Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.mft
File:                     iPZYCiKcz9U2nhniUq3LcozazTk.mft (raw, json)
Hash identifier:          UQndjsChNVeF7IS5sc5cskMtCDH5OzmtiXYxCHeYNWs=
Subject key identifier:   FF:06:7A:E1:00:46:85:7B:98:38:78:DE:6E:05:EA:80:74:C9:29:1A
Authority key identifier: 88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
Certificate issuer:       /CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Certificate serial:       018E5101DC56C2A83F8F9EB94CF44D91FA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.mft
Manifest number:          0D09
Signing time:             Mon 18 Mar 2024 10:01:00 +0000
Manifest this update:     Mon 18 Mar 2024 10:01:00 +0000
Manifest next update:     Tue 19 Mar 2024 10:01:00 +0000
Files and hashes:         1: 8yrF7Hog9Igpbzw_NHIf6d0x-DU.roa (hash: ua0NVCmF0/ti3axqtXkXmpWIsErR9h+PSJPsBfsGr1I=)
                          2: gFD2c0Fu79cGyK9boLLY9C9hCIo.roa (hash: LkXuqDqZ/+ja6UBxuF3NuWk1FsjnlKqbEYJBKlyYGlg=)
                          3: iPZYCiKcz9U2nhniUq3LcozazTk.crl (hash: 2XIUU/WAnJCv01vkP6MXLtCPLcPK/DD9JAQGNRjRpo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:51:01:dc:56:c2:a8:3f:8f:9e:b9:4c:f4:4d:91:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f6580a229ccfd5369e19e252adcb728cdacd39
        Validity
            Not Before: Mar 18 10:01:00 2024 GMT
            Not After : Mar 19 10:01:00 2024 GMT
        Subject: CN=ff067ae10046857b983878de6e05ea8074c9291a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:1b:30:e7:93:4b:81:b8:77:12:c8:a4:6c:
                    10:7a:e9:02:41:f9:9a:4e:13:e9:8b:df:50:59:bc:
                    98:99:07:4b:c0:af:8f:2e:f5:0e:9a:3b:77:42:1c:
                    12:ea:f4:95:06:97:e6:8c:f1:6a:85:98:a3:28:0b:
                    cc:65:99:ea:e5:ef:3b:6f:dc:54:ba:84:de:2f:58:
                    f8:8e:09:bb:13:6d:0e:c5:2b:6a:eb:49:0f:ba:a9:
                    44:83:63:8d:f9:59:7d:5c:dd:f9:37:b0:77:24:5a:
                    2a:a8:7f:0b:27:4a:44:bb:84:65:db:38:a4:82:bf:
                    b2:b5:b4:51:d6:1a:6e:4f:a5:b6:09:c8:6c:4d:25:
                    b7:f0:c5:33:35:e8:24:1a:82:99:15:c8:d4:fd:8f:
                    69:2d:72:fc:ca:e6:ef:a9:bb:e5:37:06:13:55:59:
                    c1:db:f2:8f:cc:a1:53:68:51:aa:df:ca:3b:8c:dc:
                    9e:f9:01:fa:67:86:14:7f:cd:e5:3b:60:c1:40:64:
                    02:8e:73:5d:ff:10:0a:b6:3d:03:39:a7:b5:c3:03:
                    16:41:02:b1:e0:9e:b3:5c:a6:de:4b:65:88:12:18:
                    26:27:fd:d4:d7:3c:18:ad:bf:69:29:3f:51:84:ef:
                    c7:8e:5a:b6:c4:13:2d:9e:ba:e2:ce:75:19:bd:18:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:06:7A:E1:00:46:85:7B:98:38:78:DE:6E:05:EA:80:74:C9:29:1A
            X509v3 Authority Key Identifier:
                keyid:88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:24:22:61:6c:a2:6b:0b:57:21:7c:af:4c:3d:4c:84:76:63:
         23:e2:cf:8d:0b:e2:04:74:24:bc:b1:88:b7:77:a4:ad:2b:f8:
         d0:48:6e:07:92:54:39:e7:3e:5c:b6:f7:a2:ef:4d:d0:89:95:
         27:5f:c3:07:94:a0:ce:c5:de:e8:d1:02:d2:89:91:61:13:ad:
         8d:d2:85:f0:ce:ed:fc:0b:c7:f8:a5:8a:2e:5a:95:c8:0d:fe:
         27:b6:dc:a0:7b:6e:90:fc:20:18:ed:dc:14:fe:c1:ad:22:85:
         36:16:7a:03:cb:88:dc:41:e6:2b:9b:51:42:8b:b6:f6:de:3f:
         9d:92:96:cd:0b:13:17:c4:aa:3e:a7:7b:5f:80:03:df:61:96:
         4a:62:c7:c7:cd:12:61:ec:40:c5:1c:62:2d:6a:0f:61:7a:8a:
         63:aa:d5:a6:0f:03:51:81:79:c9:aa:48:96:81:84:e6:3e:3d:
         e6:36:6d:0a:46:b7:a9:a8:e1:4a:fa:ae:31:44:fb:e5:75:47:
         a3:1f:72:38:27:c4:8a:21:af:46:0b:c1:71:c0:ff:f9:5d:3c:
         d9:93:30:e5:53:bc:a9:08:af:07:51:dd:4f:61:13:62:7f:cd:
         9a:45:73:95:11:f9:5d:89:97:cd:b5:e3:65:33:f9:e2:56:cb:
         24:2b:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----