Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.mft
File:                     mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.mft (raw, json)
Hash identifier:          petXuu16w7/tN26tNAKTCn96zXqZ2j7uF7WJhNuJwQA=
Subject key identifier:   EB:B8:46:2F:15:C3:BC:0C:94:44:2A:3D:D7:F4:FB:CF:10:62:5A:95
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Certificate issuer:       /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial:       018EDE32A6A8BB07E89C40B510F404F7670B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.mft
Manifest number:          0F39
Signing time:             Sun 14 Apr 2024 20:00:45 +0000
Manifest this update:     Sun 14 Apr 2024 20:00:45 +0000
Manifest next update:     Mon 15 Apr 2024 20:00:45 +0000
Files and hashes:         1: JSzIYTwkhdAi8Nehl0BpE3OiQ7s.roa (hash: UhNU2G/94OhXf3+hmSYWDE2EE3udJ7UUJATo0PuiekM=)
                          2: mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl (hash: M/guWGp0J727nu+slBtbsfmf5FlCXCye8NvrXVqgLec=)
                          3: yQH6QPVvz1dc6OWqxLEnZJyNXgw.roa (hash: QPaTS5vb+5S3wrqo9w5VU1CnMNKtwez7mjejplsY5Vo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:de:32:a6:a8:bb:07:e8:9c:40:b5:10:f4:04:f7:67:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
        Validity
            Not Before: Apr 14 20:00:45 2024 GMT
            Not After : Apr 15 20:00:45 2024 GMT
        Subject: CN=ebb8462f15c3bc0c94442a3dd7f4fbcf10625a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:95:aa:17:e3:f7:ee:89:0a:ab:23:8b:54:
                    00:79:f6:1b:2c:98:b5:09:90:66:9b:87:80:40:91:
                    ab:73:02:20:39:b3:18:2d:1c:fc:42:03:a8:b0:ad:
                    ac:89:d1:a5:9f:4f:bf:30:18:95:4a:b1:67:aa:5d:
                    6e:9f:8c:e7:2b:76:7c:fe:80:d8:da:4b:66:46:d0:
                    0e:72:2d:2e:da:e3:40:46:5c:ff:66:6d:4a:06:a0:
                    62:72:32:28:0a:08:7f:2f:ba:e5:70:b7:17:97:5c:
                    f1:77:e0:12:a7:73:49:d4:52:f2:fb:9d:7e:2f:e0:
                    d7:20:86:f0:4b:09:79:e6:3e:3d:13:27:4e:67:4e:
                    9d:7a:7e:50:3f:f4:28:a6:75:c4:46:2e:a6:5b:81:
                    54:8e:b2:58:37:67:b5:8b:4a:69:02:49:ea:3d:5e:
                    95:7a:7b:cd:86:bb:3c:b0:64:e6:9a:16:a6:09:e0:
                    71:aa:02:88:cc:c3:f6:04:58:0a:fc:a7:cd:5f:e0:
                    54:ab:08:44:f4:85:31:0e:a2:a5:19:b1:e0:b3:f8:
                    9b:f6:89:3f:7f:42:42:5a:ad:87:60:14:67:02:bc:
                    01:60:6a:38:93:3a:dd:0e:a6:64:a5:bc:b3:6d:5a:
                    a7:1d:f3:65:a7:e0:7a:ed:12:cd:06:6c:2f:6b:e8:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:46:2F:15:C3:BC:0C:94:44:2A:3D:D7:F4:FB:CF:10:62:5A:95
            X509v3 Authority Key Identifier:
                keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:b7:b0:41:cc:70:49:51:a2:63:3d:fe:69:19:86:df:64:
         65:6e:a9:84:16:09:ca:96:72:f0:ee:0f:81:ef:2f:7f:ec:81:
         81:79:2e:d9:f4:6b:43:99:33:e8:68:42:2b:68:8a:d4:f5:eb:
         46:9d:44:3e:39:17:12:0a:45:3f:fb:f9:9b:d5:b7:ce:85:f7:
         66:b2:8f:40:36:10:44:f4:b9:48:b5:86:39:63:10:24:d7:3a:
         1b:91:9b:3e:4f:82:79:44:47:ed:9f:75:21:9a:70:29:1d:fd:
         74:5a:5d:a8:ec:d7:65:47:cf:b0:46:41:89:6d:9e:95:80:23:
         fc:70:a7:b7:2d:de:00:d0:a3:14:15:9e:66:c5:30:49:e1:a5:
         1c:5c:13:f7:ab:d3:a5:18:51:b8:bc:e3:2a:10:fb:22:3d:90:
         57:eb:04:45:d2:c2:e5:0f:f4:99:e3:70:4d:e9:e4:45:0c:1f:
         b9:94:fd:8c:38:2e:ff:27:8f:05:a9:69:07:be:29:7f:dc:31:
         f8:bb:97:de:fd:d8:23:f6:dd:1e:02:3b:e6:5d:26:2d:9a:58:
         70:f9:24:6c:3f:5b:48:fa:80:45:75:27:16:78:fe:0f:2c:45:
         d9:8b:a1:49:e5:56:39:ab:c4:e5:ea:b6:13:33:35:57:ef:30:
         49:52:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----