Manifest

$ rpki-client -vvf rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
File:                     Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft (raw, json)
Hash identifier:          uCOmMPWpIaCU3/cc1GeAWdbnGkjycJXN6xQJFxYtK3E=
Subject key identifier:   CB:28:40:D6:3F:89:27:6E:F4:D7:D4:D1:EC:FC:C4:4C:FA:68:1A:69
Authority key identifier: 2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
Certificate issuer:       /CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Certificate serial:       018DCEF938DF4A596EE188C7FBCAF2AF11C6
Authority info access:    rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject info access:      rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
Manifest number:          1D1D
Signing time:             Thu 22 Feb 2024 04:00:49 +0000
Manifest this update:     Thu 22 Feb 2024 04:00:49 +0000
Manifest next update:     Fri 23 Feb 2024 04:00:49 +0000
Files and hashes:         1: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl (hash: PP3Z5lkmYytZOoM0rJcGDGpMj7BVjpknuWm46GRKN+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ce:f9:38:df:4a:59:6e:e1:88:c7:fb:ca:f2:af:11:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
        Validity
            Not Before: Feb 22 04:00:49 2024 GMT
            Not After : Feb 23 04:00:49 2024 GMT
        Subject: CN=cb2840d63f89276ef4d7d4d1ecfcc44cfa681a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:a2:16:31:2c:52:7d:d1:6f:8b:87:a6:7c:
                    1f:e7:ca:ca:2f:2d:87:6f:8e:0b:e5:07:bd:f2:86:
                    fa:b5:9d:dd:14:c8:2c:a1:b8:d3:29:3b:4c:4c:aa:
                    da:c0:a3:b9:2c:85:22:7f:92:55:5d:5b:0f:6f:31:
                    60:50:9f:46:2d:76:8b:18:24:51:00:a3:70:7b:aa:
                    3c:bb:92:50:a2:30:66:d8:de:04:f4:18:d0:19:0b:
                    23:16:2e:99:bf:d3:29:e0:9d:e3:f0:74:2e:60:de:
                    ab:26:00:6a:0e:46:66:4a:b7:4d:e5:b3:41:dc:26:
                    f4:69:a5:f5:c7:e7:08:db:3d:a7:e4:34:d0:a7:56:
                    b7:17:91:db:1f:58:2e:65:10:ce:03:33:bb:7e:1b:
                    e3:11:54:66:aa:61:d5:00:ba:a3:62:20:38:87:26:
                    c6:28:cd:d2:97:b7:63:a6:7a:8c:01:59:3b:df:fe:
                    68:68:16:31:78:e7:dc:fd:e1:1f:2c:3e:3a:40:dc:
                    b1:a2:d8:f7:18:66:6f:be:b4:c5:c7:8a:ea:b7:a3:
                    16:7b:2d:a7:82:24:93:c6:19:bc:d2:b1:30:be:c0:
                    45:37:09:6b:f5:12:da:b2:86:87:7e:75:c8:f1:61:
                    73:94:0c:d3:88:b0:fd:76:69:31:19:3c:88:33:5e:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:40:D6:3F:89:27:6E:F4:D7:D4:D1:EC:FC:C4:4C:FA:68:1A:69
            X509v3 Authority Key Identifier:
                keyid:2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:f5:8c:ec:f3:c9:ad:0c:65:1b:70:0d:90:23:68:03:d7:94:
         fb:33:0b:b7:b4:87:e6:19:ef:68:6b:7d:f9:50:a2:ca:db:c3:
         ad:13:5a:de:06:59:57:00:a6:d4:6a:5a:cb:20:6c:49:59:88:
         38:43:98:eb:da:95:42:c8:fe:2f:a2:9f:8e:84:20:8d:1f:74:
         16:32:35:a0:66:be:c2:e3:df:ee:5a:73:61:09:8e:5c:44:8f:
         09:17:61:40:80:03:fc:ad:e0:e1:49:a7:25:e7:18:92:c6:e8:
         e5:00:54:fc:d3:f8:fc:a0:0e:79:c4:01:56:9d:5a:0a:23:6e:
         4b:1c:5b:8f:c7:a9:48:cb:fa:fe:49:67:49:4e:6e:2e:52:37:
         37:d7:c4:5b:fb:69:cf:9f:92:29:92:2d:19:0c:45:74:7d:30:
         36:a3:42:3a:ce:c6:c4:b3:81:ac:65:14:d6:56:a4:5b:0b:ba:
         7f:a0:1a:b3:1c:93:4c:53:92:85:40:6e:02:5b:e7:33:ab:22:
         29:fb:bd:d4:9f:69:3d:ea:9a:31:a4:80:e3:ee:16:9a:48:b1:
         cc:a2:70:55:2f:53:4f:20:c1:1e:17:d0:52:1d:99:f2:81:39:
         14:a5:f8:58:7d:e6:b0:f9:f9:ab:c7:0c:99:1b:eb:1c:74:56:
         fe:b5:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----