Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft
File:                     2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft (raw, json)
Hash identifier:          rtL6JJlD3pgz6HLSp5zIOapohCC7azFX/3TjowD2jl8=
Subject key identifier:   F3:CE:93:FB:64:CB:5B:DC:02:1D:DC:E1:24:7D:67:C0:EA:F7:E2:D1
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Certificate issuer:       /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial:       018CED741EF170B19DAD6E2AA9B9F5CB5D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft
Manifest number:          0813
Signing time:             Tue 09 Jan 2024 09:00:59 +0000
Manifest this update:     Tue 09 Jan 2024 09:00:59 +0000
Manifest next update:     Wed 10 Jan 2024 09:00:59 +0000
Files and hashes:         1: 2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl (hash: V2+h10gVQPNeKEGpQj/Tm8dlG07jNatVnUIOuad/FBg=)
                          2: 2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa (hash: KtmbyLSt1J8H0C1tS9aCCY/JAgir22Sq/UGUAsd6vfY=)
                          3: n9miYy3r2fx9ese6icBhxvueLio.roa (hash: o9MZXcfYtn/qpy03oSM3nxQBQG+ZAuueNKPOlG2/R74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:74:1e:f1:70:b1:9d:ad:6e:2a:a9:b9:f5:cb:5d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
        Validity
            Not Before: Jan  9 09:00:59 2024 GMT
            Not After : Jan 10 09:00:59 2024 GMT
        Subject: CN=f3ce93fb64cb5bdc021ddce1247d67c0eaf7e2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:b9:e9:91:ec:31:1c:0a:65:7b:08:6b:e9:
                    0f:3c:de:4c:cc:05:0a:81:2f:8a:a7:b4:88:97:2a:
                    cf:0d:4e:df:bb:f8:7b:0d:ea:a9:fe:b2:26:c8:60:
                    d8:9e:00:38:32:4e:88:90:85:c7:a2:fd:04:04:f1:
                    77:df:0a:9e:27:bc:5b:ee:dd:b7:42:6f:18:f2:b6:
                    cd:2d:a7:2c:72:f3:6f:c1:f3:7d:1e:2a:6d:52:16:
                    47:27:a9:b2:c0:0a:de:18:48:a4:77:d5:cc:ff:30:
                    bb:8b:3b:e5:66:4b:f5:d7:e9:9b:d3:2a:71:d7:28:
                    09:b2:29:dc:0e:01:04:06:2d:6d:a7:26:ab:be:9b:
                    77:62:2a:c8:7e:8d:e8:58:31:b6:e7:80:73:de:b5:
                    21:00:58:c2:bb:b5:c5:51:93:e8:94:b0:a6:fe:57:
                    f2:08:fb:ae:2a:c9:3b:e9:34:21:99:6a:0f:07:c8:
                    94:29:5a:76:68:d0:5d:d4:8e:3a:b0:27:2b:e2:24:
                    67:69:82:28:67:e8:d3:82:ee:9f:aa:89:fc:58:38:
                    b8:11:1c:da:a6:11:8b:95:6b:de:41:ed:f3:9f:9e:
                    77:03:1f:e2:80:ed:0f:4a:3c:e8:1b:0e:c8:bc:01:
                    6c:29:49:92:56:e6:1d:58:f0:a6:02:c2:d2:62:5e:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:93:FB:64:CB:5B:DC:02:1D:DC:E1:24:7D:67:C0:EA:F7:E2:D1
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:39:de:fe:c4:d6:11:e0:8e:dc:e6:5e:e3:ce:18:12:d6:02:
         62:4b:cf:4b:c3:3f:27:5c:f4:12:e8:8a:fe:da:09:4f:05:27:
         86:d0:71:e6:dc:a7:1e:92:f5:61:2c:24:7f:af:dd:e1:ac:33:
         b6:2b:dd:dd:0f:5e:74:fd:7f:ac:87:d4:b6:11:03:5e:dd:2c:
         22:a1:fb:54:49:18:93:1e:02:cf:52:62:8b:c2:e8:ff:4c:4a:
         87:7a:fa:6e:0c:89:38:b6:e2:33:76:44:54:5c:3b:3c:d2:59:
         7b:3b:b0:d7:03:84:28:13:a9:d4:b2:b0:ba:e4:55:35:57:50:
         e7:d3:d2:25:60:e9:48:f1:db:67:44:e4:23:92:e6:73:ae:40:
         5e:11:81:d5:8c:29:ee:4e:67:b9:fd:b1:8a:4e:80:d9:da:a3:
         d4:f5:be:1a:87:d7:6a:af:33:a0:a4:4c:1e:49:2f:10:01:a4:
         df:6c:8c:43:b5:45:1e:32:16:81:da:15:79:7e:cb:1e:3e:fa:
         66:c7:05:c5:b4:ed:cc:f6:12:57:42:2b:38:37:30:8b:2d:9d:
         b1:b2:d1:c8:06:41:c6:a8:69:63:51:cc:ea:91:42:77:1d:38:
         80:81:2c:1c:88:06:c4:08:7c:d6:50:3b:57:e2:b9:18:8b:6f:
         39:47:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----