Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft
File:                     CKB2kHVu7fadJFEIl_lB6xluW1k.mft (raw, json)
Hash identifier:          Z55BV2M7uGScXZMpx7KAugb4/kN6v/RW6ZhD9gjAgi0=
Subject key identifier:   B5:FD:EE:FA:01:9E:46:F0:46:2E:DB:7F:51:6A:9A:27:6E:C2:C7:19
Authority key identifier: 08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59
Certificate issuer:       /CN=08a07690756eedf69d24510897f941eb196e5b59
Certificate serial:       018F13695223E3A0FC5685F32FC9D8B8F94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft
Manifest number:          0738
Signing time:             Thu 25 Apr 2024 04:00:20 +0000
Manifest this update:     Thu 25 Apr 2024 04:00:20 +0000
Manifest next update:     Fri 26 Apr 2024 04:00:20 +0000
Files and hashes:         1: CKB2kHVu7fadJFEIl_lB6xluW1k.crl (hash: 4uyR4KDYJA5D7/ZVNNVG/q/DRbIy3EV73fHC8xlbBXw=)
                          2: TrdU6PScnn4E_xfbl-qwCjXnaJU.roa (hash: DK9Jku/TOH/68ODxjiGDnCXgK7nec5CUhRmkFLVnOcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:13:69:52:23:e3:a0:fc:56:85:f3:2f:c9:d8:b8:f9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a07690756eedf69d24510897f941eb196e5b59
        Validity
            Not Before: Apr 25 04:00:20 2024 GMT
            Not After : Apr 26 04:00:20 2024 GMT
        Subject: CN=b5fdeefa019e46f0462edb7f516a9a276ec2c719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:d8:db:d7:42:80:95:d6:4c:ba:b4:a9:f9:
                    09:71:dc:ea:08:4c:76:a5:43:f2:f5:01:dc:29:36:
                    93:cf:06:b9:6d:8e:c2:cf:e9:2e:ac:4d:1e:87:95:
                    86:00:2e:08:b5:72:77:33:15:ba:03:1a:2d:56:fb:
                    37:9d:e9:73:79:43:79:ec:7d:31:d6:01:8c:3f:49:
                    f9:03:fc:91:ff:24:39:d6:2e:22:98:75:cd:50:08:
                    8c:e8:30:2c:a3:2e:92:1f:2e:d4:71:03:a6:83:79:
                    89:94:96:d3:d6:09:2e:4c:fa:4b:94:fd:ca:9b:08:
                    7a:94:e3:02:e0:b8:ec:8f:a7:e8:b2:4b:a5:a2:5a:
                    67:e2:9f:36:7b:7b:9d:3f:88:11:59:87:59:dd:a7:
                    af:5c:aa:7c:70:ba:c3:0f:a7:f3:13:84:0e:84:5f:
                    eb:60:68:00:4c:df:35:6c:30:ce:aa:05:84:86:28:
                    db:6d:ea:11:b4:75:ee:f0:4d:db:21:20:3b:c0:e4:
                    5b:3b:6e:72:31:6b:99:22:c8:b5:e9:cd:b4:9b:7b:
                    ce:96:5d:69:d4:93:87:f2:96:91:2e:01:49:94:52:
                    89:16:46:96:ff:40:57:e4:54:65:7b:df:a5:30:8d:
                    20:20:ed:40:a6:9b:e7:27:17:f2:5e:41:fb:fb:c9:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:EE:FA:01:9E:46:F0:46:2E:DB:7F:51:6A:9A:27:6E:C2:C7:19
            X509v3 Authority Key Identifier:
                keyid:08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:91:82:c2:29:ec:ad:7f:a0:77:3f:06:f2:d9:73:55:bd:
         c0:a7:96:b6:fb:4e:e9:1d:4a:b2:96:d3:ca:25:7f:76:4b:89:
         3f:06:c4:50:9d:12:67:65:6d:9c:66:bb:f5:72:a7:04:25:bb:
         4e:fc:7c:72:3c:7f:4c:e8:86:60:aa:8c:bc:ea:bd:9c:2c:d2:
         0e:ae:e5:bb:b9:ab:05:59:5f:a3:49:2c:9f:fa:de:c9:34:5d:
         25:aa:64:bd:9b:15:f2:4a:8a:30:67:00:a6:14:21:d0:a7:42:
         0d:54:64:b4:be:0c:db:44:86:28:ee:ed:22:42:fb:e9:1b:2c:
         bf:b2:d8:b4:1e:fc:a9:ec:8e:0d:12:a4:28:1f:95:75:2f:df:
         74:fe:09:a2:4c:dd:08:7f:0e:ba:02:9a:c3:02:3d:1a:32:65:
         1c:72:86:77:8b:f6:39:ac:b1:69:fc:f1:54:cc:29:88:45:f6:
         55:06:52:50:03:7e:c6:81:9f:15:12:cb:b3:29:09:42:3f:44:
         44:d7:50:9a:33:73:a0:81:e9:c5:6b:e3:4b:f1:c5:d7:5e:31:
         e3:ae:a8:c8:e7:25:f2:bf:f0:91:78:ef:87:09:ff:e3:77:f2:
         11:a4:a7:8a:39:af:87:48:31:77:d1:4b:37:c7:02:94:f9:e7:
         27:5b:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----