Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft
File:                     JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft (raw, json)
Hash identifier:          2hGW4tdIa0Cqn2+lvXMkn9ug4O9RmHJ9duaDVsBdPt4=
Subject key identifier:   07:A7:54:71:47:BF:58:76:CE:4C:BB:92:86:85:ED:E9:C2:74:43:58
Authority key identifier: 26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D
Certificate issuer:       /CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
Certificate serial:       018A871FA5A4647BF814E434051DB9A8CF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft
Manifest number:          07D3
Signing time:             Tue 12 Sep 2023 02:01:52 +0000
Manifest this update:     Tue 12 Sep 2023 02:01:52 +0000
Manifest next update:     Wed 13 Sep 2023 02:01:52 +0000
Files and hashes:         1: JuzYNI6YKNBDwhWCosUVi_TYlQ0.crl (hash: 9YTsIKhu5TKehNL7ePEPfJwT06pUfqM5tpKQ5mFKO6o=)
                          2: OV7ipaqS2TPDtBPLYVapn4cSrjA.roa (hash: pMoPQzloBqL5bg/yOmYxHW30oRarqU0hBtGeQZejrNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:1f:a5:a4:64:7b:f8:14:e4:34:05:1d:b9:a8:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
        Validity
            Not Before: Sep 12 02:01:52 2023 GMT
            Not After : Sep 13 02:01:52 2023 GMT
        Subject: CN=07a7547147bf5876ce4cbb928685ede9c2744358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:b9:8d:75:ec:05:75:6a:4b:ad:c6:3b:ac:
                    cc:8b:3d:de:9c:fa:10:9a:e1:c0:4f:8d:de:13:39:
                    8e:36:a7:69:df:a0:1f:73:5d:f8:f8:ab:cd:70:03:
                    cb:80:e1:77:0e:26:2b:61:b1:48:3b:c7:f7:61:23:
                    7d:91:c4:e8:08:ae:ab:a6:84:69:58:2c:b2:d0:1e:
                    ab:c1:2b:9d:4e:52:49:c2:31:a8:7b:df:51:10:75:
                    05:76:aa:21:80:80:58:f5:50:f3:13:1a:e2:c0:42:
                    da:f9:bb:94:54:10:02:ec:b6:2c:e7:2b:0d:73:65:
                    e5:a1:25:0d:0f:b7:81:ed:90:ae:90:db:66:de:d6:
                    bd:de:6a:65:ca:97:6a:ce:31:26:78:0a:aa:f6:14:
                    d2:5b:06:0e:73:24:a3:9a:30:87:25:69:14:fe:1f:
                    ee:3c:bd:30:3d:66:87:9d:47:40:f3:11:81:d1:e7:
                    f1:b0:7b:22:ec:a0:fd:d0:79:ae:3f:97:4b:ad:9c:
                    3c:e9:6c:1c:3b:6e:ca:d1:06:88:04:c9:51:e0:12:
                    88:19:30:d4:5c:f7:1c:84:07:f8:1f:15:56:52:3e:
                    77:61:42:30:69:04:14:4c:cc:d3:ee:5e:95:05:2f:
                    c4:73:07:de:c6:54:c2:e1:01:47:cb:15:81:96:97:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:54:71:47:BF:58:76:CE:4C:BB:92:86:85:ED:E9:C2:74:43:58
            X509v3 Authority Key Identifier:
                keyid:26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:89:01:1c:51:8d:d0:46:b8:32:11:f1:15:2f:69:d4:0d:71:
         84:df:44:d1:ba:63:2d:de:fe:b7:5d:ac:2a:2c:b8:c4:3f:9d:
         07:b4:7a:f6:7e:c3:4a:19:da:28:e8:73:e4:17:33:bc:4c:59:
         41:cb:5f:02:b5:7a:16:54:a6:94:26:65:5f:55:5d:6f:75:36:
         51:43:96:e5:48:08:03:98:08:71:a6:bb:b2:01:75:ac:40:4d:
         cb:b8:d2:37:6e:2c:8d:68:4f:16:1e:ae:7c:4d:e3:28:7a:d3:
         68:32:e6:55:bf:79:4d:9a:fa:36:7b:df:70:1b:90:aa:3a:5d:
         c2:1f:f7:bf:a7:0b:b9:55:bb:0b:80:f7:68:88:e6:68:68:01:
         5c:52:82:96:35:ce:e2:90:e1:2b:45:cf:2a:9c:19:db:6f:32:
         4c:8a:39:04:c7:24:17:c6:62:67:bb:aa:e7:dc:f5:f3:66:e6:
         6f:45:54:2e:05:12:56:c2:ba:7a:00:e3:ca:a9:c6:d8:9d:8c:
         ba:8d:a8:92:67:82:ee:a6:a8:e8:ab:f5:ea:03:2f:70:be:a1:
         95:bb:ac:58:29:20:2c:0c:a1:48:0a:d2:71:bb:86:67:b0:67:
         0d:93:23:70:11:78:1c:c9:0d:07:57:97:6c:cb:bd:61:00:7b:
         63:20:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----