Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.mft
File:                     vGljOa246Ii-lQQOHIPaf5W7s4U.mft (raw, json)
Hash identifier:          XLv+VXP4swrIjRI3WYQ8Yw+9k0F4j8Acq9v9cRxyobk=
Subject key identifier:   C2:4C:A5:A7:24:74:40:EC:DB:EC:97:85:16:DE:53:76:C1:E4:54:33
Authority key identifier: BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85
Certificate issuer:       /CN=bc696339adb8e888be95040e1c83da7f95bbb385
Certificate serial:       018DD3E8F01F6384FFBB149391BDFAF9464C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGljOa246Ii-lQQOHIPaf5W7s4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.mft
Manifest number:          1026
Signing time:             Fri 23 Feb 2024 03:01:14 +0000
Manifest this update:     Fri 23 Feb 2024 03:01:14 +0000
Manifest next update:     Sat 24 Feb 2024 03:01:14 +0000
Files and hashes:         1: qTmnkVWYobAL1cGOxIbKuCr9utk.roa (hash: /eZpM7mUiByClTCSe0JhB+hmW9IaeDENUwLkXa7HiIo=)
                          2: vGljOa246Ii-lQQOHIPaf5W7s4U.crl (hash: th/O/wy6d9IR4XboMofnVwJkcPV8s+vHIT2yiHucWDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d3:e8:f0:1f:63:84:ff:bb:14:93:91:bd:fa:f9:46:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc696339adb8e888be95040e1c83da7f95bbb385
        Validity
            Not Before: Feb 23 03:01:14 2024 GMT
            Not After : Feb 24 03:01:14 2024 GMT
        Subject: CN=c24ca5a7247440ecdbec978516de5376c1e45433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:37:f0:ce:06:98:ef:8b:d3:d6:0d:49:3d:
                    bc:0c:45:88:5b:22:67:e1:ed:6a:64:bb:5d:89:57:
                    a9:c7:a4:0d:f9:f6:ac:dd:ea:cf:d6:de:7f:56:c2:
                    27:59:c1:3e:d0:d9:f3:c9:79:4d:4f:fa:4d:ff:b5:
                    bc:7a:0b:09:e7:e3:c8:46:46:f0:6d:f7:cc:44:dd:
                    c7:e3:3a:a7:84:af:3c:6a:c3:fa:a0:8c:c3:d9:58:
                    17:9b:70:e3:79:6d:83:e0:66:b2:51:2d:6d:7b:ed:
                    95:e4:61:32:7d:43:89:71:dc:c4:6d:c4:8c:86:fd:
                    be:d0:12:de:42:61:04:48:98:22:c4:ed:4c:27:2c:
                    3d:cb:1a:ac:7c:a3:f5:17:7a:44:50:e9:48:72:01:
                    d7:f0:64:85:3c:7e:7a:d7:29:61:a7:db:b8:fa:40:
                    5d:93:67:cf:c2:b4:65:d7:0d:24:50:14:f2:80:3f:
                    5c:89:23:94:08:de:49:ea:5b:92:3c:39:87:12:ae:
                    96:d4:16:af:cc:25:fe:d5:c6:38:9a:2f:8a:99:69:
                    c1:87:6b:46:d9:92:c9:aa:d3:bd:1b:6f:55:44:04:
                    05:73:a1:74:24:67:00:ef:b8:51:3e:c9:9a:81:98:
                    71:c8:84:44:bd:3e:27:f7:b0:04:4d:3c:de:ba:24:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:A5:A7:24:74:40:EC:DB:EC:97:85:16:DE:53:76:C1:E4:54:33
            X509v3 Authority Key Identifier:
                keyid:BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGljOa246Ii-lQQOHIPaf5W7s4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:65:7f:14:64:3a:51:9f:13:1a:04:f4:06:58:f7:85:be:
         6c:62:93:28:a6:d6:78:a3:52:be:17:15:ac:8b:47:54:cd:89:
         a4:7c:b7:cf:43:f7:60:c4:0a:22:f7:a4:b5:cc:af:ca:7b:40:
         02:6a:01:b5:b0:fe:25:8e:57:2d:8b:b9:f9:ca:88:f8:80:df:
         04:1d:5a:d9:3e:bf:cd:80:cf:5a:d6:d7:0f:1c:c0:71:af:19:
         03:6e:89:50:4c:aa:00:28:06:8c:2c:36:96:4f:f3:4c:15:94:
         91:a7:55:5c:28:9b:4b:b7:5b:43:ad:6b:8f:9c:a8:3f:68:81:
         97:cd:fe:a4:70:10:22:7f:90:cf:06:c0:3b:5b:c5:17:30:2e:
         a9:e9:50:17:a1:6e:48:ad:3e:31:e8:d6:db:f0:b4:e5:37:a8:
         88:d7:1d:2d:1b:34:32:a2:62:c8:0f:08:a8:1e:77:79:16:92:
         2c:2a:33:8e:b2:9b:71:54:0b:88:ff:d3:1c:08:0e:4f:9a:52:
         fc:2a:8a:cf:00:24:9a:ce:38:4f:5d:f5:a2:40:37:d0:11:b9:
         86:cf:7e:66:69:a7:cb:9d:ec:fb:14:e6:1f:69:08:40:c1:f9:
         b8:8f:9f:6d:c0:c9:58:13:11:10:26:96:b4:9b:da:17:f3:2c:
         25:c8:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----