Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft
File:                     2-jMj1rx5zYtRU892RqClSkZ22E.mft (raw, json)
Hash identifier:          a1xjPwXe6T+eVxrw8mWgzr2Us3XW+LMr3je6ug2qG3E=
Subject key identifier:   D8:AF:0F:28:B7:8D:C4:85:1E:58:23:D9:38:55:B2:A5:C0:D3:5E:E7
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Certificate issuer:       /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial:       018FFFA9425A36D9F04D2826BE9BE8427845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft
Manifest number:          0D80
Signing time:             Mon 10 Jun 2024 01:00:33 +0000
Manifest this update:     Mon 10 Jun 2024 01:00:33 +0000
Manifest next update:     Tue 11 Jun 2024 01:00:33 +0000
Files and hashes:         1: 2-jMj1rx5zYtRU892RqClSkZ22E.crl (hash: H9fSOV4qgk8v6795Q4NQiI4PT9+BiTG6HVPskAOjlp8=)
                          2: HJf34rDfTUPIcPv-xQaRTGMIQAU.roa (hash: xEI3eXaqU5BE25qwCMBQhlmLI6zoK7B8LGcYOpoY7PQ=)
                          3: KkHO8EEeZBOm7_l5HOIZAS3NulY.roa (hash: RzjK6AcZX2b5y/bRXqcCT15lqpVsguGvpbBBd8QAuKo=)
                          4: WO8CC1bQiYKRTUh2PpE1oH0WSMQ.roa (hash: nMViXqwOYG1R0zYLbB3RNt6Y4a4tnW0J8OdzxZQ/asY=)
                          5: mTOTn6xbfDVzbAEOZSlOf02Gmso.roa (hash: w7dLY983INfrPczn5+OQy8tGgqoq2Wl4iZAGdiE46Zk=)
                          6: mgnkQPYfCAaXo_1xD3KJigBG04U.roa (hash: UAnLhZ555HepM7qFGpXLv4X/Cx7tGXivBReJ/+TqODg=)
                          7: rRW9xPQZDkqOlNXa085P5WtR5KM.roa (hash: d0qzJqTnvy3Akcll0NnoL5Lj6hvhdYGIroUd8W59W+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ff:a9:42:5a:36:d9:f0:4d:28:26:be:9b:e8:42:78:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
        Validity
            Not Before: Jun 10 01:00:33 2024 GMT
            Not After : Jun 11 01:00:33 2024 GMT
        Subject: CN=d8af0f28b78dc4851e5823d93855b2a5c0d35ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:a2:17:65:72:74:46:b2:aa:7e:e8:4a:eb:
                    9c:ea:19:04:b8:97:6d:99:fe:42:c9:8b:eb:85:0f:
                    35:ad:52:67:cf:48:56:5d:64:86:ac:a4:14:2f:3a:
                    06:7c:de:0c:b7:2b:23:c0:63:47:ce:df:59:7e:2a:
                    0d:b3:b4:19:e9:b0:82:c0:ed:75:92:c0:3f:79:fd:
                    86:71:e4:9b:24:78:f9:b5:13:f4:c1:24:25:9c:21:
                    ef:36:14:7f:fd:9d:7d:ff:95:9b:62:7a:cd:c0:a5:
                    ab:ca:b1:20:43:b9:9a:8e:71:c3:22:32:c6:7b:4b:
                    30:54:a9:a3:8b:da:b7:e2:54:f0:3d:66:7d:82:50:
                    7e:60:6e:3f:6d:2a:df:48:fb:ff:d9:b9:33:52:a4:
                    76:0c:71:3d:c8:2a:3b:e5:93:97:a5:a5:32:6f:c3:
                    91:95:7e:b2:b6:4c:8a:90:85:f1:cb:00:70:72:02:
                    73:01:f1:71:56:21:0d:89:0a:a8:56:9b:16:ac:3f:
                    65:69:cb:84:29:e0:15:73:29:b1:8c:44:dd:fe:c1:
                    63:64:52:d9:5e:f4:c8:fd:fc:35:b5:78:79:4d:1b:
                    ea:66:0d:29:40:57:8c:93:b4:6a:6f:7b:ea:b3:db:
                    4d:bc:dc:29:e7:91:88:a0:d2:47:a9:aa:84:70:e8:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AF:0F:28:B7:8D:C4:85:1E:58:23:D9:38:55:B2:A5:C0:D3:5E:E7
            X509v3 Authority Key Identifier:
                keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:99:66:76:05:d8:ba:eb:76:7d:ce:c4:06:8b:74:c8:33:d0:
         97:88:86:15:a6:14:4e:4e:bd:b3:dc:c8:1f:e9:17:8e:f7:c9:
         0e:de:d4:46:40:ac:1a:e0:d2:09:b8:8c:1a:db:d2:04:3f:4d:
         ac:2a:ff:6e:83:be:21:02:02:f8:54:8f:4a:de:00:92:53:7a:
         a8:64:81:77:bb:f7:4e:1f:17:78:a4:13:0c:a7:38:9b:6e:20:
         cc:04:1b:1a:5a:c3:f7:79:45:8b:5d:8b:c2:d2:87:24:ae:a4:
         50:ce:ab:b7:6f:f9:b6:8a:ea:37:8d:20:0c:20:ae:2d:8a:83:
         3b:2e:bc:e7:0c:7f:45:b9:99:ce:4b:af:9c:ca:55:94:e4:e6:
         8d:30:6d:45:f3:9d:7e:57:98:02:c3:92:ea:0e:9c:d8:52:0d:
         0d:88:2c:cb:5a:91:28:09:9a:55:bb:d7:78:03:5c:c2:9d:58:
         43:77:c6:2c:6f:da:ee:8b:59:05:9e:78:68:de:65:99:d8:1f:
         78:d5:2c:26:c6:92:73:b7:b5:d6:98:2b:26:7d:75:20:dd:96:
         ab:01:48:48:9d:c1:78:2c:de:5c:3d:69:4a:b7:dc:55:a0:42:
         92:67:36:f7:b1:2a:e6:d3:f4:6e:7a:e0:b4:70:e4:d8:f8:6a:
         0e:bd:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----