Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft
File:                     Rv-nlEDFF-3brO06pg5fvL3GUC4.mft (raw, json)
Hash identifier:          0gGZrcqzu8Pv5eJb3vt641GPo5JY8x0Fl/qtJKu4YPA=
Subject key identifier:   28:2A:8F:B9:79:49:06:49:AD:3D:39:45:8C:C6:9E:7A:DD:16:B7:A7
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Certificate issuer:       /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial:       019004D0A1E10A472C6524B79376B949B6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft
Manifest number:          11BD
Signing time:             Tue 11 Jun 2024 01:01:40 +0000
Manifest this update:     Tue 11 Jun 2024 01:01:40 +0000
Manifest next update:     Wed 12 Jun 2024 01:01:40 +0000
Files and hashes:         1: FTocBAKR9rZ8eGvJRXnUQniKyzg.roa (hash: 4YM4aETz9NdlD+M0h7DzkMhTN0X7MVJY7wPySoWXxRA=)
                          2: Rv-nlEDFF-3brO06pg5fvL3GUC4.crl (hash: QXSjrgLuygzGOG/dQDhwYgVVdgvFLIY665aMvIZAejU=)
                          3: VbKwOcc__FSMY3LhU1V4CmN-SFA.roa (hash: Teavwop/B+r6P4hh6hf4aRceqi+hc8bCtw0OcZmFFaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:04:d0:a1:e1:0a:47:2c:65:24:b7:93:76:b9:49:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
        Validity
            Not Before: Jun 11 01:01:40 2024 GMT
            Not After : Jun 12 01:01:40 2024 GMT
        Subject: CN=282a8fb979490649ad3d39458cc69e7add16b7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:f8:74:55:33:4a:c9:68:b2:86:33:a7:1b:
                    a3:15:74:c6:28:60:f0:c7:49:a7:80:e7:cf:ed:e1:
                    c1:fc:da:d0:dd:08:f1:fc:69:57:b8:57:70:02:17:
                    66:25:36:77:c0:b4:73:8a:e5:03:78:84:75:83:40:
                    e3:66:f2:51:95:b7:cf:e2:89:2c:85:f9:65:a3:63:
                    59:2c:16:98:c4:5b:12:85:06:a7:30:39:d1:2c:b7:
                    20:7e:d4:fd:ac:9b:50:ae:fe:1e:1c:f1:6e:a1:a4:
                    7f:75:d6:62:85:87:41:36:90:ec:27:9b:33:a7:57:
                    be:13:e8:32:d4:55:d3:ba:e2:a8:59:31:c3:ee:60:
                    a0:6e:b0:76:a8:45:71:57:70:ed:de:ae:02:49:68:
                    96:c2:68:92:fb:ec:2e:34:7e:e0:d4:14:50:c7:db:
                    a6:9c:4b:cc:ec:24:fd:a9:46:96:5d:6c:5b:19:75:
                    b1:1e:9c:8b:6a:54:7e:c9:b3:fd:38:be:88:b7:e2:
                    a8:f2:e9:08:1f:62:fb:db:e2:c4:1a:e7:0f:14:c0:
                    42:d6:57:6b:cc:db:a9:d8:61:d1:92:3a:ef:94:98:
                    8d:40:98:c4:1d:25:5f:80:d5:f2:37:de:66:72:9a:
                    c6:9f:33:24:49:4a:cd:34:a7:e0:de:ba:07:60:ed:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2A:8F:B9:79:49:06:49:AD:3D:39:45:8C:C6:9E:7A:DD:16:B7:A7
            X509v3 Authority Key Identifier:
                keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:a8:9b:7d:d1:8c:3d:79:40:99:71:a4:e6:9b:43:ce:ca:
         43:29:e3:96:3d:6a:ee:9d:14:17:3f:9f:bd:f2:dd:47:d2:85:
         f6:0b:7c:bc:cb:00:04:af:92:4b:be:98:e3:9e:d6:31:94:a3:
         3a:f2:e3:c1:94:1e:4e:84:fc:cf:9a:da:72:cb:4f:06:f5:2e:
         fc:8d:0c:5c:c6:16:35:15:c4:b1:38:80:14:39:92:48:b8:c5:
         49:47:48:dd:6c:f1:6c:08:6b:28:f9:34:17:66:6f:45:67:2e:
         86:0c:53:30:62:eb:bf:7d:8e:7b:3d:d3:5a:08:bb:a3:2e:a9:
         98:27:53:97:5f:ff:b8:4b:02:26:c1:d9:b2:38:42:5d:28:8d:
         8a:e4:10:5e:af:4d:ae:ab:73:c3:75:3c:ac:ef:fc:f5:5c:6a:
         96:fc:0c:b8:18:4b:77:0b:e6:8f:8d:25:8b:2a:c0:30:fb:9f:
         2d:62:5c:7f:90:16:f5:94:9e:d2:7e:c7:80:2e:b3:d4:43:e3:
         0f:6e:a9:44:1e:c6:7c:6f:c4:90:9d:4a:2c:09:98:0b:05:9f:
         7c:45:64:5c:39:52:95:11:ac:93:53:d6:df:28:2f:56:78:fe:
         70:92:f2:d6:cc:15:72:de:db:10:f2:92:c0:c9:07:18:20:d4:
         ca:0f:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----