Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.mft
File:                     ad2rojw3_o32C-LeJT942rDLm9c.mft (raw, json)
Hash identifier:          iD9gtxVFyjFZ8fr4dcs7Ga4emEpNx/YtEMXQdypRRuU=
Subject key identifier:   E2:BA:87:CD:34:FF:EF:27:40:E3:E4:A6:AC:FE:FE:D4:33:7F:DE:E9
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Certificate issuer:       /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial:       018C434C5202CFF9104A1A72E10C8730AFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.mft
Manifest number:          07ED
Signing time:             Thu 07 Dec 2023 08:02:04 +0000
Manifest this update:     Thu 07 Dec 2023 08:02:04 +0000
Manifest next update:     Fri 08 Dec 2023 08:02:04 +0000
Files and hashes:         1: 0yRcA7WJem7sK2_BpO50PWLQJOw.roa (hash: s4rnvaciGGWk0TsWDfmEGTgQ78MFtpc7DJHcYsH7wiA=)
                          2: ErSpIu1qFhXkGSzfpTTimK6ILig.roa (hash: /8uo+UmbJ+CMFpG/gFgyFY3TtDPjZahfwJsvgOyoCq0=)
                          3: LC25lilL-l6crKYe24oBvR_eLvA.roa (hash: OxXE2ttuX4MYmtNnoSkb7CFWjh3Ro63ickQ6PLjyMPk=)
                          4: ad2rojw3_o32C-LeJT942rDLm9c.crl (hash: RXuvAF9P+iPfTnauZsLZhmHwxlsBSxBUbC8U8/k5oFU=)
                          5: ftxseE_q62DFdcTMs1a6AXSaLB4.roa (hash: Qrw4jY30xcZ2zGLs9dwRMpnFeUZ7xsPsOVQj//dpm+8=)
                          6: pnw5hX6YWp8_oO15hCrGK7FTjC0.roa (hash: 4/9JLJ6jiTQwJm7862GV9SNQJD3YwzbDqt/66CYUsjQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:4c:52:02:cf:f9:10:4a:1a:72:e1:0c:87:30:af:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
        Validity
            Not Before: Dec  7 08:02:04 2023 GMT
            Not After : Dec  8 08:02:04 2023 GMT
        Subject: CN=e2ba87cd34ffef2740e3e4a6acfefed4337fdee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:59:70:3c:0d:cb:a4:48:aa:4b:2b:95:2d:
                    12:44:b7:95:06:02:b4:de:64:9a:1e:2d:08:cb:1c:
                    a5:8b:48:b2:c4:51:38:e6:45:54:fd:23:da:b9:8b:
                    b0:de:dd:e5:2d:4c:e9:ce:cf:1e:4f:4e:d8:9b:98:
                    93:54:d4:68:53:79:ca:bf:f3:25:e6:10:05:0f:50:
                    c0:d6:c7:75:ff:6b:f7:17:54:cf:ae:e4:3e:ed:f4:
                    13:a2:61:e2:4c:12:f6:0e:25:ed:ca:6a:39:ff:73:
                    81:67:16:dd:3c:8d:2a:fd:20:66:e1:c0:31:0e:4e:
                    2d:d7:77:cf:e2:d8:02:15:72:03:b8:4b:58:f3:af:
                    9c:0b:5e:48:c0:1b:c2:fa:8e:3d:3c:d5:57:2d:23:
                    a6:ed:a8:44:6d:53:4b:ef:33:57:26:be:f9:4c:fb:
                    fa:d8:f9:0a:25:d2:7d:33:72:81:e4:cb:28:fa:7d:
                    87:59:45:f9:37:9f:47:eb:8e:86:cd:35:e7:f4:10:
                    53:b9:d1:88:81:31:88:25:80:28:76:61:b8:d9:5c:
                    72:65:89:c7:d4:a8:2c:73:17:4d:1c:29:74:4b:9f:
                    c1:26:82:1c:51:c9:5b:33:ae:9b:0d:15:6c:f0:30:
                    44:ef:66:5e:ff:7e:3a:e2:76:c0:16:c7:3c:31:b3:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:87:CD:34:FF:EF:27:40:E3:E4:A6:AC:FE:FE:D4:33:7F:DE:E9
            X509v3 Authority Key Identifier:
                keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:a1:b6:fb:9e:7a:fc:b7:6d:e9:02:19:eb:5b:54:30:bd:
         04:5b:8b:24:73:9b:23:0b:1a:4a:28:d6:7e:a5:ad:4d:76:b4:
         2b:8c:39:f4:34:4c:89:cc:c7:33:45:38:bd:88:79:88:0c:19:
         da:26:78:e9:c7:77:00:e8:90:c9:00:dd:8d:46:3b:f6:2b:8c:
         b7:5c:a5:c0:a9:0d:aa:10:74:9f:c9:c9:71:71:5c:9e:b7:4f:
         77:ed:4d:4c:6b:dc:62:5a:9c:05:44:f8:ea:7d:22:8f:08:87:
         5e:83:38:67:59:1b:f4:7c:81:b2:a4:49:58:14:4d:03:24:80:
         58:a7:e0:6f:7d:05:04:84:59:96:06:9e:68:38:90:df:e0:25:
         5a:7d:5c:14:24:11:d2:38:e8:8b:9b:98:4d:ff:74:92:6a:fb:
         53:2a:1b:a1:a9:10:c2:b4:c4:b6:ed:f8:d0:b8:fc:9f:b4:f8:
         0f:fc:da:c1:9d:38:92:e3:29:46:8d:06:56:d6:72:49:6e:4a:
         58:15:cb:32:43:92:3e:d3:3c:c6:94:81:b5:fd:02:8a:22:56:
         58:07:92:e9:41:ae:2f:f2:07:18:cc:48:74:68:fd:a9:37:22:
         bf:72:28:a2:b2:63:c7:0b:1d:57:41:1c:f1:cb:39:43:c4:a1:
         46:c5:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----