Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft
File:                     mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft (raw, json)
Hash identifier:          tUjDYCAsg76VEkQ4VyBojEI8edkTJLL7wmA0utc6QZM=
Subject key identifier:   7A:E6:3E:7A:94:A5:74:A6:5E:22:74:0D:A9:32:92:49:FA:16:E3:1D
Authority key identifier: 99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA
Certificate issuer:       /CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
Certificate serial:       018E750EFECD0ACC65C82C04B41257FE29CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft
Manifest number:          02AC
Signing time:             Mon 25 Mar 2024 10:01:40 +0000
Manifest this update:     Mon 25 Mar 2024 10:01:40 +0000
Manifest next update:     Tue 26 Mar 2024 10:01:40 +0000
Files and hashes:         1: IhUFYPSCw5XleWK7wmLZ1QR42zM.roa (hash: zK6DGK5wTxfbB9rE474le4/Y/1usjGV35sogv+qjOMU=)
                          2: mVnOTq5ftlkrnkLhQzgYtqhmTKo.crl (hash: 3pWxB0eeW6Ah8Z1Df7xDB/9xcJLY0JAx0uITxVtf27o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:75:0e:fe:cd:0a:cc:65:c8:2c:04:b4:12:57:fe:29:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
        Validity
            Not Before: Mar 25 10:01:40 2024 GMT
            Not After : Mar 26 10:01:40 2024 GMT
        Subject: CN=7ae63e7a94a574a65e22740da9329249fa16e31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:79:12:80:1b:b4:5f:fc:9b:d7:97:1c:a4:
                    17:c6:e5:31:df:16:27:77:82:df:5d:27:80:98:67:
                    ca:35:fb:2d:d1:cf:7e:5e:7f:8f:9b:f3:a1:48:d2:
                    94:5e:d4:a6:47:92:5d:4c:ca:ae:50:74:b4:66:09:
                    30:6d:fc:9c:5a:3c:6d:48:5b:94:05:9d:aa:08:2b:
                    b2:0b:ba:0f:26:aa:43:ec:58:3c:13:ed:d1:52:4d:
                    5a:72:45:d7:f8:1a:ea:04:1b:f3:37:f3:eb:0d:ce:
                    46:f4:86:b8:dc:a1:a8:30:59:bc:ff:4b:ec:1f:80:
                    80:8a:68:db:6f:d1:61:b6:d8:f2:3e:97:85:b1:a9:
                    a7:4c:a1:2c:92:c1:c6:3e:5b:bb:ff:d6:f0:e5:f2:
                    c6:26:6b:9a:ff:c0:6f:34:23:78:bd:7a:e6:7e:64:
                    35:77:6d:53:74:80:c6:a2:1b:53:9a:25:05:e5:b5:
                    a3:40:fa:f4:a5:bd:e9:54:e3:86:a0:09:c2:01:11:
                    9d:d3:99:14:af:d0:9d:b5:f1:d5:6c:7f:0c:60:8b:
                    5b:10:32:3f:7e:f3:17:a4:e7:e4:38:9d:b9:91:94:
                    78:fd:d1:55:53:c0:4d:b8:44:13:9f:4f:49:53:79:
                    47:e0:d1:87:83:00:88:31:fe:92:68:cf:d5:fa:db:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:3E:7A:94:A5:74:A6:5E:22:74:0D:A9:32:92:49:FA:16:E3:1D
            X509v3 Authority Key Identifier:
                keyid:99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:6c:a1:bf:3a:75:eb:80:05:dc:f7:12:a4:e1:79:7d:76:
         69:3e:ae:fa:4b:93:8c:d4:5c:61:84:83:34:50:ca:df:e0:3d:
         c2:95:d9:21:58:44:7d:89:10:ca:70:75:3d:d0:2d:bd:b4:d0:
         29:fe:e0:83:f8:20:5f:df:97:c0:49:39:7c:2e:de:d7:2d:ae:
         93:23:df:25:c7:6d:96:16:b0:fa:0b:10:31:28:76:8e:f7:f6:
         63:4f:24:71:60:f0:b6:92:87:fc:ac:3a:99:ea:b3:0a:fc:1d:
         83:a0:f9:60:68:ef:ad:1a:68:5b:c2:5f:19:bf:60:8d:6e:2f:
         3e:4b:6f:e3:d4:34:60:5d:4f:61:3b:17:22:0a:c7:e9:8b:fb:
         e2:20:4f:e4:04:bc:f8:a2:af:6e:bc:68:77:41:34:e8:7a:59:
         e7:6b:49:78:c1:99:ef:11:17:3c:53:b7:11:d2:f2:b1:99:50:
         59:5c:42:6f:33:d9:7a:88:27:50:cb:05:0f:af:9e:9a:60:45:
         d1:ef:45:5f:5f:b9:30:74:04:07:fa:9d:a8:74:60:66:aa:34:
         95:7d:80:02:03:d9:63:37:f5:17:d8:4b:a4:1d:15:ac:23:0e:
         1a:de:66:3d:c6:30:20:32:54:13:10:85:55:0b:9e:5d:0f:8d:
         27:f5:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----