Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft
File:                     5A_iJBFqnxnTNyf963rPgjQbpgM.mft (raw, json)
Hash identifier:          ggtsJ3kqg50yQ9WupQk7/1RiYshM2fuA1ksw5FQ/nRM=
Subject key identifier:   60:2C:D3:A5:83:F1:4F:EB:24:21:B5:BB:A9:04:CD:C9:23:AB:71:8A
Authority key identifier: E4:0F:E2:24:11:6A:9F:19:D3:37:27:FD:EB:7A:CF:82:34:1B:A6:03
Certificate issuer:       /CN=e40fe224116a9f19d33727fdeb7acf82341ba603
Certificate serial:       0190ED69BD6EA9F5304EA4B686029B85C9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5A_iJBFqnxnTNyf963rPgjQbpgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft
Manifest number:          11C1
Signing time:             Fri 26 Jul 2024 05:00:48 +0000
Manifest this update:     Fri 26 Jul 2024 05:00:48 +0000
Manifest next update:     Sat 27 Jul 2024 05:00:48 +0000
Files and hashes:         1: 5A_iJBFqnxnTNyf963rPgjQbpgM.crl (hash: Xe/z8V1WQgafBGkA+x0PbN11FCvFSVhohvU3j/6sASs=)
                          2: Jclb9IqPYP9q9iR1RRxqGP9EA8k.roa (hash: 1FsoQmZjMpo1ItTO6H2OoLtjrzUxXJnJvyFBkRBH43k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ed:69:bd:6e:a9:f5:30:4e:a4:b6:86:02:9b:85:c9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40fe224116a9f19d33727fdeb7acf82341ba603
        Validity
            Not Before: Jul 26 05:00:48 2024 GMT
            Not After : Jul 27 05:00:48 2024 GMT
        Subject: CN=602cd3a583f14feb2421b5bba904cdc923ab718a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:fe:cd:3b:05:71:fe:6f:71:a7:f2:79:30:
                    09:4b:df:27:5d:30:06:0e:42:c2:7a:41:dd:a8:7c:
                    2b:75:5d:21:0d:2d:64:74:a8:23:a7:1c:80:34:35:
                    fc:59:d5:a2:60:b2:64:e5:59:c4:85:77:36:41:a8:
                    f3:fb:25:ca:49:f4:a5:df:5b:0b:ec:4d:24:78:f1:
                    3c:ae:90:17:8f:5e:64:0b:99:f1:ac:00:ab:9c:28:
                    78:ff:1e:9f:1d:06:4f:73:bc:c2:31:5d:77:3c:70:
                    56:c6:dd:9e:7f:b9:4b:d7:66:06:4f:39:14:fc:5c:
                    6c:23:c2:a2:13:c2:d3:96:87:74:a8:78:b0:49:0d:
                    26:4d:8b:7f:96:58:38:8c:23:66:75:62:8a:df:c5:
                    5b:66:a2:0e:73:6b:9a:7f:24:c8:b1:cd:0b:1e:8c:
                    8c:18:4e:d7:76:95:f2:d0:cc:85:a9:46:f6:54:4a:
                    54:bc:6d:6b:ee:19:05:e9:3b:a5:9b:b7:61:ef:9b:
                    76:60:c3:e8:97:7d:dc:9a:ea:dd:2e:93:b8:a7:45:
                    2a:c3:41:52:69:6e:92:7c:a6:41:76:42:fd:52:22:
                    6b:76:ea:f5:0e:e1:a4:c7:b9:ea:d9:f9:1e:a6:04:
                    43:49:c8:a1:61:74:e4:f0:3c:93:1e:0a:57:4d:f6:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:D3:A5:83:F1:4F:EB:24:21:B5:BB:A9:04:CD:C9:23:AB:71:8A
            X509v3 Authority Key Identifier:
                keyid:E4:0F:E2:24:11:6A:9F:19:D3:37:27:FD:EB:7A:CF:82:34:1B:A6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5A_iJBFqnxnTNyf963rPgjQbpgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:9a:f1:dc:46:c6:3c:06:9b:1f:c9:64:cb:64:d3:7e:b7:
         a0:67:43:90:0d:43:60:cf:6a:ab:d5:62:e5:c7:c9:58:e6:15:
         2e:f0:6a:fc:86:00:1d:26:79:d8:f8:e4:ee:f6:8d:71:03:34:
         7a:3e:3e:a8:57:cf:fb:33:b2:a1:57:6e:ca:6d:aa:16:cc:e2:
         57:b9:d9:13:f7:53:0e:67:df:77:88:ca:05:b2:0c:a0:4e:82:
         80:d8:ff:36:77:ec:be:d1:97:2b:0c:0e:2f:0e:dc:c0:b2:bb:
         09:f7:f2:54:f3:99:5f:40:c8:35:c2:16:ab:94:7b:04:40:47:
         4e:fd:0d:e5:59:9f:71:40:40:d2:99:85:90:57:89:03:84:7a:
         ed:80:48:dc:fe:b6:6b:39:3b:9b:5a:f3:8f:9c:15:0b:e1:1a:
         7c:59:47:7b:e5:0d:c6:78:d4:03:72:a8:b3:d0:6c:8e:19:e5:
         17:c2:74:f8:41:8f:64:01:53:fa:7e:4a:f6:f7:19:10:bb:f1:
         14:46:11:51:b1:f7:d1:84:f3:40:b9:19:78:fc:48:60:f4:fd:
         f5:07:f7:92:45:6c:1b:0e:50:65:6b:84:fc:2b:2d:e0:84:9d:
         6e:20:2b:59:e5:3c:67:14:16:fd:60:f8:19:54:22:d6:6a:f0:
         05:ff:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----