Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/2WibQ2oqSfONSGD9TrcB55R7-WU.mft
File:                     2WibQ2oqSfONSGD9TrcB55R7-WU.mft (raw, json)
Hash identifier:          pnaOVVi/vORjSdodDaj71YcELU+UGrANbS5452O3NA8=
Subject key identifier:   00:63:52:A1:6C:A8:B2:B9:B8:50:B0:97:16:6A:95:02:71:3E:17:99
Authority key identifier: D9:68:9B:43:6A:2A:49:F3:8D:48:60:FD:4E:B7:01:E7:94:7B:F9:65
Certificate issuer:       /CN=d9689b436a2a49f38d4860fd4eb701e7947bf965
Certificate serial:       018B4204615E00AA664F7E14309F02855AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WibQ2oqSfONSGD9TrcB55R7-WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/2WibQ2oqSfONSGD9TrcB55R7-WU.mft
Manifest number:          0976
Signing time:             Wed 18 Oct 2023 09:01:05 +0000
Manifest this update:     Wed 18 Oct 2023 09:01:05 +0000
Manifest next update:     Thu 19 Oct 2023 09:01:05 +0000
Files and hashes:         1: 2WibQ2oqSfONSGD9TrcB55R7-WU.crl (hash: er/EfEwtCSL0lihneVeNvKdiVPi9BfAkMLqtfwqa3mU=)
                          2: cAQf2Mtdt1sfqppqHe9JpKw4lys.roa (hash: mucBSs8GLeyvPA+WEh5PcOzUvaIQpYvUAkw01Snyu3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:42:04:61:5e:00:aa:66:4f:7e:14:30:9f:02:85:5a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9689b436a2a49f38d4860fd4eb701e7947bf965
        Validity
            Not Before: Oct 18 09:01:05 2023 GMT
            Not After : Oct 19 09:01:05 2023 GMT
        Subject: CN=006352a16ca8b2b9b850b097166a9502713e1799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:4c:bb:bc:f9:d7:e7:7a:e1:b0:45:65:d6:
                    f2:b7:4f:d7:7d:c4:98:eb:03:80:05:c8:c6:35:77:
                    47:7c:fa:59:f1:83:50:b0:f1:b3:da:46:95:ec:af:
                    26:77:df:25:a7:1e:f8:8a:9c:20:d1:ae:aa:c8:37:
                    11:fa:39:f0:44:11:46:79:08:58:37:0d:a0:44:92:
                    56:e7:05:d1:87:d6:d7:c7:25:12:e0:58:2f:c6:ca:
                    a1:07:54:e2:37:62:2c:06:ed:47:91:e2:68:e1:7c:
                    99:54:96:c6:65:ca:22:94:94:bf:61:21:1d:dd:4c:
                    2c:ac:10:40:6a:b6:95:9c:1d:92:0d:c5:86:66:37:
                    9a:15:37:59:77:23:f0:a1:eb:5a:e8:43:5e:fd:8e:
                    8b:50:45:25:d6:a5:8d:8f:e7:4d:9b:53:b8:f0:22:
                    2a:87:3f:da:71:f0:45:9c:1d:5e:09:c5:10:9f:8d:
                    b0:dc:4d:80:2c:b4:97:82:f7:e3:d6:a5:b9:96:87:
                    41:ac:f2:74:cc:bb:8c:40:05:87:c4:83:1f:cc:b2:
                    28:1f:6c:e3:e0:ae:50:d6:85:ce:82:3c:76:30:fb:
                    c3:63:53:08:89:52:df:80:8c:fe:16:a7:20:45:90:
                    98:50:9d:f2:bb:cb:3d:8d:8e:cd:ea:84:df:15:45:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:63:52:A1:6C:A8:B2:B9:B8:50:B0:97:16:6A:95:02:71:3E:17:99
            X509v3 Authority Key Identifier:
                keyid:D9:68:9B:43:6A:2A:49:F3:8D:48:60:FD:4E:B7:01:E7:94:7B:F9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WibQ2oqSfONSGD9TrcB55R7-WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/2WibQ2oqSfONSGD9TrcB55R7-WU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/2WibQ2oqSfONSGD9TrcB55R7-WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:12:82:60:10:4a:42:a7:01:a0:03:b7:10:37:6d:68:7f:
         61:20:17:ce:98:13:d4:ac:6d:91:f8:95:46:d1:f3:5f:8a:63:
         98:a4:1d:20:b0:55:15:41:ff:d3:40:8c:72:1d:1d:f6:84:ea:
         f1:c0:9e:8b:04:d3:8f:65:3c:45:ad:1c:d3:e0:08:51:0c:a8:
         87:5c:fd:48:2b:fc:e8:af:1a:c5:09:13:4b:ae:36:67:c2:21:
         66:c9:e2:d9:99:ef:b5:f6:b3:a1:5b:0b:99:f0:31:ef:6e:c8:
         0f:5b:64:82:1d:79:5c:47:3e:8a:34:d7:3e:74:13:75:d7:51:
         5f:e1:25:d9:3d:73:20:db:47:62:3a:1f:1f:16:f0:29:c9:42:
         06:64:f1:9b:3e:8a:a0:3b:2e:db:6e:84:ae:b4:18:30:ac:d8:
         77:c6:6c:19:98:d3:b6:04:7d:61:a9:8f:31:b4:5d:99:a7:b7:
         34:d5:9c:1f:71:39:a9:95:11:7f:df:50:02:78:0e:11:b6:23:
         66:18:47:68:a5:2d:b2:bb:90:70:66:5b:9e:58:a6:1e:6a:60:
         ea:8c:2a:43:b5:4a:56:fa:cd:3b:4f:f0:dd:c5:8c:e4:f7:6a:
         a1:cf:f6:48:8c:e4:96:00:bb:39:54:f5:e0:47:2d:e6:e5:7c:
         80:a3:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----