Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft
File:                     ABK53JdtfOgH5G_qSTbHJrDEogY.mft (raw, json)
Hash identifier:          Ci2Pd7x8RXOf6ivABBOkSRaWN+FDTL+LkukZwr/VSAQ=
Subject key identifier:   D5:7A:95:83:01:69:4C:32:DD:0F:B1:3A:3D:C4:29:61:94:8C:8F:50
Authority key identifier: 00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
Certificate issuer:       /CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Certificate serial:       018EE5102719B8BC00131B4DE9BB7D8B7B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft
Manifest number:          0836
Signing time:             Tue 16 Apr 2024 04:00:24 +0000
Manifest this update:     Tue 16 Apr 2024 04:00:24 +0000
Manifest next update:     Wed 17 Apr 2024 04:00:24 +0000
Files and hashes:         1: ABK53JdtfOgH5G_qSTbHJrDEogY.crl (hash: ey6A8ujekMFL5r5DIqi0XA3Z6G3KAZdJtYs4YO0tTbU=)
                          2: P2IpL9kLtUFlK-a6_ah5es0kxjw.roa (hash: a+HCjUCtrmnqzraUTwwkfnKzgVw0VR/L6zrUQD38oyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e5:10:27:19:b8:bc:00:13:1b:4d:e9:bb:7d:8b:7b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
        Validity
            Not Before: Apr 16 04:00:24 2024 GMT
            Not After : Apr 17 04:00:24 2024 GMT
        Subject: CN=d57a958301694c32dd0fb13a3dc42961948c8f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:4c:e6:b1:39:98:9a:9b:e5:8f:7a:cd:66:
                    e3:d7:f6:77:95:a9:80:af:e7:93:f2:1a:96:e4:d2:
                    86:b4:07:7d:65:8f:b1:47:cf:53:e8:dd:d1:05:e6:
                    13:1d:d8:50:ca:68:ca:36:e5:b9:21:1a:61:4a:d0:
                    17:e7:1a:21:65:d1:3f:79:54:28:e5:19:dd:34:52:
                    05:8c:5b:43:c9:9f:52:b2:b4:c1:0a:ce:40:f7:be:
                    d6:ee:21:9a:e2:ca:39:25:95:b2:45:77:03:6e:83:
                    e6:5a:64:bf:a7:f6:2b:13:76:c1:22:e7:4c:34:a3:
                    7b:56:ba:f4:e1:ac:f9:d0:e2:7c:85:ea:55:a9:ca:
                    00:e4:6c:41:f3:3c:68:ef:86:2f:37:e8:69:4c:79:
                    c0:26:d9:41:1d:f2:40:ec:90:cb:87:ad:72:b8:1b:
                    b3:40:a3:28:c0:c5:cc:68:15:d1:8c:fa:4b:33:3b:
                    ae:c3:44:a4:3e:0b:d2:3d:f0:1a:75:94:f4:05:06:
                    a0:1a:95:83:0d:51:f9:5e:cd:76:e1:b5:65:5a:ff:
                    e2:87:94:ac:6e:0c:1a:ae:cb:dc:f4:a1:9c:7d:95:
                    ba:d1:6a:de:2d:4d:a7:a2:b9:43:03:14:6a:14:b8:
                    92:da:2f:57:26:7b:eb:f2:3b:65:5f:d5:e4:78:89:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:95:83:01:69:4C:32:DD:0F:B1:3A:3D:C4:29:61:94:8C:8F:50
            X509v3 Authority Key Identifier:
                keyid:00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c8:51:52:3c:7f:36:50:45:23:5f:5c:fd:a6:28:eb:40:82:
         22:e1:b4:b6:73:f3:a0:33:c4:f4:d2:b6:16:e0:23:32:bc:6a:
         04:71:72:8d:36:b2:45:b9:b6:3c:d6:b1:96:44:56:43:e3:89:
         8b:82:d5:f8:e6:82:96:1e:c7:56:83:f5:83:41:b6:3c:f4:70:
         a5:9b:06:90:d2:17:3c:c8:72:13:1f:fa:57:2c:21:7a:de:48:
         e9:c2:4d:56:cf:1b:10:0c:da:b0:8a:3a:72:a4:d3:39:70:b3:
         dc:19:d7:18:3e:c4:45:a6:50:9b:b9:bd:00:f1:0b:ab:d8:ed:
         e5:cd:43:2e:cf:3a:87:a1:2e:ea:67:22:e9:71:e5:de:2a:ab:
         58:67:44:3e:3f:b5:f3:c7:91:e2:35:d9:bf:c2:cd:92:03:ee:
         e0:0b:16:59:29:e3:c1:8d:90:71:80:ad:8c:ed:ea:b3:57:5e:
         b4:f6:5e:6d:b1:13:ed:25:2a:22:02:4c:84:b8:15:50:62:1f:
         68:bb:6b:77:d7:18:68:11:a7:e6:51:f6:00:7f:df:76:e7:fe:
         6c:3d:2d:c7:e7:64:38:d0:1b:13:ea:2c:76:42:a1:0c:dc:8d:
         41:82:89:fe:6b:9a:1e:17:fd:4c:28:a9:25:47:d8:71:2a:a5:
         45:a4:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----