Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft
File:                     2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft (raw, json)
Hash identifier:          R0HYRI5zR9RgrgZSl6QGQo3ibYUo13rLd/Qf8+4HSSY=
Subject key identifier:   76:78:75:4F:ED:06:6E:40:7A:D6:ED:F1:FF:59:DD:8D:1B:C4:70:2D
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Certificate issuer:       /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial:       018D86047B91ED900AC4C1160CC1F8FA6AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft
Manifest number:          0862
Signing time:             Thu 08 Feb 2024 00:00:57 +0000
Manifest this update:     Thu 08 Feb 2024 00:00:57 +0000
Manifest next update:     Fri 09 Feb 2024 00:00:57 +0000
Files and hashes:         1: 2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl (hash: KPoVu8VyR0urR87fX95EtJnit7p0nvBBcS+cOqOFIJM=)
                          2: 2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa (hash: KtmbyLSt1J8H0C1tS9aCCY/JAgir22Sq/UGUAsd6vfY=)
                          3: n9miYy3r2fx9ese6icBhxvueLio.roa (hash: o9MZXcfYtn/qpy03oSM3nxQBQG+ZAuueNKPOlG2/R74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:86:04:7b:91:ed:90:0a:c4:c1:16:0c:c1:f8:fa:6a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
        Validity
            Not Before: Feb  8 00:00:57 2024 GMT
            Not After : Feb  9 00:00:57 2024 GMT
        Subject: CN=7678754fed066e407ad6edf1ff59dd8d1bc4702d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:a0:0e:d2:5c:8f:a2:23:8f:74:84:9d:16:
                    9a:ff:ef:74:35:15:a4:32:17:cd:38:a4:bf:13:da:
                    d1:87:c8:c7:7d:ec:f3:83:1a:74:34:86:2e:ec:16:
                    fc:87:c7:84:29:46:41:1e:91:48:83:25:90:22:37:
                    2d:76:3f:99:72:cc:14:08:e9:a9:2f:91:3e:d4:03:
                    d6:56:c4:9b:aa:26:5f:2b:de:0b:f8:23:87:67:dc:
                    fa:e4:53:d6:de:19:d3:3f:74:c4:17:c2:d1:38:cb:
                    73:5a:d2:fe:08:19:fa:28:33:12:22:41:73:b4:15:
                    05:9d:62:1e:50:e0:65:44:7c:b4:18:7e:1b:c1:a3:
                    4a:e9:80:54:1b:42:de:ae:73:01:cb:5e:f5:b0:3c:
                    e7:6b:ef:fb:64:83:9e:b7:6d:53:75:a1:21:3a:bc:
                    32:8a:5e:ec:f5:6e:4b:6a:47:d4:a2:b8:59:bc:42:
                    b0:96:8e:94:3c:17:63:54:de:4f:73:9a:99:1d:6a:
                    52:53:2c:fb:31:20:21:51:8e:74:ea:e7:95:7e:d9:
                    d8:78:b6:66:10:ad:e4:3c:fc:38:51:ea:23:a2:f8:
                    93:b7:f2:63:16:56:0a:67:46:00:bc:7a:3a:b1:e1:
                    06:8c:74:6e:63:54:4e:10:d9:ae:da:b1:1c:8f:2b:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:75:4F:ED:06:6E:40:7A:D6:ED:F1:FF:59:DD:8D:1B:C4:70:2D
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:03:42:ef:fc:1e:48:26:dd:84:08:52:8b:59:c7:08:77:
         21:5d:61:c2:8f:61:31:8b:49:12:35:01:33:e5:06:77:28:2b:
         e9:46:16:f6:d5:09:fc:4d:ba:c6:2b:44:b9:61:52:3c:3a:73:
         51:dc:5d:ef:e9:cf:ae:b2:24:34:7d:2f:1b:f6:37:fa:58:42:
         22:35:01:3e:6a:33:81:bf:2c:60:81:52:09:25:14:c0:ae:6f:
         7d:53:2b:30:e5:9d:59:5e:c9:14:51:ea:5a:6d:eb:93:0d:80:
         fe:ed:b0:a7:6a:b6:27:a1:35:d8:88:85:2a:54:7f:77:cf:91:
         f2:b5:9c:e9:a9:fa:7b:69:59:f9:2d:09:21:06:f3:0b:dc:8a:
         9d:b9:12:ce:af:59:53:bf:52:40:50:77:15:20:92:d8:f4:97:
         33:bf:f3:aa:1c:21:1b:6b:50:0d:d3:62:1b:c6:b7:9d:a1:9b:
         5a:4b:ca:e2:33:7b:84:4e:13:07:02:5e:4c:e4:b9:0b:2b:57:
         5c:75:c4:2c:3e:b3:c2:49:2e:08:af:86:36:95:bf:3a:54:21:
         61:f4:8d:19:5a:ad:cc:73:c1:5d:23:94:9f:94:88:0c:53:97:
         cc:97:f6:c8:0e:94:13:03:45:12:79:7e:e6:65:1a:4f:da:af:
         25:12:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----