Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft
File:                     EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft (raw, json)
Hash identifier:          w5J0D1mF7YcvXsw4mHw5FwXPgO25MB3K2wHL4phl5Xk=
Subject key identifier:   B7:83:15:E7:9E:8A:6A:32:B3:B4:9F:53:9A:A2:D4:A0:99:80:B6:84
Authority key identifier: 11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
Certificate issuer:       /CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Certificate serial:       018DE88272726340938C8DE20FBC2FBEC401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft
Manifest number:          10A0
Signing time:             Tue 27 Feb 2024 03:01:19 +0000
Manifest this update:     Tue 27 Feb 2024 03:01:19 +0000
Manifest next update:     Wed 28 Feb 2024 03:01:19 +0000
Files and hashes:         1: EZb4fV3s_L8ERQtfz2W1s0XyJGQ.crl (hash: ZosAl0n4O8URsDj7vKa/z8Z2fpcdW9jY7GRUcHumnas=)
                          2: WVuM-w7aTZB3J-h5Gfa5m7kegw0.roa (hash: jmXyubfLshEaDQOqs04/ZVZmK8/VYmOKlbX40GzrClI=)
                          3: zjax_lvlHvuj83seEfT7Y0bSTKQ.roa (hash: DF54+jCSavBDVfFzXZiwQjCjBhL4TIIfaL6QWB7DmDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e8:82:72:72:63:40:93:8c:8d:e2:0f:bc:2f:be:c4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
        Validity
            Not Before: Feb 27 03:01:19 2024 GMT
            Not After : Feb 28 03:01:19 2024 GMT
        Subject: CN=b78315e79e8a6a32b3b49f539aa2d4a09980b684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:8d:ed:12:d5:d3:b4:20:7b:13:5e:7f:69:
                    76:fa:c1:ea:45:57:b6:f8:7f:ee:7c:9e:f8:0e:a5:
                    2b:44:21:ad:99:52:eb:76:4a:41:99:6c:14:64:42:
                    6d:f1:d2:8f:7e:ad:de:6f:14:9d:3c:8c:3e:8f:8c:
                    29:c8:cc:94:c8:2a:07:bb:1a:94:de:98:05:c0:45:
                    d2:84:d9:de:bf:61:f2:27:9f:25:da:92:14:d1:5c:
                    29:52:d1:77:e0:77:2e:ab:9c:dc:c9:06:dd:cc:84:
                    72:5a:59:1d:7e:4d:70:84:90:34:ae:f7:20:1b:49:
                    e1:d6:21:bf:35:4f:96:9e:48:50:bb:f3:df:36:dc:
                    98:22:87:b2:63:53:e3:75:5f:ea:74:b6:86:7a:52:
                    c3:1e:81:04:55:03:8c:1b:93:a2:5d:77:5f:36:86:
                    9d:58:af:b1:a4:32:5d:41:6f:48:46:71:23:e4:42:
                    f2:0d:54:0b:fa:cb:e7:58:11:f3:06:3f:3f:8e:bf:
                    e6:02:3d:aa:cb:a5:41:9e:68:c5:7b:f0:7f:30:da:
                    c4:83:b1:2d:fb:52:29:55:af:63:cd:29:9e:85:d7:
                    11:69:63:c3:c6:b8:48:3d:1e:f2:64:d2:3d:0c:72:
                    ba:20:76:77:39:25:13:10:00:de:46:ea:e7:1d:33:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:15:E7:9E:8A:6A:32:B3:B4:9F:53:9A:A2:D4:A0:99:80:B6:84
            X509v3 Authority Key Identifier:
                keyid:11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:2a:b0:9f:1d:12:68:8f:c1:68:f2:b4:4f:95:d6:ec:df:
         99:f5:c9:2b:c1:1f:2a:c1:f9:db:5b:71:7c:c6:17:b9:b2:ff:
         bd:18:d8:a0:91:16:65:86:f3:11:79:42:72:3b:a9:73:57:cb:
         75:94:6f:2e:bc:60:50:09:13:af:60:50:9b:72:25:3c:87:6b:
         cb:ac:2c:fe:06:f6:cb:4a:79:be:82:b3:e9:25:50:0b:7d:7c:
         89:06:e8:69:e2:48:76:ae:bc:77:62:4e:b9:e8:2d:8c:d1:bc:
         2a:43:2c:0a:df:71:b6:ba:c0:d0:e9:91:b8:01:cd:49:70:23:
         48:91:8b:5e:f8:9e:84:51:6e:96:cf:25:4e:72:ee:01:70:b9:
         ba:d1:85:23:2e:4b:b7:f3:59:48:16:48:e7:d8:31:4b:c4:c4:
         d2:6f:50:11:e4:3f:af:fc:24:68:3e:70:71:f0:3a:0b:c0:f3:
         71:00:62:57:be:a0:53:3a:f1:dc:61:d2:4e:69:6a:4c:16:77:
         81:9d:23:da:a8:aa:ed:1d:9f:82:07:db:b3:90:3a:73:c8:7e:
         9d:31:2a:4e:46:ac:9b:00:d8:a9:63:4a:e7:7e:eb:76:3a:dd:
         0f:73:cc:cb:4d:78:b2:bb:02:29:1d:47:11:cd:16:fa:b9:72:
         15:6a:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----