Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.mft
File:                     svEdg2GwUhGNhR1KeAe80keEz_U.mft (raw, json)
Hash identifier:          DxNOKwz3G8yfELy1bNFP4Mw4nN+d2aoJIYybRSaA10I=
Subject key identifier:   C5:15:7F:5D:A0:26:11:F1:D7:E7:3B:A4:60:17:22:3C:81:24:B0:95
Authority key identifier: B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
Certificate issuer:       /CN=b2f11d8361b052118d851d4a7807bcd24784cff5
Certificate serial:       01881D948060A3FAFE010C562ADCAD0353D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.mft
Manifest number:          0B8E
Signing time:             Mon 15 May 2023 04:04:11 +0000
Manifest this update:     Mon 15 May 2023 04:04:11 +0000
Manifest next update:     Tue 16 May 2023 04:04:11 +0000
Files and hashes:         1: EkLS0aolBU-6NaYgc6Fbq1MFUCY.roa (hash: aLdm/c4rvtGcdRrBFP99BiBRUoZ6xr+vilCSJbQ5YlE=)
                          2: svEdg2GwUhGNhR1KeAe80keEz_U.crl (hash: P0pAPNGRfFjyOdl3sMp/rVZ6Om4gNkHdDEzxC3suASU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1d:94:80:60:a3:fa:fe:01:0c:56:2a:dc:ad:03:53:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f11d8361b052118d851d4a7807bcd24784cff5
        Validity
            Not Before: May 15 04:04:11 2023 GMT
            Not After : May 16 04:04:11 2023 GMT
        Subject: CN=c5157f5da02611f1d7e73ba46017223c8124b095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:c8:20:56:87:65:c7:ae:d8:d1:aa:bd:61:
                    fd:01:84:f1:06:ce:56:c5:4b:da:f3:bc:ec:04:f9:
                    95:a4:97:0e:a2:92:22:0a:37:a1:a1:2f:e8:31:06:
                    5b:ba:f0:21:47:ba:97:e1:9a:1d:bd:ae:26:a2:bb:
                    94:4d:55:ab:a6:b5:67:d5:0d:01:7c:ac:c5:ae:12:
                    72:1a:71:42:2c:f1:47:a1:40:41:14:d5:01:44:fd:
                    28:3b:8d:b0:6d:60:c9:4b:5a:d2:81:6f:1f:50:19:
                    1d:ae:a2:d5:68:72:5a:18:25:de:3c:a9:6d:59:92:
                    72:d8:47:ae:bd:2b:a7:9d:12:11:7a:f7:d6:35:9b:
                    83:fd:d0:45:a6:2e:2a:18:d7:50:12:6d:d9:e7:bd:
                    67:30:52:78:16:95:b0:f8:6b:1a:16:09:d0:b3:52:
                    ea:40:5e:9c:a0:ad:63:c2:4e:04:f5:f5:46:70:68:
                    15:f3:04:1d:7d:64:c1:9f:62:89:3e:e3:c7:65:df:
                    dc:11:76:1b:73:0a:8b:c7:6b:38:90:88:ac:aa:8f:
                    ed:97:ad:28:2f:a5:d6:8e:cb:c1:a1:fa:dd:ff:9e:
                    99:be:3b:bc:bf:0a:63:dc:83:82:76:30:1d:77:de:
                    0d:81:45:60:e9:ce:53:3c:18:72:f4:6d:37:b8:b5:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:7F:5D:A0:26:11:F1:D7:E7:3B:A4:60:17:22:3C:81:24:B0:95
            X509v3 Authority Key Identifier:
                keyid:B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:48:13:5b:86:a2:cc:7f:18:67:ed:ea:18:ef:cb:bd:04:
         22:ad:5a:eb:5f:4f:a3:27:6a:69:79:02:0c:2c:5a:7c:2d:3e:
         b7:cd:d1:bc:25:91:63:18:e9:3a:ce:67:97:03:dc:97:8b:16:
         5c:2b:c3:1a:8d:f8:03:3c:2a:7f:f3:66:7f:e2:0f:6c:ad:87:
         f5:1d:59:fe:8e:8b:e9:dc:bb:a1:3b:f6:01:dd:eb:90:66:0d:
         74:d5:13:0c:43:3f:f3:34:29:39:8b:12:cf:94:13:db:63:f0:
         29:ac:6b:9c:e2:d6:44:18:cd:16:ee:b4:6e:f3:49:a2:88:db:
         9b:6d:40:5f:25:15:38:d7:50:9a:d9:6b:e4:da:bf:33:d6:38:
         09:da:f1:dc:dc:79:9b:aa:21:58:eb:7f:dc:d8:95:e8:fe:94:
         6c:ad:9c:19:4a:70:ab:32:58:58:22:84:b2:f2:b3:38:be:89:
         cb:6f:b0:b2:35:31:d3:c5:02:f8:30:cb:24:6f:7d:76:a0:bc:
         e3:18:21:86:61:cf:64:70:ff:f2:9a:77:9c:cb:eb:73:b2:c6:
         81:2a:8e:88:5e:45:5c:af:fe:3e:00:56:46:a7:bc:fa:94:f2:
         6d:c5:41:30:8f:93:44:52:b6:3a:e2:c8:e7:e0:e1:2f:d6:83:
         bd:bc:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----