Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
File:                     YzvKDtH5tgvA7UIwItA4nim2zdQ.mft (raw, json)
Hash identifier:          kKD32fBC3n3mwFNZ1mxbLCjDL2fblnuBygsxV+FsOvs=
Subject key identifier:   F5:09:A0:09:6A:EC:63:04:BC:A3:63:8E:0E:6E:21:3C:A0:8A:76:A5
Authority key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Certificate issuer:       /CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Certificate serial:       01909A289466B8FCD4FBC9D5556B02178A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
Manifest number:          05FA
Signing time:             Wed 10 Jul 2024 01:01:08 +0000
Manifest this update:     Wed 10 Jul 2024 01:01:08 +0000
Manifest next update:     Thu 11 Jul 2024 01:01:08 +0000
Files and hashes:         1: JuzJv2whUaGWSIt2wcajXmUD5zI.roa (hash: RQ8bEyAdCH9JfvTAquhnEneX+ZhdPiNYVLtxPsIVxvQ=)
                          2: MB63xwwlxwESq4ySPkFb_7OoD0I.roa (hash: FEYpr6pwu6U7Xto6H6DCQNUui65oFbBSxyJ2/8NS3bY=)
                          3: YzvKDtH5tgvA7UIwItA4nim2zdQ.crl (hash: R2bae61uq/5jIOhH0KamiUba6KJfhiFd/UoJvQjxhZE=)
                          4: wMRua81DP0XDP8KptHbiHx1Ay-w.roa (hash: TfJKVEyaCPziNkBiGr7HwkTnXLN9sJXXH0nQfXyGVY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:28:94:66:b8:fc:d4:fb:c9:d5:55:6b:02:17:8a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
        Validity
            Not Before: Jul 10 01:01:08 2024 GMT
            Not After : Jul 11 01:01:08 2024 GMT
        Subject: CN=f509a0096aec6304bca3638e0e6e213ca08a76a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:78:9c:b0:c7:84:b1:ae:bf:46:5e:9e:0c:
                    44:58:e3:c4:b8:e7:d2:13:90:79:a2:be:09:57:48:
                    6c:82:23:72:b7:17:40:11:07:e6:a1:3d:61:a6:0a:
                    84:2a:e5:d6:97:9a:41:0f:54:d9:37:a9:f2:ea:31:
                    8c:4a:76:ac:94:d4:8c:71:b2:00:d4:6e:2d:c9:d0:
                    9c:25:b1:30:b7:84:fc:0c:19:d7:b8:cb:0d:94:a1:
                    98:47:d1:df:4f:22:92:4a:05:c3:04:9a:4c:25:8e:
                    74:09:0d:6e:ab:e0:14:51:6c:7b:b5:b5:63:a6:21:
                    4c:81:a7:db:9b:02:fd:e8:ce:6c:0d:bb:56:4e:d8:
                    eb:3b:88:db:b8:40:24:d4:99:0c:74:cc:26:29:ab:
                    4a:9a:47:b6:2d:d5:5d:d2:84:4a:3c:f5:da:46:2b:
                    6d:69:63:dd:f2:ec:1d:ef:8d:2a:f8:b9:8f:ba:c5:
                    c3:0c:7a:d9:5c:c5:96:7e:d9:78:01:49:ce:10:30:
                    a8:99:c4:2d:c5:20:d6:ac:37:3a:6b:42:51:dd:5d:
                    e5:76:9a:4e:b0:d0:8c:d0:01:ec:7e:1f:f5:f4:e3:
                    fc:1a:0d:97:90:4e:16:4c:3c:7e:29:23:10:88:d1:
                    26:d5:e1:95:90:b5:a0:74:76:36:9e:76:e1:39:b4:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:A0:09:6A:EC:63:04:BC:A3:63:8E:0E:6E:21:3C:A0:8A:76:A5
            X509v3 Authority Key Identifier:
                keyid:63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:e5:6b:ff:3c:57:ee:4b:e9:e0:5f:7a:f3:62:5e:60:54:7f:
         88:36:39:81:c1:c2:d8:3a:f6:30:0e:50:5d:ce:e5:95:96:9a:
         fa:62:b3:9c:a6:91:58:82:c5:33:79:b0:8a:16:3c:1d:31:27:
         97:ae:71:fb:a1:84:43:21:63:73:21:43:f5:84:88:74:a1:f9:
         0c:c5:5b:a0:6f:61:52:d7:47:56:e6:c5:67:b6:d7:26:9d:f4:
         16:81:05:c4:82:5d:e2:ec:30:89:1e:d1:6d:e6:b6:35:15:38:
         46:2f:c1:5e:05:70:e7:a4:3a:c2:79:4d:cc:43:85:4f:ac:d1:
         86:7e:56:8c:22:47:87:4b:72:53:6e:75:9d:ea:8d:ee:9b:58:
         84:b3:26:a2:70:9d:12:b3:f8:8d:df:4a:d2:9f:f9:6d:81:c4:
         06:5b:5e:28:c6:ac:d1:9d:15:f8:89:fb:7a:be:0f:49:e8:00:
         b3:46:b0:eb:a8:4b:19:67:cc:b5:52:19:da:94:4f:40:85:c1:
         b4:4c:d7:d4:ae:86:54:3f:a6:2b:30:9e:dd:b0:03:76:f9:5e:
         96:ea:d8:6e:ef:e3:62:cb:9e:56:37:7a:9a:bd:de:fb:d3:44:
         be:58:c7:65:b9:51:22:96:4c:34:a4:f3:7c:5a:51:aa:6a:5d:
         e6:78:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----