9:f8:fb:13:5f:d0:99:81:fe:
                    39:3f:61:b6:8f:d8:32:55:11:0f:8e:26:ad:27:ac:
                    73:0d:d7:74:9c:18:ea:16:e0:c2:76:36:7c:69:58:
                    89:6a:f1:f4:d7:45:20:6e:f6:b5:e8:62:ad:8a:4a:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:5B:E5:4A:4E:B1:6F:68:B1:BE:0E:C7:FE:3F:D4:50:8D:5B:E9
            X509v3 Authority Key Identifier:
                keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:74:7d:b8:77:bf:e4:0a:bd:b3:b6:34:41:f5:33:d5:16:
         b4:e5:31:69:c6:72:7d:86:3a:ce:09:dd:1c:8f:d9:cf:76:31:
         2d:0d:f7:f7:e4:a2:1e:45:0c:52:72:c5:ef:b0:69:56:4b:c8:
         7d:8d:e5:a9:ad:db:89:6b:99:6b:a0:52:bb:3e:0d:c5:25:0a:
         e8:6a:4d:83:8b:d6:4d:84:d7:33:ba:bd:ed:1a:b4:c2:46:17:
         f5:88:7b:d0:61:e5:ba:04:c2:a7:e1:b2:ce:0c:4a:e0:88:9e:
         28:28:3e:88:f7:16:d3:38:81:d8:1c:2b:32:6a:6f:5d:27:de:
         df:31:a9:19:05:f9:83:65:ae:36:38:75:7d:b7:65:9a:50:ff:
         29:2d:e5:f3:44:f5:27:05:02:06:52:2a:d2:a7:75:79:44:14:
         80:46:f9:c1:8e:77:ff:2d:42:e7:b9:98:9f:d7:2a:5a:65:05:
         88:f6:8b:23:12:e7:21:d1:d3:98:68:8d:7b:5b:67:9d:7a:77:
         f9:e6:d7:1b:68:fb:d0:18:64:86:c5:ca:e6:c1:44:cd:48:c4:
         30:3d:ed:5d:a0:8f:55:cb:9b:6f:a4:c6:e1:72:05:fb:15:57:
         bb:11:dd:9a:10:5d:cc:d0:05:e5:0c:a7:fe:7f:c3:4f:59:70:
         bf:d5:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----