Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/82abb3-506d-4006-8413-a094364db940/1/v5o77mMlOLfW59_afmH-Kf793D8.mft
File:                     v5o77mMlOLfW59_afmH-Kf793D8.mft (raw, json)
Hash identifier:          j9CPpBXiWJOCwdohmXlrocjxTdoblA+lwT2upuKKdf8=
Subject key identifier:   9A:D6:30:52:7C:E9:7A:00:5F:D6:9A:69:5E:4F:C6:90:BE:F3:BF:84
Authority key identifier: BF:9A:3B:EE:63:25:38:B7:D6:E7:DF:DA:7E:61:FE:29:FE:FD:DC:3F
Certificate issuer:       /CN=bf9a3bee632538b7d6e7dfda7e61fe29fefddc3f
Certificate serial:       018952F0EE81CD5FB2324DE488D14A3937A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5o77mMlOLfW59_afmH-Kf793D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/82abb3-506d-4006-8413-a094364db940/1/v5o77mMlOLfW59_afmH-Kf793D8.mft
Manifest number:          2F
Signing time:             Fri 14 Jul 2023 05:47:48 +0000
Manifest this update:     Fri 14 Jul 2023 05:47:48 +0000
Manifest next update:     Sat 15 Jul 2023 05:47:48 +0000
Files and hashes:         1: v5o77mMlOLfW59_afmH-Kf793D8.crl (hash: BIP+vyGJEifGn1IKD3d0jeX1RuvITBxdCMJS8affvnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:52:f0:ee:81:cd:5f:b2:32:4d:e4:88:d1:4a:39:37:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9a3bee632538b7d6e7dfda7e61fe29fefddc3f
        Validity
            Not Before: Jul 14 05:47:48 2023 GMT
            Not After : Jul 15 05:47:48 2023 GMT
        Subject: CN=9ad630527ce97a005fd69a695e4fc690bef3bf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:aa:55:66:f4:41:b5:52:db:03:fb:15:b2:
                    b9:57:5c:d9:26:b3:59:2d:a7:ca:5f:f7:30:15:1b:
                    43:91:2f:0a:f9:ad:71:f4:be:9e:33:6b:f9:be:d4:
                    61:d2:81:2a:26:ef:64:55:9f:1a:ff:ed:0b:12:4a:
                    c0:9e:7b:57:15:88:26:a6:28:c4:ce:b0:f0:78:0a:
                    b3:3b:7b:8e:85:54:ee:de:27:ff:86:48:9a:b1:15:
                    3f:72:66:3a:53:d9:f7:32:a8:8a:fb:a4:7f:14:c9:
                    88:b4:09:e5:53:96:44:de:47:2a:b6:d4:23:6e:51:
                    e6:52:a2:6f:ab:54:6c:6d:c5:d5:79:52:5d:73:db:
                    fb:85:a2:4d:13:e0:dd:56:e9:12:63:fa:85:ad:03:
                    37:85:78:ef:9d:b8:13:66:f0:9f:2a:c0:7d:c3:36:
                    5d:42:2b:1b:8c:a7:b8:df:43:18:77:c9:b7:55:aa:
                    8f:ce:39:6e:50:35:4d:56:f8:41:05:65:36:12:c7:
                    6f:b5:e5:ac:15:fc:a9:8b:ba:f8:78:57:d0:89:c4:
                    8f:c2:64:d9:82:cb:15:db:7f:51:35:d6:2d:01:5d:
                    a2:e7:7b:b0:f8:bc:fa:e7:24:14:5d:da:34:ce:05:
                    10:e7:d2:e8:96:31:c8:4b:14:73:d8:87:8c:d0:bf:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:30:52:7C:E9:7A:00:5F:D6:9A:69:5E:4F:C6:90:BE:F3:BF:84
            X509v3 Authority Key Identifier:
                keyid:BF:9A:3B:EE:63:25:38:B7:D6:E7:DF:DA:7E:61:FE:29:FE:FD:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5o77mMlOLfW59_afmH-Kf793D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/82abb3-506d-4006-8413-a094364db940/1/v5o77mMlOLfW59_afmH-Kf793D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/82abb3-506d-4006-8413-a094364db940/1/v5o77mMlOLfW59_afmH-Kf793D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:a3:37:88:e6:09:c4:49:2a:ee:78:a1:e9:22:12:36:88:
         d7:a5:44:82:b7:27:0e:9c:81:13:f3:71:53:3e:c6:b6:49:38:
         3f:01:84:80:24:e7:24:73:a3:77:0b:cc:17:30:ce:c6:1b:ba:
         3f:d5:81:b9:03:a7:9a:3a:c5:1f:bd:0e:0c:42:9a:7b:ee:20:
         d2:47:39:a1:82:a1:dd:79:af:24:77:83:0c:b2:5b:d1:26:d4:
         1c:6b:1d:4e:6b:8a:b5:28:7e:c0:1b:2a:10:56:d0:31:2b:11:
         77:e8:a4:07:b9:d2:a5:85:00:8d:2d:86:20:3d:19:4d:59:ee:
         f7:96:fb:6b:81:15:62:75:5b:f9:09:8e:95:23:a5:a9:c5:d2:
         e9:9b:4f:45:82:eb:18:25:e8:88:ea:96:1e:53:79:94:d7:01:
         43:70:23:6f:ac:6c:75:90:61:d9:88:6c:06:2f:4f:df:07:ac:
         85:f0:4d:00:3c:78:be:1f:79:35:f4:d8:f4:e5:c9:7a:2c:27:
         24:93:f2:e4:6a:54:c9:c0:0a:e7:3c:32:3c:02:18:bf:f5:0d:
         4e:44:69:50:1f:1b:53:03:44:56:38:83:95:dd:4b:7b:28:39:
         e8:74:ad:14:c8:f8:52:1f:bf:66:a8:a2:df:80:24:29:13:4e:
         99:c4:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----