Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft
File:                     LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft (raw, json)
Hash identifier:          jMs/5boUBGEQUrBHnlO5d0O+ybb6N1oONReG5+T+tCE=
Subject key identifier:   68:65:CD:1A:52:92:E1:BE:A8:B4:60:D9:38:08:04:86:6B:46:61:4D
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Certificate issuer:       /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial:       018CAECC9A9E5BF5203DE1F3D0A0BCB30BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft
Manifest number:          0A2F
Signing time:             Thu 28 Dec 2023 05:01:33 +0000
Manifest this update:     Thu 28 Dec 2023 05:01:33 +0000
Manifest next update:     Fri 29 Dec 2023 05:01:33 +0000
Files and hashes:         1: 1-WEPQJU49LIdnQqH8-jmDUugLDI.roa (hash: ElhqypKM88+avaQ1MsZXq4NSpX/GlPIoxObAyngwVx8=)
                          2: 1sXXeNNCEyJJ4fbjLsoONdHjU9I.roa (hash: Uz3nSM9q2RnbTDLHN0MRdajWS3rC1SBbOfA7fZzYtbo=)
                          3: 4ZYZW9-kqUG51-lrbNFwI3mTWKQ.roa (hash: r700ezAcyuuOPxnXEw/JRolQZJzm5uSaZxPf9qWUP+M=)
                          4: 7YARPQdaOfAfP7z49sWifiPjIb4.roa (hash: oDKL9sSNMsir8IssQMT/GhxAdUizw+2YGT6nm9dI+lg=)
                          5: JogflRnYbdLlqoOLuN4fO5PxVSA.roa (hash: Zzu350Elb1h0zy2Mvo9q9YUfqfMHWf0MUhRxhjWL0JQ=)
                          6: KofU_IUQwWNw_REk4H6g3kA3phA.roa (hash: RALoHV4MElxnNc7X4fJRkxii9LD6fG6d5gEpb6qnX38=)
                          7: LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl (hash: GXapx6Rn7KLLX1RIo2uHiFTF+f7HAo9PJmf5LeYqU5c=)
                          8: cUisM6UqPuIwd-WnGOQctWaIyak.roa (hash: 6swey11moIbT0b6Hex6l1w9/f0emArZosAptWD8YJo8=)
                          9: s0-HG1DAdTPY7yNJ1HH2JKFBwoc.roa (hash: 2KJKSf4xXmndfHqPQrOpY49o0w0W4g4xN5jpXt9oXiA=)
                          10: tqjpd-E3c0eKR6aYLK6inggfseQ.roa (hash: g/tTIAt2JhXZi2pLzX11RyfWA4CfW/n26EauI55XWXo=)
                          11: zNMPyiIXGaxx9cm884sEgQuS0MM.roa (hash: 0iqw9fs/VK4XNIViDo/4+YHR1tNtB+hVwjE2lBZEMrI=)
                          12: zyiCyDxnwMGQe-nsuAU18F43klk.roa (hash: swpE3Ii+DvjAFZtVPcCt/ep3TrzTDkizc5BfjYpOk9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ae:cc:9a:9e:5b:f5:20:3d:e1:f3:d0:a0:bc:b3:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
        Validity
            Not Before: Dec 28 05:01:33 2023 GMT
            Not After : Dec 29 05:01:33 2023 GMT
        Subject: CN=6865cd1a5292e1bea8b460d9380804866b46614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:69:75:98:37:6e:94:c6:92:bd:d6:d4:38:
                    45:bc:b7:62:f3:dd:45:49:69:2c:e7:7d:c2:e9:32:
                    1e:5f:01:96:86:83:b8:42:35:67:56:b2:2d:e7:1b:
                    b9:82:a1:80:de:de:2f:81:e8:e5:39:2c:12:b6:dc:
                    30:90:7e:21:ae:1c:28:33:ab:9c:dd:b5:72:9b:16:
                    56:53:32:2c:9c:48:e1:86:eb:2b:9b:ed:6f:b4:5b:
                    c4:ad:0b:01:04:0d:30:f4:4b:0d:1b:77:c5:01:7e:
                    7c:4b:ee:8a:82:c2:e1:a7:b5:60:92:a3:05:5e:9e:
                    d5:66:04:24:09:14:e5:d2:23:a4:0e:27:65:ef:e4:
                    ec:0d:3b:ee:b6:ab:97:fd:e8:f8:92:9e:d5:58:0c:
                    c8:00:20:6c:f1:22:d6:ba:77:e7:88:3b:6c:20:8c:
                    d1:00:5b:77:be:32:b1:37:9c:3a:aa:c1:c9:5b:87:
                    0a:d5:2c:d4:67:18:de:3d:35:1b:40:71:d5:7f:17:
                    24:4d:d1:1f:41:0b:fc:19:c5:01:43:53:62:36:be:
                    99:7a:61:b0:a9:76:65:0e:7d:fa:40:07:cd:e3:cb:
                    20:92:6e:50:a6:d3:69:0e:a5:aa:f0:d5:f1:5b:ac:
                    28:55:04:7a:07:02:d8:ac:87:e6:f0:ba:db:f2:27:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:CD:1A:52:92:E1:BE:A8:B4:60:D9:38:08:04:86:6B:46:61:4D
            X509v3 Authority Key Identifier:
                keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:41:c6:d9:70:8a:96:ea:c1:57:b2:32:a0:7e:b7:8b:53:f1:
         e5:1d:08:37:b9:c9:ca:a9:5c:a8:97:cd:cb:08:8a:3e:b6:70:
         28:34:57:e2:42:ce:cf:fb:e2:06:17:2c:bb:ee:ba:25:74:f6:
         97:00:b5:91:5b:82:eb:99:db:e1:5f:10:44:27:f1:85:aa:c3:
         7b:70:59:3a:04:11:83:b8:40:b7:68:7e:a3:37:d1:c0:ab:f7:
         36:e7:af:a1:95:4e:8e:24:4d:dd:fc:87:2d:f2:5c:62:c3:5d:
         59:65:0d:c1:3e:2a:9d:d3:94:91:88:7f:3a:b6:e1:35:b0:9f:
         64:ed:4b:4c:b9:ae:51:35:27:95:81:76:41:5a:1a:a0:86:4e:
         37:34:4e:40:6a:ec:76:be:72:14:45:1c:96:8b:15:0b:63:05:
         69:9b:f9:12:5b:3f:93:32:cc:f2:72:3f:71:72:58:a0:61:4d:
         54:19:07:97:ae:cb:74:69:9d:65:cf:7b:37:9f:15:3b:f7:34:
         7d:54:3f:cf:be:3b:03:96:9e:23:0f:7f:21:ec:7a:88:88:04:
         b6:ae:68:b5:cd:f9:f1:f5:89:ef:fb:96:5b:98:de:ce:24:0a:
         38:29:ab:ae:87:bc:d7:5e:c8:91:69:aa:b6:e5:36:a9:a7:0a:
         bf:e7:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----