Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft
File:                     2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft (raw, json)
Hash identifier:          0RCG+/pnpNSZMya/OKo6YnAs8NxcJzSX457rZe8K6aA=
Subject key identifier:   13:1E:D9:00:B1:E4:D4:80:78:5C:7C:E2:53:75:E8:F1:BA:F1:9D:43
Authority key identifier: DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23
Certificate issuer:       /CN=daa27995228f4f8176637aacc3a16471a88d8423
Certificate serial:       0188D34EEDA77061729FE702D816F119EECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft
Manifest number:          034C
Signing time:             Mon 19 Jun 2023 10:59:05 +0000
Manifest this update:     Mon 19 Jun 2023 10:59:05 +0000
Manifest next update:     Tue 20 Jun 2023 10:59:05 +0000
Files and hashes:         1: 2ASJJdYWG7SWfWIuMcR6fMUQ7bo.roa (hash: ynFZuicv+4XS7fD5a+klgQtYXMQA+0PD9FhBADIGAMY=)
                          2: 2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.crl (hash: g/CoFhAUuHDAkpnESaukyKPBEMjvnmQC/fh9NECyjHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d3:4e:ed:a7:70:61:72:9f:e7:02:d8:16:f1:19:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa27995228f4f8176637aacc3a16471a88d8423
        Validity
            Not Before: Jun 19 10:59:05 2023 GMT
            Not After : Jun 20 10:59:05 2023 GMT
        Subject: CN=131ed900b1e4d480785c7ce25375e8f1baf19d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:41:74:37:f3:64:04:32:80:87:fe:74:3a:4c:
                    fc:fe:11:19:84:50:9d:f3:34:c9:0b:c7:33:fc:87:
                    7f:60:26:6b:c1:95:5e:a6:ff:f0:d7:3b:58:90:ee:
                    02:a4:ac:8d:40:6a:f9:e9:dc:32:60:17:d9:d2:79:
                    6f:91:d6:46:8e:4c:c5:47:00:e1:65:10:43:4f:0a:
                    07:7a:0d:fc:06:da:cf:7d:d6:b0:25:22:65:3d:25:
                    84:2e:8a:6c:12:51:5a:8c:08:55:5e:1d:a3:f2:c1:
                    a4:fe:26:44:3b:e2:90:63:19:d3:3e:0e:cc:8c:ba:
                    69:41:72:ee:a5:76:18:ec:8f:d9:93:09:ca:46:e4:
                    84:a7:d3:83:b6:cd:d0:dc:c7:8e:53:dd:f6:fe:83:
                    c4:d3:ef:f2:9b:fa:7b:39:a6:89:25:a0:9e:21:d8:
                    c8:89:1e:d7:80:7b:3d:77:e5:33:99:63:40:a1:f2:
                    94:80:85:e2:72:82:42:4d:c0:58:76:6c:49:75:29:
                    39:1a:e0:1e:05:cd:ee:03:44:63:ba:0b:66:6d:6e:
                    44:3b:24:98:1e:df:ec:6d:ec:b8:57:1a:9b:51:e3:
                    01:8c:a7:cc:bf:8c:8a:0e:ee:dc:fa:ea:d9:1b:8b:
                    bb:27:62:a5:a6:74:d4:1f:d4:80:83:7b:14:b9:cf:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1E:D9:00:B1:E4:D4:80:78:5C:7C:E2:53:75:E8:F1:BA:F1:9D:43
            X509v3 Authority Key Identifier:
                keyid:DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c3:22:f4:6e:86:a7:6b:3a:fc:e4:c7:21:36:75:b3:0f:c6:
         8d:c1:f5:4a:de:34:b2:17:a0:ac:42:cf:2d:cd:45:17:a4:bd:
         3b:96:7b:f2:e0:8a:70:f1:82:a6:7c:95:75:15:56:e8:44:9c:
         42:e9:79:41:05:3e:c0:a4:61:e8:96:e0:c2:e9:c0:9f:12:3f:
         df:ee:30:96:eb:0e:28:41:7f:1f:3a:d6:b6:a6:a3:ee:2c:d1:
         7c:e6:90:ec:12:a7:a8:61:6a:7e:42:18:e8:af:2e:a6:3f:ed:
         ec:48:40:3c:a5:2f:af:52:7b:dd:b0:5a:1e:c6:ec:4f:29:75:
         f5:6f:41:21:46:3f:24:97:01:62:cf:62:68:30:96:9b:4b:b3:
         cc:49:d5:e7:0e:cd:c0:aa:a6:38:ed:51:67:af:ab:2a:62:e7:
         a5:41:c4:90:25:2b:56:24:3d:44:c0:16:9f:ce:ef:61:25:44:
         60:87:1d:07:88:fe:32:9d:77:18:9d:ae:26:ef:f7:35:c6:2e:
         33:02:d5:d8:2b:33:e3:b7:8e:90:bc:b9:af:70:45:77:65:b4:
         63:78:c2:8a:7e:be:9a:5a:5b:05:0a:c4:b3:04:c9:03:f1:81:
         e7:ef:53:a1:d1:30:4a:5f:d5:7d:01:64:f0:81:dc:2e:aa:36:
         4d:dd:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----