Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
File:                     tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft (raw, json)
Hash identifier:          XVMBIAvWq8pWAE3JMlD7xHQiJZK8/Yzbn+AWdB3OuQ8=
Subject key identifier:   FA:14:36:DF:8A:E0:E7:EF:06:9C:B3:29:75:49:B9:FC:CD:34:F7:1A
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Certificate issuer:       /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial:       018CC9D59C2E0D979C6FE98001FD33BD5746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
Manifest number:          0754
Signing time:             Tue 02 Jan 2024 11:01:08 +0000
Manifest this update:     Tue 02 Jan 2024 11:01:08 +0000
Manifest next update:     Wed 03 Jan 2024 11:01:08 +0000
Files and hashes:         1: cF35Cryma8QkHAoJ_JJKcyHKlPU.roa (hash: qh9wcc/XMGl/0YAr7imvjXJRAlWXXqFgXYC4dA6IcJY=)
                          2: tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl (hash: 4PA4NgkJa0B5YfaD5XXW+Hb6Wh9cAPquFRsrjO42DYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:d5:9c:2e:0d:97:9c:6f:e9:80:01:fd:33:bd:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Validity
            Not Before: Jan  2 11:01:08 2024 GMT
            Not After : Jan  3 11:01:08 2024 GMT
        Subject: CN=fa1436df8ae0e7ef069cb3297549b9fccd34f71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:32:b5:8a:12:e9:12:2f:0e:f7:fb:a6:d4:
                    b7:ab:8a:6f:2d:73:0b:d9:f2:d1:01:c6:f2:0e:cc:
                    42:c7:5a:63:4c:e7:d3:ba:4a:5d:7f:60:50:58:92:
                    ee:40:d1:ac:7e:3f:62:a7:75:b5:37:1f:c7:f8:25:
                    3e:06:62:c2:f2:8c:b6:d8:a7:56:42:4c:b4:2c:fe:
                    5c:1a:8c:e6:ea:b8:8c:a6:82:e9:ca:be:66:24:ed:
                    97:35:8b:c5:7d:67:86:42:46:a4:5e:32:b0:24:2b:
                    65:a8:29:94:bb:27:10:57:d9:ca:14:de:c4:7f:e8:
                    24:6b:1a:d7:25:a1:b1:fc:6e:04:7b:e3:0e:48:2a:
                    92:39:e2:1a:49:d5:f8:ed:ac:34:c1:3c:32:91:d9:
                    85:78:a9:1c:46:01:92:8c:de:9f:c8:cc:9d:ac:d8:
                    e4:6a:74:f5:9e:ec:e8:de:ce:c7:e9:5e:3b:8f:9b:
                    19:35:58:c6:19:fb:dc:cf:99:e5:3a:a3:6b:34:2c:
                    4a:49:e5:5f:5a:44:7d:23:7f:e0:20:44:86:b8:d3:
                    fb:8b:2b:4d:4a:a3:2f:cf:e3:d8:aa:05:d6:be:64:
                    3f:d1:2d:75:9d:40:f4:35:0c:c6:17:7b:d6:0d:5b:
                    5c:da:d0:7e:b9:48:37:d7:c8:22:4e:68:35:38:4f:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:14:36:DF:8A:E0:E7:EF:06:9C:B3:29:75:49:B9:FC:CD:34:F7:1A
            X509v3 Authority Key Identifier:
                keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:b4:75:b1:d0:e5:a4:15:fa:b1:6d:4f:f6:c0:f7:5e:1d:
         2c:4c:09:0b:8b:38:ee:d7:a6:c1:35:19:06:a1:e7:d8:0f:1e:
         d8:1e:d4:36:9d:f5:b1:c0:07:11:52:5a:23:c4:52:93:be:ad:
         65:5a:b2:ce:b6:37:b2:ea:22:9c:af:62:ef:74:4c:d3:bd:42:
         98:98:2c:ff:9d:87:38:eb:cf:2e:d5:86:d5:4a:a8:7a:81:a6:
         6b:6b:ec:20:36:87:ca:32:70:7e:26:da:46:b5:46:2a:70:f0:
         78:f7:a6:e8:c0:7c:f2:11:a9:25:ae:c0:65:89:4a:7e:ad:09:
         76:25:a6:01:e8:b6:90:3b:2d:0b:68:c0:fe:eb:66:bf:f5:cb:
         1c:5f:cb:4b:33:ec:da:c7:f4:62:da:f7:0e:74:c5:b7:76:87:
         83:15:1f:1c:74:9f:f2:c4:f5:77:d3:bb:1c:87:5e:c1:e8:23:
         a1:1f:b2:ef:4d:08:da:8c:6a:5b:1e:b4:d0:d8:52:dd:45:63:
         65:6f:55:ca:98:57:80:1a:f4:9c:ab:09:d7:81:39:61:ec:73:
         48:c8:be:b2:71:a5:db:b4:f4:c3:22:a2:5a:e5:7e:b7:06:e2:
         86:c1:30:cb:72:4a:85:fd:dd:4d:49:0e:26:8c:32:0e:9d:a7:
         6e:7c:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----