Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.mft
File:                     NsqBo3iofgQ8SIP73vTunxOgJKc.mft (raw, json)
Hash identifier:          tMOlDTmLEz6zHth/G1XDhYfo82+VXSjwRqnGYo4/ihs=
Subject key identifier:   B4:86:DC:4A:98:CD:3D:1B:13:ED:39:E8:25:6F:E6:02:D3:E8:06:3E
Authority key identifier: 36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7
Certificate issuer:       /CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
Certificate serial:       01905D00F7EADA794E64ABFA1623624D217B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.mft
Manifest number:          080D
Signing time:             Fri 28 Jun 2024 04:01:02 +0000
Manifest this update:     Fri 28 Jun 2024 04:01:02 +0000
Manifest next update:     Sat 29 Jun 2024 04:01:02 +0000
Files and hashes:         1: Hnckx1ra-TlPqBCG1BT3q66GuWE.roa (hash: hlnW4zsLpyzt7qTq2jx4Pmm6E1vxDEfMYiJdk+177fI=)
                          2: NsqBo3iofgQ8SIP73vTunxOgJKc.crl (hash: US31+M0Vx9a8P96ciF76MRNLTgw747rVUA/8fffALiY=)
                          3: V8SpHQV-GcUuxGXxA3wVm-DRUGI.roa (hash: YC7VD1xVTDucegRVM3dkSRLrZtbs3DPp6uN7ggsoqOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5d:00:f7:ea:da:79:4e:64:ab:fa:16:23:62:4d:21:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
        Validity
            Not Before: Jun 28 04:01:02 2024 GMT
            Not After : Jun 29 04:01:02 2024 GMT
        Subject: CN=b486dc4a98cd3d1b13ed39e8256fe602d3e8063e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:b4:ea:d3:01:f4:e5:e5:4c:34:ca:0e:13:
                    93:ca:3f:cf:92:84:0d:18:66:09:4c:a9:e3:d8:55:
                    e4:ed:98:f7:a0:10:b2:96:52:f3:e6:db:d2:5b:68:
                    55:05:42:70:ea:75:4a:36:b5:4c:a0:be:93:9d:bd:
                    d3:96:9a:08:5c:69:22:70:ea:62:f4:3a:a1:54:4e:
                    70:d7:84:a1:c9:10:da:f6:5f:30:bd:15:f0:92:3c:
                    9a:f6:f1:3e:d4:c4:f5:63:f1:81:16:f3:49:e3:57:
                    34:b5:7d:99:be:f7:b1:74:10:5c:61:23:81:74:96:
                    65:8c:36:2d:6b:72:59:2b:b0:24:91:84:7a:a7:56:
                    a8:4c:ea:7c:b1:76:6a:e3:48:1b:c2:39:a9:2b:f3:
                    c9:ff:3a:06:5b:bc:4e:98:54:5d:38:7e:d8:42:a3:
                    2f:f5:90:6c:d2:5d:c0:dc:a3:2e:44:3a:0e:41:82:
                    fc:57:47:40:e6:ef:f7:57:c5:8c:43:49:0a:44:10:
                    0b:97:94:1f:73:1a:36:18:09:be:f8:ae:30:7e:42:
                    4f:69:e8:e6:0d:c5:22:c8:e3:bd:36:5e:86:e3:80:
                    a3:1b:c3:3f:4c:58:55:58:31:78:c4:a4:b9:01:a4:
                    dd:ab:1f:bd:e8:ad:de:e6:45:94:cf:57:e1:cb:e7:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:DC:4A:98:CD:3D:1B:13:ED:39:E8:25:6F:E6:02:D3:E8:06:3E
            X509v3 Authority Key Identifier:
                keyid:36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:73:32:c9:0b:72:b8:a6:02:b2:62:f1:e1:96:37:d6:ec:8f:
         7d:0f:8e:ba:5c:79:4a:0c:c0:ec:62:55:71:8b:b6:08:8c:61:
         25:1b:b2:db:8d:14:38:b7:e4:79:5b:a1:0b:c3:c9:f5:ec:27:
         86:ad:81:1c:3c:83:04:da:df:bb:39:37:3a:4e:bf:cc:ae:87:
         7a:6f:02:1e:65:3e:f6:04:bf:19:25:e8:51:4c:e5:d9:19:7c:
         50:81:7e:4b:12:9f:f6:52:ef:1b:bc:de:9d:14:28:a0:ca:70:
         29:5b:df:fe:ef:b1:fc:e4:03:fa:52:8f:ac:57:37:50:e3:96:
         42:52:f5:47:0b:ca:e6:96:30:03:dd:85:bc:2a:5f:f3:4b:4d:
         3d:12:fd:d8:e3:ba:00:cb:9b:29:f0:f1:b7:84:4d:81:4a:f0:
         6e:b7:b5:2a:6d:b8:04:c3:6f:51:03:0b:da:ab:3a:4f:36:b9:
         87:14:5f:b9:cb:a5:15:ea:06:ac:bf:de:1d:a6:c4:07:7e:d4:
         50:37:40:87:0f:14:cc:04:7b:81:dd:55:15:4a:99:14:b7:c5:
         9f:ee:ea:9c:1c:e2:0e:8a:eb:ce:c6:ee:35:18:4a:4d:5f:e8:
         da:16:6e:a8:8b:fe:fd:e7:a9:49:e0:84:99:47:39:4a:fd:84:
         4b:4a:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----