Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.mft
File:                     9lVVi2FnlKT3emSPwzYJ2Xf1p4A.mft (raw, json)
Hash identifier:          +bC3K3eLN1VI1BCYPYs0OH54k3HIs7U3OlgDwHcl+i8=
Subject key identifier:   7B:77:28:9B:54:C0:70:73:3B:86:28:B4:79:CC:46:93:F3:2C:A2:99
Authority key identifier: F6:55:55:8B:61:67:94:A4:F7:7A:64:8F:C3:36:09:D9:77:F5:A7:80
Certificate issuer:       /CN=f655558b616794a4f77a648fc33609d977f5a780
Certificate serial:       018D77DB1295A4BAB8160FFC5A5168FA31F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.mft
Manifest number:          085A
Signing time:             Mon 05 Feb 2024 06:01:02 +0000
Manifest this update:     Mon 05 Feb 2024 06:01:02 +0000
Manifest next update:     Tue 06 Feb 2024 06:01:02 +0000
Files and hashes:         1: 1-q0RQKmhdCn1M3L-cs7nRb3Zk1k.roa (hash: wPYfKtXaFrh8JOVR4jbhZwJks/qnifWA2Q/pWXSFG3U=)
                          2: 9lVVi2FnlKT3emSPwzYJ2Xf1p4A.crl (hash: JCmWTsbuqcHJn+abVuTraRqIi9QrFLTcUhT4nMpNu/Y=)
                          3: OpdIM4S0btoY3jQ3RyTFGGx7Kng.roa (hash: nlPTFTAMwhOB1DFt1WH5hFBIc8Qm07g/mNW5AF4lQK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:77:db:12:95:a4:ba:b8:16:0f:fc:5a:51:68:fa:31:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f655558b616794a4f77a648fc33609d977f5a780
        Validity
            Not Before: Feb  5 06:01:02 2024 GMT
            Not After : Feb  6 06:01:02 2024 GMT
        Subject: CN=7b77289b54c070733b8628b479cc4693f32ca299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:b0:3a:3b:d1:a0:25:99:e9:eb:58:62:3c:
                    f5:60:61:92:01:ea:4e:53:7e:5d:d5:21:4b:1b:2d:
                    5b:3d:c4:0d:66:ce:b1:c5:ae:97:e7:79:31:5a:23:
                    eb:d8:6d:ae:d8:f4:e6:e7:fa:d0:c1:29:b7:93:c1:
                    d0:1f:bc:1e:f3:1c:cb:ce:4a:b3:b0:ef:f8:d3:92:
                    43:7b:2f:7d:30:7f:74:87:33:46:39:70:42:19:2e:
                    82:55:29:dd:52:ac:a3:82:cd:6f:ca:dd:b6:c2:b4:
                    6d:b6:24:25:62:c7:84:91:a5:59:d1:a5:33:87:9c:
                    31:b1:61:65:ac:08:39:5f:a4:66:a7:47:03:61:c4:
                    be:65:f7:fc:5d:02:0b:ac:2c:db:7f:66:71:c2:d6:
                    27:6d:bb:22:ec:6f:54:99:01:e9:0d:16:fb:30:71:
                    e2:b7:0e:27:9c:67:44:42:31:bc:08:be:2e:f1:64:
                    83:9a:bb:b8:66:5f:a5:b4:5d:2d:ba:4e:b8:8c:c2:
                    95:06:9a:b6:8b:d9:74:ce:24:bd:01:ea:3e:52:e1:
                    9a:55:5b:9b:c3:dc:94:45:c3:88:b9:5c:f1:95:d3:
                    5e:00:8f:1b:75:59:5f:be:6d:70:17:c1:5a:55:83:
                    32:9b:31:29:83:28:32:ec:82:f1:e3:c1:88:5f:7d:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:77:28:9B:54:C0:70:73:3B:86:28:B4:79:CC:46:93:F3:2C:A2:99
            X509v3 Authority Key Identifier:
                keyid:F6:55:55:8B:61:67:94:A4:F7:7A:64:8F:C3:36:09:D9:77:F5:A7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/13536b-baf9-4b0f-ac5a-9085b4dff289/1/9lVVi2FnlKT3emSPwzYJ2Xf1p4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ac:54:af:3f:5e:dd:b5:21:9b:eb:04:58:ae:96:e9:35:89:
         44:83:ba:d3:f5:bb:53:7a:10:52:6d:ef:18:68:ab:b9:e0:f5:
         88:6a:38:02:6d:92:b5:3f:a3:c2:5a:60:42:d0:d6:38:8a:b8:
         a5:a9:56:e0:f6:15:03:26:c7:c6:c6:40:40:24:26:f4:5a:35:
         8b:25:4d:f5:2d:8f:c9:6a:1c:55:94:bb:d9:42:74:f3:79:d3:
         07:1f:75:7d:91:f4:07:b4:f6:91:71:70:4d:ba:1c:eb:ff:fe:
         f5:a4:34:1e:dc:09:8a:fe:03:af:a4:11:cd:5b:40:a2:70:86:
         26:06:08:a9:84:74:b0:c1:d9:b8:4f:70:9e:5d:cc:1a:12:5c:
         39:cc:25:01:87:55:39:89:d9:59:26:12:64:f6:2c:0f:c7:a3:
         dd:df:27:4e:3c:97:a9:88:ba:2c:43:d4:96:7f:9e:1c:27:0b:
         a7:0c:93:12:21:fe:16:3a:71:76:31:01:ca:62:9c:e4:db:f4:
         07:7c:a3:82:6a:9b:44:a2:7f:b8:ac:cf:b8:39:92:2f:b4:79:
         63:89:4e:b9:4c:6d:db:50:ff:ee:97:44:ac:83:24:54:14:67:
         cb:3d:4a:c6:8e:42:e1:1f:50:23:2c:5e:c4:0d:16:85:7d:d9:
         13:ba:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----