Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
File:                     cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft (raw, json)
Hash identifier:          d0X3VXmKDQh4UCf+nfaV2/Qftx0Ki2OKarQcf3GT8gw=
Subject key identifier:   EF:8D:26:14:85:46:CE:69:15:2D:A1:BC:A4:38:AA:A8:4B:79:92:1B
Authority key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Certificate issuer:       /CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Certificate serial:       018D5C9ABCEA525120948034E27995AC3105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
Manifest number:          08FD
Signing time:             Tue 30 Jan 2024 23:01:01 +0000
Manifest this update:     Tue 30 Jan 2024 23:01:01 +0000
Manifest next update:     Wed 31 Jan 2024 23:01:01 +0000
Files and hashes:         1: cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl (hash: iqMsZlxonWp8clcjf4sA0n6xa3OPST8IM/qKPGp+ljk=)
                          2: hkzhZS7HeE-rgMUTaezaUHzB_JU.roa (hash: YF5BJcw6pemXfCa2fKfDhdB8P+l9UQ5KDmfmyi9KrFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5c:9a:bc:ea:52:51:20:94:80:34:e2:79:95:ac:31:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
        Validity
            Not Before: Jan 30 23:01:01 2024 GMT
            Not After : Jan 31 23:01:01 2024 GMT
        Subject: CN=ef8d26148546ce69152da1bca438aaa84b79921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:59:ce:43:b8:75:1d:71:d3:f9:1b:07:04:
                    c8:7d:d4:c3:ab:35:70:54:73:0b:7e:33:91:d8:1c:
                    25:5a:dc:b6:09:d7:f8:9a:9c:72:98:1e:dc:35:2d:
                    9f:98:11:83:f9:c7:fb:1c:13:e5:fd:07:ee:d0:c3:
                    be:91:8e:a5:24:3d:71:d9:53:82:c1:c7:0b:a0:e8:
                    c2:92:73:4c:0c:54:07:ba:ef:c1:78:40:fa:9c:fd:
                    a0:c3:27:38:0e:a3:b8:db:3f:41:56:90:88:a2:46:
                    ea:c7:94:d5:58:fb:8a:35:7d:b0:9b:74:56:67:c7:
                    13:90:bf:15:6b:b0:e6:ef:15:6a:ad:28:f4:89:92:
                    f2:36:ee:0b:0f:a9:d3:ae:75:aa:7c:33:98:7e:78:
                    35:8d:74:e6:ea:44:cb:ae:e3:2d:e0:09:1b:8e:be:
                    6b:1a:a8:9e:9c:ae:82:7e:a6:fd:40:be:e2:80:7c:
                    93:55:d8:3d:9b:19:ae:0c:89:7d:59:40:5c:c7:cb:
                    ab:4f:4e:6a:58:01:ef:9d:a1:92:3a:d3:06:d9:4a:
                    71:c8:fe:d1:ba:09:fd:e9:7c:94:cb:98:9c:bc:d5:
                    ef:ae:62:cd:03:f9:dc:ff:b1:ee:21:31:06:9e:5d:
                    1b:40:8e:cb:6c:95:7f:ed:1e:8d:d8:e7:96:44:1e:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:26:14:85:46:CE:69:15:2D:A1:BC:A4:38:AA:A8:4B:79:92:1B
            X509v3 Authority Key Identifier:
                keyid:72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:f4:85:66:97:ef:75:1c:8b:5d:22:6f:04:16:ee:59:41:
         fd:5a:55:02:2a:b0:c6:f4:03:cc:2a:f3:e7:29:0a:ce:4b:ec:
         94:7d:96:25:5f:64:0a:94:9e:bf:f9:ca:c3:a3:35:b5:1c:a1:
         fa:e6:f8:00:a1:a9:c8:ec:65:31:37:a6:fb:81:c2:23:2b:b7:
         87:6b:65:72:09:11:00:a8:d6:dd:0a:8c:00:5e:c1:e3:e5:c6:
         f1:0b:39:c0:44:2f:54:d0:87:b9:64:96:fb:37:b6:ed:3c:df:
         48:eb:ab:b4:f3:43:27:d7:c8:12:7e:5b:8e:c3:89:6c:f1:ec:
         27:6b:31:10:1e:c1:bf:e9:09:89:ba:45:ad:1b:07:95:61:92:
         ef:0c:8a:76:12:7d:a5:50:2d:38:fc:5a:68:b9:b1:14:96:79:
         0b:61:14:73:0c:01:3b:27:82:f8:d5:f9:7f:37:01:17:88:23:
         aa:96:02:ec:10:79:ec:09:4f:a9:00:a0:de:23:01:23:36:c3:
         1c:37:ee:55:fb:ce:b4:fd:4e:44:a4:c7:d0:4b:0c:cf:76:dc:
         0c:b1:4b:12:3b:52:bb:4f:b6:79:65:5f:dd:c9:99:19:21:b1:
         99:31:99:47:ea:14:64:b1:ad:71:23:8f:80:27:69:67:d7:a8:
         9a:a5:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----