Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.mft
File:                     bcZspcnnac6RkzT7H2bIvZ_KrpY.mft (raw, json)
Hash identifier:          /PkW8M3L0MeXp+IMFERzjRZrIn1Ekpzkd4ATmB8wtrw=
Subject key identifier:   16:33:02:B0:76:5B:68:32:CC:8E:8D:EF:F1:F5:8A:88:02:24:80:24
Authority key identifier: 6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96
Certificate issuer:       /CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
Certificate serial:       019050C5F2F0213D4CE1BB389AF7C1B952E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.mft
Manifest number:          0A73
Signing time:             Tue 25 Jun 2024 19:01:08 +0000
Manifest this update:     Tue 25 Jun 2024 19:01:08 +0000
Manifest next update:     Wed 26 Jun 2024 19:01:08 +0000
Files and hashes:         1: Hi4A_2gs527rN0LUTN-EDHuQDfU.roa (hash: mCDAqCpV9BysnUFLrO00NPqSyeRRGaJbtjg/buAe+Z4=)
                          2: bcZspcnnac6RkzT7H2bIvZ_KrpY.crl (hash: fZoAA6Sj3YxfmElecz0oo962mPS6pof4Iu+9wkeYHxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:c5:f2:f0:21:3d:4c:e1:bb:38:9a:f7:c1:b9:52:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
        Validity
            Not Before: Jun 25 19:01:08 2024 GMT
            Not After : Jun 26 19:01:08 2024 GMT
        Subject: CN=163302b0765b6832cc8e8deff1f58a8802248024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:de:d8:ac:34:05:c8:5d:6d:bf:89:ae:f2:
                    5d:5b:ca:af:0c:b6:51:68:4e:31:01:f9:d5:25:df:
                    62:0c:f0:20:34:bd:a3:20:76:de:b0:6a:3c:43:ea:
                    b3:1b:12:64:4a:31:64:90:6c:01:d8:ad:e1:5e:80:
                    4f:31:c3:c6:d1:9b:e5:f6:f4:67:09:04:2a:b4:e9:
                    00:54:c5:45:da:5a:cf:c5:73:ee:fb:ff:57:bf:cd:
                    58:d0:07:3c:bc:ff:3b:bd:2d:c2:47:92:7e:49:fd:
                    01:e6:c6:6f:e9:08:61:8c:cc:aa:15:5f:e3:08:ba:
                    55:9a:5b:fd:94:ad:7e:ab:7b:ef:91:0d:0d:f7:31:
                    1f:9b:3a:b0:e6:e6:49:e5:11:cc:7e:af:a6:a4:1a:
                    26:4a:0a:e6:cf:9d:1d:a7:2c:2c:7a:da:3c:95:e0:
                    81:ce:ca:6a:ea:a7:9f:6b:73:3c:1b:03:fa:d5:2f:
                    76:3f:46:69:ba:fb:0c:82:ed:0d:0d:d3:55:4e:40:
                    2e:1d:af:1f:01:3e:da:bd:32:13:75:ff:a6:02:bb:
                    45:21:9e:8a:25:ef:dd:c7:62:f8:db:41:19:09:a4:
                    8c:3b:5a:d5:e1:af:b8:78:26:ec:0a:d6:80:e5:e2:
                    40:9f:ae:f8:6d:0b:6d:1d:bf:b0:aa:ae:7a:ca:79:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:02:B0:76:5B:68:32:CC:8E:8D:EF:F1:F5:8A:88:02:24:80:24
            X509v3 Authority Key Identifier:
                keyid:6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:99:b9:3d:9f:91:ae:3a:b4:65:86:ca:b3:fb:67:67:b7:
         fa:58:be:b3:97:03:f2:a7:4a:5b:75:3d:e0:48:37:06:8b:fa:
         c7:f4:51:60:f1:a6:a8:c1:2e:c9:23:bb:25:dc:19:a9:e5:0b:
         1f:c5:89:77:6f:e5:23:4f:b1:73:e7:b2:aa:e5:69:47:2c:f2:
         ba:84:8b:5a:d7:0d:34:c3:3e:9d:9d:cc:a6:34:7a:a5:1f:b7:
         e9:71:f8:5f:e7:cb:2a:a2:77:4c:61:aa:73:01:2e:8b:c4:a9:
         93:48:cf:60:08:2e:24:11:ac:ba:0f:d9:0e:c9:83:ba:b4:76:
         3c:e8:75:57:f1:2f:5b:9f:7b:09:fc:e5:60:45:d5:cf:3a:a3:
         a4:38:10:33:e4:40:95:2a:27:61:08:97:42:e8:a7:83:d3:73:
         51:89:27:01:25:47:ec:26:ca:2d:18:73:38:2a:62:b4:a7:cb:
         39:78:47:3e:de:f0:cf:23:e4:86:0a:6d:46:ad:32:cc:0b:f3:
         e5:85:8a:d6:e0:c6:ba:8e:1b:6b:8b:ac:80:f6:21:95:93:90:
         a8:de:96:e0:57:2e:b7:1b:db:44:df:c8:0c:a5:c1:1c:ab:bb:
         7d:2c:2f:54:13:24:42:79:3d:a4:55:3b:9b:d1:dd:17:b3:7e:
         1b:32:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----