Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
File:                     LHbgyPbLch47zyARujqvuioQF9s.mft (raw, json)
Hash identifier:          ZX0lzrkyliGj4PzgOWX45MVVYRDomIrZ0+VzHWRQD0g=
Subject key identifier:   B5:08:8E:3C:32:7B:82:63:11:EE:76:36:8E:11:53:20:B0:77:8C:35
Authority key identifier: 2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB
Certificate issuer:       /CN=2c76e0c8f6cb721e3bcf2011ba3aafba2a1017db
Certificate serial:       0191731829D9FB7794941449C9B5DF75D995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHbgyPbLch47zyARujqvuioQF9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
Manifest number:          0175
Signing time:             Wed 21 Aug 2024 04:00:48 +0000
Manifest this update:     Wed 21 Aug 2024 04:00:48 +0000
Manifest next update:     Thu 22 Aug 2024 04:00:48 +0000
Files and hashes:         1: LHbgyPbLch47zyARujqvuioQF9s.crl (hash: lsRFQxIdM5i/pzGRAJOs9mQP1RCHukXKGJhtLgvZulI=)
                          2: RGrsS39pgprbePyaLzZVVlgSbBk.roa (hash: TgZrS1uzy3jy67hyWUgYfA6ksSLpNSzEn+tIXer+bss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:73:18:29:d9:fb:77:94:94:14:49:c9:b5:df:75:d9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c76e0c8f6cb721e3bcf2011ba3aafba2a1017db
        Validity
            Not Before: Aug 21 04:00:48 2024 GMT
            Not After : Aug 22 04:00:48 2024 GMT
        Subject: CN=b5088e3c327b826311ee76368e115320b0778c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:ac:98:3e:0f:6f:49:f8:a6:ae:fa:4e:dd:
                    98:e4:5d:4d:7f:fd:28:85:b8:e7:7b:f6:db:be:1d:
                    42:82:46:e9:af:3f:2b:ab:b6:ab:7e:07:b0:fc:28:
                    a0:3c:c0:4c:9d:24:dd:38:65:bd:3a:ad:da:66:23:
                    a2:bf:9c:1b:e7:29:1a:43:d8:c5:77:fd:2a:9f:c1:
                    5d:79:32:fe:10:1a:1f:48:f9:73:9e:17:4e:42:98:
                    f6:0b:ed:ed:9e:dc:ec:2a:0c:3a:0a:a9:03:d5:20:
                    dd:f4:0f:ea:a2:5c:3b:18:1e:f9:54:90:dd:f4:2b:
                    b1:de:ee:bd:fc:7c:e7:66:e9:89:24:7a:db:1c:cd:
                    3d:64:e6:2d:35:9a:2c:87:10:3a:6e:01:e2:75:f3:
                    b4:a9:55:b5:bb:4e:6f:76:20:f4:37:25:36:91:3f:
                    8d:58:3e:57:32:0d:59:d7:a4:68:19:59:60:99:84:
                    6b:f3:c0:80:06:a0:b9:f2:df:67:69:e0:93:92:07:
                    24:f3:76:6e:66:97:d2:c7:04:1a:fd:8a:6c:1d:fc:
                    67:c6:15:8b:48:a2:7e:05:0a:14:a9:d2:0c:0f:3a:
                    3b:69:c4:12:ea:c0:34:f8:aa:7b:68:55:8b:98:e5:
                    35:3d:b7:2a:2d:7e:da:41:e8:7f:36:ea:04:b6:ed:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:8E:3C:32:7B:82:63:11:EE:76:36:8E:11:53:20:B0:77:8C:35
            X509v3 Authority Key Identifier:
                keyid:2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHbgyPbLch47zyARujqvuioQF9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:7d:45:b9:f6:0b:83:5c:d2:fa:54:b0:98:e0:c7:ad:a0:
         61:61:ec:21:4a:6f:d1:f6:59:9e:c9:fa:c8:89:ff:18:60:47:
         0f:be:d1:6d:96:c9:b3:21:18:fe:af:af:cf:df:40:47:a5:4f:
         0a:aa:8a:6b:f3:a3:88:0f:e2:55:6c:e0:dd:91:d7:47:d0:8a:
         9a:53:15:ff:ab:71:ae:38:33:78:b8:04:99:af:94:11:f7:13:
         f7:7d:33:ed:13:68:e3:32:28:04:3d:70:43:0e:f9:1a:32:6a:
         75:6f:a6:8a:da:2d:30:47:9b:7c:93:d5:5a:1d:dd:0c:76:ee:
         75:d2:9d:aa:62:bc:26:bc:f7:c3:2e:30:e0:05:b2:d3:ab:2d:
         02:ba:67:67:04:db:cd:8b:f2:6c:1d:9d:f8:7e:d5:a0:3e:f7:
         73:9c:eb:91:8c:9a:51:e3:55:cd:70:7a:68:11:25:2c:3e:40:
         15:9b:6c:b1:43:86:06:56:08:23:5c:ec:d2:0c:11:9e:d2:31:
         d3:43:ae:57:e7:64:a0:6d:85:dd:30:29:e1:de:3e:5b:89:e6:
         43:9c:ab:6c:37:12:7e:c5:a4:13:da:48:c6:2e:20:56:2c:03:
         d9:86:ca:41:c9:d6:93:6b:0b:2c:e9:ab:a4:e8:75:98:7f:6e:
         bd:79:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----