Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft
File:                     1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft (raw, json)
Hash identifier:          4CsuHfnGBJMXyOQvmqi93Lh53sSV7PbGGskM3lS0lWM=
Subject key identifier:   7B:AF:A3:96:17:F1:DB:2A:28:10:32:92:14:20:99:9B:C9:BD:7C:BD
Authority key identifier: D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
Certificate issuer:       /CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Certificate serial:       018C3332FD2FF5432980DBA8A6C1255B8CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft
Manifest number:          0676
Signing time:             Mon 04 Dec 2023 05:00:28 +0000
Manifest this update:     Mon 04 Dec 2023 05:00:28 +0000
Manifest next update:     Tue 05 Dec 2023 05:00:28 +0000
Files and hashes:         1: 1EvPqrT1ZGEzeyKwOOdf9knvOVk.crl (hash: L1v4VWCrsTztiw5WS0tXPzvV/pFGOoqdwEFSPtSCc+Y=)
                          2: D-j3QGVRBB2cTZ1_OyrBAgorPp4.roa (hash: duEQwjBxfiynr9CuoebPo+HdFRqyU417+tCA4jxCgFY=)
                          3: Dr-ojRESSE7RVV8YeY-sxssOmxo.roa (hash: Bdw3DTPm2kcIDV6m0eypiKeDwAw8zqq9zThN4ay8a4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:33:32:fd:2f:f5:43:29:80:db:a8:a6:c1:25:5b:8c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bcfaab4f56461337b22b038e75ff649ef3959
        Validity
            Not Before: Dec  4 05:00:28 2023 GMT
            Not After : Dec  5 05:00:28 2023 GMT
        Subject: CN=7bafa39617f1db2a281032921420999bc9bd7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:4f:18:6f:5b:38:1d:fc:e5:67:3f:d3:64:
                    ec:47:58:75:b0:db:b7:c1:fb:e3:73:b9:c4:32:6d:
                    ac:20:c5:da:c8:a7:4b:ce:60:f1:50:9e:41:a4:f2:
                    74:87:50:c0:6f:c3:be:5b:17:22:37:39:07:08:91:
                    cd:93:e3:7d:c2:b0:0f:95:b1:90:8a:1f:70:5c:7c:
                    ef:c4:97:d1:3e:1c:e1:82:92:83:97:0f:da:3d:1b:
                    68:83:93:2d:44:79:fa:f7:bc:91:c5:21:da:19:65:
                    14:9c:9e:ba:53:6b:ad:ca:d7:da:7a:fc:54:1c:26:
                    22:aa:30:56:b5:55:ab:06:ea:54:02:5d:61:66:92:
                    28:c9:8e:db:1e:58:31:7e:a0:6a:49:ef:bf:46:47:
                    3a:86:f0:5a:2a:19:bc:cb:be:9f:b1:b3:85:4c:56:
                    c0:cd:19:2e:f4:52:df:39:11:c1:41:c0:83:98:eb:
                    c8:e4:a3:7f:61:4e:c7:a7:91:b2:7b:27:b9:69:4b:
                    28:88:c4:69:32:f3:df:90:15:55:fd:b0:02:a5:69:
                    99:e6:a3:15:61:cb:fe:a3:70:5b:fb:0d:25:f9:44:
                    5a:e9:40:e3:b0:ce:5d:fd:05:33:f0:3a:b1:62:c9:
                    cf:a4:01:4a:b7:58:b3:be:3b:fb:e0:79:de:58:8d:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AF:A3:96:17:F1:DB:2A:28:10:32:92:14:20:99:9B:C9:BD:7C:BD
            X509v3 Authority Key Identifier:
                keyid:D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c8:c0:5d:c4:59:25:4a:72:76:4d:55:f9:db:fe:7f:73:75:
         c5:b6:40:9f:e8:0f:f3:5b:ed:1b:35:f9:f6:40:8c:97:bd:21:
         61:cc:03:7f:f2:d8:99:d1:51:2d:60:cc:39:5d:20:19:d9:1d:
         7d:19:4e:72:33:9e:36:a5:0e:a3:5e:db:53:46:51:ec:30:94:
         8f:19:f1:0d:e7:fd:3d:e1:12:ea:e0:8a:af:05:85:05:aa:3f:
         9d:a2:c4:f4:ce:f0:9b:bd:6f:59:18:c1:00:a1:ad:1d:f6:5f:
         16:e1:ae:c0:22:b2:98:1a:20:aa:0a:7a:77:88:46:98:90:01:
         2d:8a:50:43:fe:fe:76:d6:88:6a:d6:54:dc:c1:5e:6c:49:37:
         6b:0a:66:06:63:3b:ea:cd:9f:f5:49:73:af:db:05:9a:39:f3:
         07:48:65:f2:e1:c3:1c:a6:28:d9:19:92:b5:cc:4f:78:6f:77:
         2d:93:01:30:55:a5:bf:ae:48:02:b9:a1:6d:df:3d:8c:7b:da:
         fa:3c:bf:98:88:99:d8:26:b3:8e:1d:75:f2:3f:85:83:b6:f7:
         e2:fc:3f:8d:95:ef:0a:47:c0:d5:c7:17:e7:96:d9:50:d3:f8:
         18:4f:fb:18:4d:3d:b4:04:b1:80:7c:8b:03:de:91:aa:34:cf:
         e9:87:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----