Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.mft
File:                     YydgdWNJMzdoetac4QZOY2Jlvj8.mft (raw, json)
Hash identifier:          wJk57gkErIts8JN6PrfVBIkSKuq57smh6DZDZtRK4Fc=
Subject key identifier:   C7:8F:BE:A8:96:25:C3:4F:7F:1E:2B:A3:4D:0F:1E:8E:9E:35:B8:EE
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Certificate issuer:       /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial:       018F4AFD41066EA2DA49FC269DB1FB0629A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.mft
Manifest number:          0196
Signing time:             Sun 05 May 2024 23:01:02 +0000
Manifest this update:     Sun 05 May 2024 23:01:02 +0000
Manifest next update:     Mon 06 May 2024 23:01:02 +0000
Files and hashes:         1: 9zNAo-ARsqdRxUaE4DxcNXImiWQ.roa (hash: pN7aUqADc8qlJS6SpRjKs98rP2eVOscFraB5ZlfUrxM=)
                          2: AyTuR0M6AZKmQjt2jB-OlsLj5Gs.roa (hash: SShVmRMAYCsHIHg3sZrGGniHdXWMxPzDpKX9plvva1A=)
                          3: PguJQiN1U8aX5tWNHAYFvNOVMEE.roa (hash: HNMK+xOJ/nzxPpSuuvbfb2Gt2DVHs0bVGQnrxRT7q04=)
                          4: Qj4qlYy8CJV3NXg9Y0C6zbSFEyk.roa (hash: hs6cUD11RmGlxUd6dxL2rA7iDq00D23k+kVQl638blc=)
                          5: XEVzC06N_FRHGm46ecM9QFkhju4.roa (hash: 2imfpQyEFDrZigMqEJW9sEHozDx4yr3SzkwgGbDw6jw=)
                          6: YgRjZw41Eog2cnThDEaXmaifAEg.roa (hash: v1jFLen9x/+7ge4b5Lh7QnDntljPiL/cXls5YWvlF24=)
                          7: YydgdWNJMzdoetac4QZOY2Jlvj8.crl (hash: eVCpRaVlzfhi97Dj/rVak4bFW/t9hsDrucnQA8VFFN0=)
                          8: czl8gCf_1mYnnXQsECYYvss30HE.roa (hash: PQeT6QV9toLZE6P0+Y3il9TkJUcYZW+QyQTlWpBhXZw=)
                          9: o-362YWskb-fpj877-SIIe0JmEo.roa (hash: PaHniRjB+BwpADbFwOjCXn1UqJN8HZiaktMlhs+0fw0=)
                          10: sT81zhS3StkvfLmn1OQrlYd_t_g.roa (hash: EDjn/3t0UKvfvwF57UDthrEGWrDixD4ALztUBE6e0n4=)
                          11: srBXpGzpCl2IZiGK70TM4rX8hQo.roa (hash: UEEJbRJPqAMpzBuDgrZj9Kcb3sSfaxGwaiMzd/KgGeM=)
                          12: t0m-mjyiRxig6_L6p3R4mHym0dM.roa (hash: WnIqTWR9PfTJTUT6fG1XRcycgLPmwR+koD45Nwv9BIU=)
                          13: xYkGQNJFbQnRL4ffqIK2io6L_Qs.roa (hash: Ib83GUWjZ7vv6ZjFb1RC5kLK8bX+gZEzD59/u3cul6Y=)
                          14: zH059VcBM1C0xbvceGUa6mCDIxM.roa (hash: oxqMeFAeDSrmzGzvLQhy5P+735HnNTgsEGrzQh7vS0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:fd:41:06:6e:a2:da:49:fc:26:9d:b1:fb:06:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6327607563493337687ad69ce1064e636265be3f
        Validity
            Not Before: May  5 23:01:02 2024 GMT
            Not After : May  6 23:01:02 2024 GMT
        Subject: CN=c78fbea89625c34f7f1e2ba34d0f1e8e9e35b8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:e1:9e:e4:dd:ad:b6:e8:e2:f4:ba:1c:5f:
                    29:f1:7e:fc:b7:bb:35:f2:0e:bf:8e:77:21:df:93:
                    92:f2:33:1b:2b:19:05:ab:fc:9f:49:75:db:c9:22:
                    8d:c3:8e:e6:c4:85:d6:d4:80:70:e6:95:45:b1:9d:
                    85:32:75:5b:b6:1d:12:2b:ef:58:71:25:4a:34:43:
                    f3:32:02:e6:fe:fa:c8:e6:00:75:04:a9:04:0c:98:
                    da:56:c4:dc:e8:55:dd:8c:4a:d7:6b:16:21:aa:36:
                    f0:a7:9b:82:04:3f:66:4a:d9:ce:77:1b:24:6b:88:
                    77:fc:9c:cf:ad:61:33:c6:7e:39:66:1a:a0:c5:bc:
                    f6:15:0a:57:65:d2:4c:69:fa:6f:f2:52:71:59:1e:
                    5f:5c:b3:b8:82:03:33:a5:6c:ec:50:4c:cd:c9:84:
                    7c:6f:44:75:7e:07:5c:37:84:ba:df:13:4b:50:f4:
                    92:75:5e:4f:c7:63:1d:2d:6b:ea:17:5c:56:49:3e:
                    7d:3e:04:8b:46:e1:b0:c1:ed:58:20:03:85:a2:95:
                    70:76:e4:b6:b6:89:29:5c:98:b8:cb:38:60:3f:6e:
                    6e:ea:b6:22:13:57:a6:7f:71:db:5c:fe:23:74:87:
                    49:ab:22:e7:84:6c:f4:cd:d3:c9:a6:95:a5:5b:2d:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:BE:A8:96:25:C3:4F:7F:1E:2B:A3:4D:0F:1E:8E:9E:35:B8:EE
            X509v3 Authority Key Identifier:
                keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:5d:e5:f2:fe:4b:e7:3c:c6:9b:d9:34:ce:3c:10:a7:90:
         21:01:7f:66:c7:4e:d4:92:72:4f:d4:98:43:a9:82:eb:7c:0b:
         b7:6e:2b:c8:65:06:a4:54:97:18:83:10:bd:ef:32:68:a2:42:
         82:f8:59:04:d7:19:77:f7:85:26:83:eb:29:5d:ae:ee:19:8c:
         ff:2f:9d:11:91:ce:60:96:fe:1e:14:2c:f8:b5:ad:cc:2f:89:
         08:fa:2b:53:1d:cf:d4:87:df:95:6f:40:0b:e2:bd:4f:8b:10:
         f8:21:e1:12:52:df:51:19:9c:2e:06:43:6c:95:d0:0c:60:a4:
         da:aa:d9:25:d7:52:3b:13:34:7d:f6:9d:08:75:32:da:6c:54:
         df:9f:47:9f:9e:92:62:f4:c5:92:24:d7:81:03:a7:90:0a:c1:
         e1:2e:84:db:15:c9:5d:c8:88:42:5a:47:5a:44:4b:f4:a6:3c:
         8d:93:95:0e:31:de:17:02:35:ee:4c:c0:68:fa:52:46:21:8d:
         f6:70:cb:1f:45:df:ca:f0:b9:23:59:53:70:e8:0a:bb:57:c9:
         14:97:73:a3:7f:23:03:f7:02:34:87:c4:85:d2:f8:aa:46:87:
         a5:ea:34:47:4c:cc:c0:56:08:36:11:27:ee:95:e9:3b:d5:f0:
         33:24:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----