Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.mft
File:                     2DTtL54s70cBAh51_0VBZP7cfFE.mft (raw, json)
Hash identifier:          hp0mTzTEykWIa3WpcQ71wZ8VH7AO35jHVuzvCtssCqA=
Subject key identifier:   FF:76:20:45:9E:7E:D2:12:31:0D:95:8B:32:F0:CF:44:14:43:74:5B
Authority key identifier: D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
Certificate issuer:       /CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Certificate serial:       018F72E69744F4F08868932CA2A1D6EDF474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.mft
Manifest number:          09CF
Signing time:             Mon 13 May 2024 17:01:05 +0000
Manifest this update:     Mon 13 May 2024 17:01:05 +0000
Manifest next update:     Tue 14 May 2024 17:01:05 +0000
Files and hashes:         1: 2DTtL54s70cBAh51_0VBZP7cfFE.crl (hash: Yw3u/ybvV1VGFIstYUkiLbepP9l1A5UA1lUTw7OSruY=)
                          2: 2nPpzAxKBEn57Sndexy-wXpc4H4.roa (hash: 1euZi1zjNsk0T/ChvSNHQz6t1W4qTlZHAVH5bzlpjtg=)
                          3: aCQTMqzarfM8hs2iwhCYcoYLH6I.roa (hash: X/Ape6DmHRL9DX7gGO2attPHRFdrOV2hc29kbYvUhZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:72:e6:97:44:f4:f0:88:68:93:2c:a2:a1:d6:ed:f4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
        Validity
            Not Before: May 13 17:01:05 2024 GMT
            Not After : May 14 17:01:05 2024 GMT
        Subject: CN=ff7620459e7ed212310d958b32f0cf441443745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:37:52:b3:a1:4a:33:19:9e:f7:d7:df:de:
                    f6:b4:31:b0:8a:da:41:ff:b6:1d:f0:4f:aa:d8:d2:
                    21:7d:36:ef:8e:df:22:f3:91:8b:b3:1d:ea:b1:9b:
                    46:b0:39:04:ed:20:c5:2e:e1:28:ff:9f:e2:fe:62:
                    90:07:be:6b:0a:26:0c:23:01:9b:46:ae:54:cd:eb:
                    55:41:1c:e6:d9:2d:a4:21:fa:94:b8:5b:4b:a3:ff:
                    f4:9d:a7:92:38:84:70:68:7c:9d:5f:91:86:e9:0b:
                    aa:1e:5f:c6:80:59:0b:a4:0e:da:5f:a2:85:60:d1:
                    b6:11:47:c7:af:83:09:ca:43:3a:7a:51:bb:9e:d5:
                    3c:8f:5c:43:73:7d:5c:3b:08:bd:8c:9b:01:de:0a:
                    da:b9:37:cb:89:6a:fb:af:6d:6e:85:df:8d:dd:41:
                    38:3e:61:84:df:f7:23:1a:59:8c:9d:2a:0a:13:af:
                    6e:7b:b4:4a:6b:c6:af:1b:31:d8:ec:86:b6:0e:43:
                    79:34:79:a4:66:2a:03:cd:41:6c:81:71:4e:35:91:
                    9f:0c:6e:27:af:47:64:75:24:5e:51:bc:3c:25:e4:
                    9c:3c:ec:39:aa:5b:ad:23:c3:50:f2:8b:a4:5a:38:
                    78:ac:e4:de:1d:71:dc:53:6b:38:02:d6:eb:47:63:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:20:45:9E:7E:D2:12:31:0D:95:8B:32:F0:CF:44:14:43:74:5B
            X509v3 Authority Key Identifier:
                keyid:D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:84:18:53:22:01:85:a3:57:ee:7f:bc:7e:29:1b:97:1b:05:
         d1:d4:af:d9:ac:f8:e0:1a:0b:56:df:0a:dc:b2:a6:d8:6b:be:
         87:a3:80:8d:c5:55:ea:dd:4f:70:02:36:ad:87:04:1f:11:7d:
         3b:d7:15:04:52:8b:e7:88:4c:76:59:ae:e2:8a:09:5a:43:c8:
         fc:8c:98:5e:42:67:9b:e6:2d:87:23:8e:02:c0:10:c7:bf:e5:
         8f:a1:ce:66:ee:66:87:77:70:6d:f1:9a:48:10:9d:16:06:f4:
         05:12:3e:0c:75:bb:1b:f6:cd:53:8f:8c:74:42:89:39:04:33:
         e5:1c:08:99:03:07:a7:8b:90:9b:6f:1e:20:ea:95:1c:f3:39:
         59:f1:d9:f5:e2:97:de:f1:2a:9e:ce:ed:4c:6c:e3:80:2b:2d:
         be:e5:70:3f:36:66:a3:6b:20:00:89:4a:40:7a:83:de:c8:64:
         7e:1c:0b:f1:2b:d4:e1:00:15:4b:ad:49:13:c1:66:2f:56:a3:
         8f:2f:3c:08:0f:ab:33:be:99:df:29:04:e8:0c:53:6f:9b:c2:
         71:5b:ab:24:a9:df:24:f3:9e:15:45:cd:0e:06:57:66:1d:cd:
         fa:7a:cc:5d:40:a8:7d:ec:36:b4:63:b8:1a:f8:8f:f3:d5:3c:
         9c:f9:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----