Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
File:                     2BR0KKIohTG4dzIOEQiSonXMEmM.mft (raw, json)
Hash identifier:          DuEaSK1V4+lUAqImn8oHULQn4g65LCrtlwI30hV4asQ=
Subject key identifier:   F9:F7:89:29:51:9E:E1:48:B6:77:06:73:07:C5:EB:2E:90:71:36:4D
Authority key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Certificate issuer:       /CN=d8147428a2288531b877320e110892a275cc1263
Certificate serial:       018CED0651311C3B827375A79F1168874141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
Manifest number:          08BB
Signing time:             Tue 09 Jan 2024 07:01:03 +0000
Manifest this update:     Tue 09 Jan 2024 07:01:03 +0000
Manifest next update:     Wed 10 Jan 2024 07:01:03 +0000
Files and hashes:         1: 2BR0KKIohTG4dzIOEQiSonXMEmM.crl (hash: XxaRGUpMdHWKNYYvanTfqtMpBV3Ohc0lR5i50GsiYyM=)
                          2: VCKXNHisDtLslgTrjODk0lGKL8g.roa (hash: +fR0fjSeFqmZS+myTrzkbBunCVvRSxSIc6xW9HBtpaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:06:51:31:1c:3b:82:73:75:a7:9f:11:68:87:41:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8147428a2288531b877320e110892a275cc1263
        Validity
            Not Before: Jan  9 07:01:03 2024 GMT
            Not After : Jan 10 07:01:03 2024 GMT
        Subject: CN=f9f78929519ee148b677067307c5eb2e9071364d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c4:57:74:02:01:4c:ac:70:f6:3c:17:1a:ec:
                    4c:57:ec:00:de:66:41:37:bb:e4:b5:ba:cd:a5:13:
                    5e:46:6f:2c:a5:cf:15:f9:96:53:ec:5d:23:47:d0:
                    ed:c7:34:c1:e9:b0:c2:4e:75:a2:ee:a4:4d:3f:eb:
                    31:19:27:b1:74:b0:50:f2:27:83:c5:0f:a6:5d:47:
                    f1:b0:0d:35:99:7a:04:47:28:9f:91:68:fd:b5:c4:
                    38:f1:d1:62:6e:b8:9e:d9:0d:47:07:56:0a:8d:27:
                    c9:c9:4a:17:4c:84:58:af:13:f7:6f:75:6e:47:c9:
                    bf:60:35:e6:c2:b4:62:d4:8e:cc:71:ee:70:97:65:
                    ed:4f:3c:4f:25:fa:2d:1a:65:02:89:2a:49:64:04:
                    2b:82:e8:3f:51:39:7f:38:1e:03:f6:16:c3:14:96:
                    c7:21:7d:b6:44:6b:4d:4d:fa:9b:1f:87:09:c9:1c:
                    b0:c0:33:c8:d4:ed:ad:d6:ce:e2:51:c4:94:0e:e5:
                    55:9b:9c:0b:67:94:15:ac:43:f1:f4:de:b2:93:ec:
                    5f:ce:cc:36:99:0c:0a:2f:dd:b9:3e:86:fb:1f:13:
                    66:c9:8e:ca:d5:5f:39:0c:10:ed:64:93:0e:f2:b2:
                    71:a0:96:e0:91:68:69:43:0d:e0:94:ab:53:87:ef:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:89:29:51:9E:E1:48:B6:77:06:73:07:C5:EB:2E:90:71:36:4D
            X509v3 Authority Key Identifier:
                keyid:D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:9d:ec:f9:24:ad:23:d2:5f:e0:99:90:2d:42:cf:56:ab:
         4c:3a:aa:41:b5:9d:27:3c:2c:a1:81:57:f8:a4:31:3a:5e:00:
         52:ed:68:53:e3:32:29:0b:c8:3d:9b:67:c8:87:a3:bf:87:b3:
         60:fe:57:1c:3d:23:37:59:de:9c:8f:db:99:90:fb:23:73:0f:
         fb:e3:97:1c:b5:ff:f7:ae:ee:06:39:b5:47:4e:e8:5a:54:4b:
         7c:44:71:92:56:54:2a:39:49:25:68:b6:56:36:d0:13:52:47:
         b5:8c:c6:69:6b:25:2e:9f:fe:98:5d:19:4d:95:d5:2b:13:f5:
         64:e0:db:98:61:6c:a7:b3:82:6c:1c:79:cb:c6:ec:e8:5a:b6:
         28:7c:ca:68:81:36:e8:68:6f:19:9f:ea:f1:64:11:27:6b:e2:
         92:61:a0:a8:ef:be:b8:59:b4:fb:c0:40:27:0b:c2:3b:34:80:
         5d:70:c9:cc:02:01:6e:e5:f5:26:ac:5c:79:03:78:72:7f:1b:
         c6:b3:08:8b:f9:5e:74:52:0f:4d:aa:fe:a0:43:05:90:3d:78:
         60:b1:bd:83:da:bc:94:fd:5a:fc:6a:1f:3e:39:cd:99:c0:1f:
         79:26:25:21:74:8e:f8:99:e3:05:d4:44:cb:ee:7c:a6:eb:5d:
         d5:9c:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----