Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft
File:                     Hy-7A3stmMR0tipg7IjaDNLjfGE.mft (raw, json)
Hash identifier:          0rqMCzT4TFIxHoisrksAIlDcOPK3Dx/mDseAyx3msnw=
Subject key identifier:   F0:83:FD:2F:04:2F:4A:E4:EB:3D:79:0C:79:A1:A0:11:F8:BA:F7:8F
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Certificate issuer:       /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial:       018EE3FD848D7A8C5B9AEB6DA97017DAD9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft
Manifest number:          08B4
Signing time:             Mon 15 Apr 2024 23:00:26 +0000
Manifest this update:     Mon 15 Apr 2024 23:00:26 +0000
Manifest next update:     Tue 16 Apr 2024 23:00:26 +0000
Files and hashes:         1: Hy-7A3stmMR0tipg7IjaDNLjfGE.crl (hash: qDQas8fY4cW+AKCzKaYK68CgDuUr0N19/R1MPpqTqZM=)
                          2: V2P6D_uDTCyy93I1gqio7fwhvYU.roa (hash: XbrZvUoCuYMABfR5WGz3Aa0TY11jg8XJeUq+TkhN0Ns=)
                          3: v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa (hash: Gzle9aTofgGLRzEKDvEks9txbPZbRuXiFQzIPufM5c0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e3:fd:84:8d:7a:8c:5b:9a:eb:6d:a9:70:17:da:d9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
        Validity
            Not Before: Apr 15 23:00:26 2024 GMT
            Not After : Apr 16 23:00:26 2024 GMT
        Subject: CN=f083fd2f042f4ae4eb3d790c79a1a011f8baf78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:4a:ff:e3:b9:1e:dd:1d:8f:49:b5:80:b8:
                    17:ea:18:b9:a7:ef:cc:32:88:db:f4:7a:2a:00:ab:
                    38:09:43:bd:4f:2a:5a:a8:fd:3d:32:28:aa:41:df:
                    0e:9f:18:c3:f7:91:f7:23:47:12:8b:ca:74:5a:5d:
                    d9:2a:14:74:f8:6b:73:02:15:5d:2c:63:bf:7d:87:
                    b0:39:fa:03:d7:a9:52:29:8d:58:03:bb:7f:e1:72:
                    54:75:36:b7:6c:63:b3:75:fb:22:5e:3c:66:c2:9c:
                    ec:90:68:27:7c:e2:6d:43:e8:4c:9c:56:8f:1d:f9:
                    2f:f2:3f:ea:3f:27:48:d3:2f:ca:33:e8:08:ca:52:
                    34:cc:b7:48:73:97:f7:23:96:a0:ac:a6:04:95:f7:
                    62:10:d8:bf:e6:db:be:bb:01:c7:50:65:7f:7e:0a:
                    9c:ab:8f:b7:71:a4:d7:26:72:7c:1c:5d:fb:dd:31:
                    49:dd:78:19:75:1d:d7:d3:a1:f8:d6:a0:ed:dc:95:
                    ed:c6:5c:d7:cd:45:31:87:1f:f2:44:d6:12:c2:5c:
                    d4:eb:2d:ee:a2:d1:45:77:58:cf:8d:99:2a:2b:3b:
                    b1:f5:1b:95:f3:fa:74:01:b8:6e:90:cb:9c:24:6f:
                    ad:a5:c4:78:09:8a:9d:23:7d:ea:28:ed:b7:c9:a6:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:FD:2F:04:2F:4A:E4:EB:3D:79:0C:79:A1:A0:11:F8:BA:F7:8F
            X509v3 Authority Key Identifier:
                keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:79:99:74:af:5a:5e:98:f3:8a:0d:0d:9a:c7:98:ac:86:82:
         c3:da:2b:8a:df:69:56:8c:61:a5:d8:cf:75:92:2c:2d:89:d9:
         d0:41:be:40:de:5b:36:4d:c6:a7:51:88:db:be:10:9d:f1:ad:
         02:d0:06:1a:50:04:29:44:8e:00:26:d4:3c:55:c4:cf:6e:e2:
         5e:4d:40:d5:3c:b6:6a:be:a7:1e:7d:74:fc:91:7c:f8:e2:cc:
         b8:9b:b3:0c:39:4f:11:d3:83:4b:77:b9:48:66:5b:f1:b5:37:
         2b:84:a3:5e:57:c8:8a:09:7e:14:9c:a9:d4:c5:4e:3a:a3:68:
         02:ad:29:11:0b:86:25:2f:42:fd:27:88:dc:5b:d6:25:28:18:
         d9:c2:a0:94:22:c4:be:79:4c:50:cf:9f:31:8a:cf:28:a7:ef:
         04:aa:52:52:59:57:ec:8e:99:9d:7b:26:4d:3b:dd:50:06:06:
         ea:ef:3a:cb:42:48:f6:82:27:a3:a5:d8:d1:e7:cd:06:00:94:
         24:e7:38:3b:00:11:c5:ee:ac:6c:0c:9c:a0:73:97:14:ae:31:
         a5:49:30:3c:ce:cd:0f:64:6e:d7:06:bc:d4:76:be:ba:51:d3:
         56:cd:e0:ea:b7:70:7f:c8:f5:2d:bd:05:55:29:65:71:1f:4e:
         ea:b8:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----