Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
File:                     2eJ2DXCg1regRxMO29mW0EHp0wA.mft (raw, json)
Hash identifier:          vreO+v0jOQPElo+dofpUgGk4tNY3LZ2w3V0FsBjps44=
Subject key identifier:   99:50:E3:B0:15:D0:B4:6C:A6:A0:71:E3:38:42:3D:AF:6F:49:01:11
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Certificate issuer:       /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial:       018D76FEA62FF62E220F4A04C0A1F90A5894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
Manifest number:          0859
Signing time:             Mon 05 Feb 2024 02:00:16 +0000
Manifest this update:     Mon 05 Feb 2024 02:00:16 +0000
Manifest next update:     Tue 06 Feb 2024 02:00:16 +0000
Files and hashes:         1: 2eJ2DXCg1regRxMO29mW0EHp0wA.crl (hash: X+w2U8lM295m4eOiudjIdS8sv+VqMU4QdVXbA5XNoyo=)
                          2: BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa (hash: gN+gtOZ1sO9qEVx2V/WYK+gPOJEbOfVcgv2ODnlqnOI=)
                          3: ldplkmZqPVZkNeL1HZlkLwwWkII.roa (hash: l7dExVL31RrReJRMwFdULHTuoIHeraJZ/fSckBTI4UU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:76:fe:a6:2f:f6:2e:22:0f:4a:04:c0:a1:f9:0a:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
        Validity
            Not Before: Feb  5 02:00:16 2024 GMT
            Not After : Feb  6 02:00:16 2024 GMT
        Subject: CN=9950e3b015d0b46ca6a071e338423daf6f490111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:63:92:6b:c8:0d:16:8b:7e:cf:13:eb:ba:
                    9a:32:68:a2:7d:6c:7b:cf:a9:38:ef:0b:68:26:51:
                    97:9b:bc:a8:fe:3c:18:09:fe:9b:41:b7:a6:25:3b:
                    cd:9b:24:1c:bc:05:a0:6a:eb:c1:e8:51:43:2a:f7:
                    2b:b5:cf:8e:59:83:26:33:6d:2f:01:de:0d:6a:f0:
                    9d:bc:08:cf:7d:3c:2d:26:46:c6:c9:64:fd:1d:82:
                    5f:0c:a2:4d:e6:c8:28:ec:c5:87:c0:59:11:06:ae:
                    a4:72:cb:01:a0:59:a9:1f:b2:b7:4e:6e:b0:71:19:
                    ff:df:31:6e:9a:44:87:0d:e1:cc:9b:59:bb:03:0c:
                    a9:1e:ac:f1:d5:39:6b:bb:b0:3d:99:64:80:39:f4:
                    fc:29:03:1e:62:7e:c0:f6:83:59:5c:1f:f2:09:4e:
                    a7:7d:f9:cb:1e:ab:ee:52:76:e6:7c:2c:77:91:0a:
                    9a:b5:ec:ae:91:5f:b7:db:a7:6e:e4:ba:89:05:2e:
                    30:0b:1d:16:57:24:08:cf:a0:ff:29:10:66:df:3c:
                    ba:1e:5d:c5:69:c7:07:19:98:1f:67:2b:6a:6f:59:
                    32:d5:54:f6:09:b0:fd:6e:d4:b0:51:49:c6:a0:f6:
                    e5:a5:19:c2:72:88:f5:5e:43:b6:14:0f:68:4e:3c:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:50:E3:B0:15:D0:B4:6C:A6:A0:71:E3:38:42:3D:AF:6F:49:01:11
            X509v3 Authority Key Identifier:
                keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:37:4f:a3:21:00:a7:3a:8d:9e:26:fa:3a:48:b4:2c:c2:2a:
         1e:4a:61:bb:5e:96:e9:9d:4d:a6:96:7a:49:3c:74:1a:45:2c:
         81:3b:31:89:be:c6:82:c9:b2:54:e9:85:d5:f9:d7:a0:85:d4:
         a3:46:37:5a:6b:b8:d3:bf:23:ec:18:4a:0b:c0:da:06:85:77:
         38:7f:83:63:96:25:6a:ca:45:7f:30:5c:fa:62:c5:d4:9d:f2:
         77:d4:62:5d:88:01:b0:c8:31:3c:36:8b:4f:bf:f9:02:ab:21:
         84:0c:0a:f1:4e:6a:79:41:35:f7:69:70:0a:aa:3b:58:b3:5f:
         1b:79:12:79:25:e2:59:cd:ee:01:d8:7e:fe:c6:79:29:a5:41:
         bc:df:b3:c4:a7:8c:30:f3:25:2c:31:47:ef:08:40:0f:41:ac:
         7a:6c:b2:a6:46:5a:ff:da:24:e8:56:87:86:31:2f:84:a8:8b:
         d3:80:dd:6f:ac:e4:c8:1a:31:32:8d:12:81:81:54:ab:34:af:
         cb:1c:58:16:88:0b:1a:21:d9:09:44:e9:c1:11:6d:72:f0:65:
         a6:c2:a3:cb:5b:63:bb:46:b5:bf:a4:6a:2d:3c:b9:d5:d6:4a:
         00:a6:d2:b9:5a:47:46:7c:79:af:19:18:1a:dd:ba:c1:ed:38:
         97:17:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----