Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.mft
File:                     p24EU-JBhqxIlkESRjDjdReqIuQ.mft (raw, json)
Hash identifier:          DgpZaFtG22+hldxsPq3p6T6HitYulKGeqF8/esNFsEg=
Subject key identifier:   5A:12:B4:50:C9:4F:E7:0A:2A:27:C1:95:88:AF:24:9D:93:EB:B2:B7
Authority key identifier: A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
Certificate issuer:       /CN=a76e0453e24186ac489641124630e37517aa22e4
Certificate serial:       018C6D227A9D04A05DDCD9CAC56D5639DE86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.mft
Manifest number:          08B6
Signing time:             Fri 15 Dec 2023 11:00:25 +0000
Manifest this update:     Fri 15 Dec 2023 11:00:25 +0000
Manifest next update:     Sat 16 Dec 2023 11:00:25 +0000
Files and hashes:         1: V5Dew4Eptwv4c15uQ4rhIFFhJLk.roa (hash: Xplst+uFMo4Wpf5KKSGbjvfN8afL/ZwyjyMIRk+lQKk=)
                          2: mpO_H7fy9NBGfxnvupPAUlQDKSQ.roa (hash: 0oBrkyBWrQcEZgeJIoCunpxwFSgHI9r+wgHK4bm9L3s=)
                          3: p24EU-JBhqxIlkESRjDjdReqIuQ.crl (hash: 7SOyc6L4nZiTi8Gqyxo/WVTZgBCtlXe2cJo9Gq+iw7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:22:7a:9d:04:a0:5d:dc:d9:ca:c5:6d:56:39:de:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76e0453e24186ac489641124630e37517aa22e4
        Validity
            Not Before: Dec 15 11:00:25 2023 GMT
            Not After : Dec 16 11:00:25 2023 GMT
        Subject: CN=5a12b450c94fe70a2a27c19588af249d93ebb2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:7c:55:ec:1b:4f:86:de:77:79:9b:0e:86:
                    8f:7d:de:11:83:71:90:e6:b7:b4:9f:6c:45:c9:d8:
                    c0:c9:5c:83:14:b6:c3:5c:ca:a1:c3:4f:a7:c2:e0:
                    f1:cc:af:78:25:93:98:d9:fc:15:da:28:ff:c9:9c:
                    5a:da:96:f4:56:11:2c:08:1f:b8:88:7b:66:11:16:
                    26:c7:fd:3c:ef:8d:17:a7:33:29:4a:be:bd:f6:91:
                    2c:ea:34:d7:39:d2:0f:7a:8d:d0:74:70:27:23:20:
                    87:8b:16:ee:a3:f0:b2:a3:57:d2:bd:1a:ea:2f:a1:
                    4f:ca:e0:05:bd:c1:d8:a0:5a:01:aa:b8:82:35:0f:
                    da:af:c7:a8:1e:07:63:7e:75:4a:1f:39:f7:9a:62:
                    fe:b8:54:fe:09:bf:03:70:a6:8d:4a:bf:59:e6:e9:
                    85:3c:a3:92:a2:89:bc:2c:12:1d:2a:44:de:1f:40:
                    5f:cd:a7:9e:1b:8b:bf:eb:c5:70:7d:98:59:ce:63:
                    f2:4c:75:26:6f:6c:e5:a2:93:c1:1b:be:69:76:98:
                    1c:54:38:3c:44:68:b3:6d:5c:20:3c:4e:88:87:b4:
                    64:9b:8c:e7:d6:f8:42:3f:aa:4f:23:0d:47:2d:26:
                    cc:6d:dd:ea:97:5f:87:8f:20:51:d8:c7:34:48:1c:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:B4:50:C9:4F:E7:0A:2A:27:C1:95:88:AF:24:9D:93:EB:B2:B7
            X509v3 Authority Key Identifier:
                keyid:A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:42:10:a2:4a:73:15:09:ec:e4:a0:c7:72:06:50:53:4c:f5:
         d3:7e:b2:b0:33:db:3f:c3:a9:5d:9d:df:39:45:62:c0:c7:58:
         e4:f5:c1:d7:29:ab:1c:60:cd:81:69:45:9c:3d:03:65:89:c4:
         0f:74:d9:9b:d8:4c:39:e7:31:39:07:da:95:bd:f3:b9:46:08:
         7f:03:5c:1a:a3:f2:0d:ef:02:81:85:ba:6f:f7:96:2e:af:90:
         2e:f7:1d:2e:2d:cf:35:9a:87:f0:79:6c:f3:d1:87:d3:e8:ce:
         ef:cb:b7:2e:9e:68:0c:05:c1:ec:32:5e:cd:a4:fe:66:53:cd:
         37:dc:d3:e4:12:58:eb:15:0c:ec:e3:2c:11:ec:46:cf:7b:f1:
         bd:da:14:ef:c9:24:08:dd:50:d0:af:c1:ba:01:ea:68:16:4b:
         5b:a3:1f:8f:8d:27:f3:01:f6:1f:6f:7d:35:3c:2b:60:0c:73:
         a1:06:94:5d:29:e4:44:b2:31:21:ff:c3:85:2a:9c:97:f9:3e:
         fa:9c:2b:2e:2d:55:2d:77:2d:23:51:d7:ec:07:3b:77:a4:2d:
         6f:36:39:1e:b6:ae:18:17:6d:58:46:43:19:c3:dc:7d:fd:5a:
         79:bc:b4:f3:62:ca:61:35:d8:76:00:ed:34:55:a5:32:1b:98:
         10:61:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----