Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.mft
File:                     yWwFhrBZvKbrcl1q3INESAwbA0E.mft (raw, json)
Hash identifier:          U4Jn4dmXGS7rNVJcqFUINS3jGe6XjQlg/pHp6ViemKQ=
Subject key identifier:   84:1A:24:28:91:E9:69:72:3D:CE:7F:E3:38:06:FC:BB:B7:FF:44:E0
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Certificate issuer:       /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial:       018F7A696625F9F04BAC64BC48CA86CD8B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.mft
Manifest number:          0907
Signing time:             Wed 15 May 2024 04:01:18 +0000
Manifest this update:     Wed 15 May 2024 04:01:18 +0000
Manifest next update:     Thu 16 May 2024 04:01:18 +0000
Files and hashes:         1: BSaYXcSa62RuJd4EDgQqdggNeOg.roa (hash: efE7jdAofeCDr84HmDkJQ8ehR3NGyof/MSZiYpW2bMY=)
                          2: yWwFhrBZvKbrcl1q3INESAwbA0E.crl (hash: JP3E/yoX+olAgRXxKBOYfY/mC1GKpZPgYUyfaAMLlac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7a:69:66:25:f9:f0:4b:ac:64:bc:48:ca:86:cd:8b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
        Validity
            Not Before: May 15 04:01:18 2024 GMT
            Not After : May 16 04:01:18 2024 GMT
        Subject: CN=841a242891e969723dce7fe33806fcbbb7ff44e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:5d:ba:e9:24:ef:83:b3:c1:9a:56:88:1d:
                    f9:ea:4a:d3:51:ca:0c:8b:19:77:22:00:63:97:e3:
                    fa:53:e8:26:b8:be:60:f5:33:0b:75:2c:17:f9:62:
                    bc:0d:f1:71:d0:a2:98:38:d7:b3:0f:ac:33:f7:f2:
                    5d:f9:a5:03:3c:75:75:3b:57:0a:5f:75:6e:0f:40:
                    bd:53:b9:d5:44:c7:cc:96:62:61:32:d8:08:5f:bb:
                    2a:e4:57:87:66:80:d8:e6:7d:69:26:30:36:2f:2c:
                    49:aa:28:de:6f:7d:f2:0c:38:93:64:0f:5a:19:5c:
                    72:01:b3:11:e6:ac:5c:16:2f:07:4a:de:e8:70:fa:
                    ce:db:af:fd:36:63:04:6c:9a:68:b7:d8:cc:e8:c6:
                    08:c3:12:f4:2f:ba:db:7e:e4:52:c3:f3:f5:d1:bb:
                    d8:03:ae:3b:c1:f1:a6:03:13:25:53:7e:5f:db:23:
                    9b:c9:e2:0e:05:45:85:a3:e0:4b:d4:d7:2f:f1:af:
                    f6:10:93:95:fc:db:73:8a:1a:4f:a4:72:47:66:a6:
                    97:26:b0:af:57:13:e6:da:a3:ef:9c:e2:3f:e9:51:
                    95:45:7b:03:24:a2:c9:d2:12:7b:17:a6:18:f9:7b:
                    81:8a:ea:cd:f7:6e:34:9b:05:86:b6:fc:1b:69:d5:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1A:24:28:91:E9:69:72:3D:CE:7F:E3:38:06:FC:BB:B7:FF:44:E0
            X509v3 Authority Key Identifier:
                keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:61:d6:f0:5b:e1:03:09:74:13:1a:3b:b7:a6:73:19:38:1a:
         e1:28:5e:61:ff:dd:c2:3f:cb:5a:80:4d:0b:82:af:1c:3e:aa:
         e5:5d:f1:ad:64:75:a0:cb:c4:6a:39:0f:67:aa:fe:7d:a5:84:
         fb:3a:cb:a1:64:68:29:c0:98:ed:57:17:84:76:45:26:61:88:
         09:f2:3d:5b:03:3c:1c:9e:77:91:ac:c7:ee:c3:d9:e9:b9:7a:
         36:f6:fd:b9:4a:49:ce:07:39:a8:23:af:0e:51:29:ff:39:e0:
         04:a3:be:0d:d9:73:11:31:e4:53:59:ca:ab:73:a1:a6:c6:9b:
         a5:59:d2:80:03:3e:60:85:3e:a5:25:bc:9b:5e:aa:1d:b2:5b:
         45:65:0b:fa:26:5d:fe:c1:1a:88:49:dd:9b:5e:59:fe:36:9e:
         1a:16:a5:f2:aa:0f:1e:7f:54:d5:3a:50:12:94:45:27:ed:0e:
         10:7c:b2:ab:4c:ae:90:bc:e9:74:aa:c2:c8:c8:ca:04:94:03:
         5a:94:59:4c:1d:32:04:04:99:41:e7:43:69:c1:ec:1a:00:e0:
         5d:96:fb:68:e3:fa:01:dc:6f:20:a4:02:bf:88:4e:1e:e5:92:
         15:1b:ac:25:69:cf:b1:90:e3:c7:64:56:23:b9:99:fa:63:40:
         63:5d:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----