Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.mft
File:                     2DpeSd2ewPRU54kwJn0NHJMHKOM.mft (raw, json)
Hash identifier:          vYAcofkRHiWHp4Ojal5Yv/P0H64azrjMN/4Hp0o6u3U=
Subject key identifier:   7C:54:0F:BF:EF:63:6D:45:20:7A:4A:15:E1:08:1C:39:23:DE:D1:C3
Authority key identifier: D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
Certificate issuer:       /CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
Certificate serial:       018A2B412D50CF0D20BCCEFEAF9B9A91881E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.mft
Manifest number:          05F9
Signing time:             Fri 25 Aug 2023 05:53:26 +0000
Manifest this update:     Fri 25 Aug 2023 05:53:26 +0000
Manifest next update:     Sat 26 Aug 2023 05:53:26 +0000
Files and hashes:         1: 2DpeSd2ewPRU54kwJn0NHJMHKOM.crl (hash: bKPiikMo3TqwUanoNVzH1MNvmMHV4t484nyYjc903VY=)
                          2: RbuMflDbolwEw_xOGEkUaGKug7g.roa (hash: JiaeE1fc5vnPgg9Ap2UaovK19iX5/qwtqRCIzOookKU=)
                          3: kmjEIsIwRTJpZcJsjW_cVTA1GII.roa (hash: 59MiMAs5RBgJTJyUeLBGR2Mfajs139PQFZUqvLpXORo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2b:41:2d:50:cf:0d:20:bc:ce:fe:af:9b:9a:91:88:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
        Validity
            Not Before: Aug 25 05:53:26 2023 GMT
            Not After : Aug 26 05:53:26 2023 GMT
        Subject: CN=7c540fbfef636d45207a4a15e1081c3923ded1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:01:79:24:fe:3d:3f:84:80:aa:b1:35:26:
                    0e:2b:05:1c:47:04:4e:4b:bf:f1:bc:b3:56:a3:69:
                    de:e0:39:6c:4f:90:b3:fd:ee:99:fd:df:43:82:46:
                    80:a1:b7:fa:e1:a0:f2:c4:e6:68:b6:af:97:eb:34:
                    69:36:93:24:b4:b9:2c:3f:85:3d:e7:53:98:03:e2:
                    83:47:dc:62:a5:76:11:75:8e:e5:53:c8:7d:27:43:
                    0a:a0:74:cd:66:15:3a:fd:76:4e:69:f2:7b:10:97:
                    d9:30:83:40:ea:64:a6:f3:f4:52:84:a4:2e:da:91:
                    ba:3b:26:ba:8c:b4:28:d8:05:79:46:dd:e7:66:02:
                    4a:d9:03:33:47:a0:19:13:51:ea:24:3b:c5:68:0c:
                    f0:61:2b:66:a2:cb:15:c2:3b:97:f1:b6:97:21:70:
                    8f:d5:8b:5f:06:f0:f4:54:a1:2a:bb:79:43:de:5b:
                    bd:64:8c:ec:29:84:6c:0b:12:6f:c9:2f:17:59:29:
                    2b:58:fb:97:1f:b5:da:d1:65:97:54:3b:a9:21:1c:
                    8a:08:6a:81:17:06:54:dd:7c:5f:66:0d:c2:5d:e5:
                    d0:80:fc:cb:28:f7:6b:a0:a6:c2:41:f1:90:85:84:
                    70:0f:1e:49:59:06:82:1c:5d:05:02:36:e8:40:c4:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:54:0F:BF:EF:63:6D:45:20:7A:4A:15:E1:08:1C:39:23:DE:D1:C3
            X509v3 Authority Key Identifier:
                keyid:D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:84:56:4f:5a:53:0c:b7:17:8f:7b:21:33:f2:e1:cc:2a:
         1e:82:d7:c1:2d:cc:0e:a1:1f:48:a3:a7:6e:9b:46:5a:a3:93:
         ea:cb:42:fd:53:a9:e1:d0:ca:52:79:48:d5:dc:64:72:2b:5e:
         16:af:7e:94:65:39:98:69:77:9f:91:65:b7:5b:df:d8:6d:86:
         ea:e7:f1:83:c8:04:59:de:b0:b8:d6:d7:77:c1:0f:96:65:f4:
         dd:22:31:d7:ab:c6:1a:7c:64:7e:e0:ee:f4:ed:1d:c8:b5:a0:
         db:77:dc:bd:d5:70:20:ae:06:02:46:c5:af:00:39:29:a1:ce:
         4a:d7:e0:9d:70:b6:8c:0c:c4:2a:7a:79:52:30:a3:87:d3:a5:
         ef:98:b4:d5:e3:a3:23:2d:1b:a8:73:14:04:78:dd:3f:8a:f5:
         29:46:55:6f:7d:39:90:a3:2e:ae:d4:9a:d2:f2:83:e1:99:f8:
         78:65:f5:41:68:02:15:64:9a:33:db:a9:0d:f8:80:1c:e7:ee:
         42:2a:62:d2:52:c4:83:b1:11:a5:1a:e8:40:6b:7e:b9:7b:d8:
         6c:3d:01:45:1b:b7:8e:28:f4:b7:f7:e6:85:4e:86:bf:1a:17:
         40:6e:fa:b2:70:c4:11:2d:aa:36:3f:4d:6b:bb:f9:b6:0e:f6:
         55:58:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----