Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.mft
File:                     nu_wi1wGxlEnxD3KTktbp6VeF2o.mft (raw, json)
Hash identifier:          ATC2DriRqRVMgJcsVSJoXfe6jU0a1nZ9Jc/VN8SJdQs=
Subject key identifier:   F6:6C:39:25:37:B6:0A:AB:F7:22:AC:F5:18:46:29:D8:08:75:29:CB
Authority key identifier: 9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
Certificate issuer:       /CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Certificate serial:       018F7F8F00BD02351BA0185FDF8A47415B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.mft
Manifest number:          1177
Signing time:             Thu 16 May 2024 04:00:29 +0000
Manifest this update:     Thu 16 May 2024 04:00:29 +0000
Manifest next update:     Fri 17 May 2024 04:00:29 +0000
Files and hashes:         1: nu_wi1wGxlEnxD3KTktbp6VeF2o.crl (hash: RFNwEVpJeRyNm4tuVByJ7l7ln7cyYxQD9BqjlixCVlk=)
                          2: uAavNnaAOYtorU-NVNO29PyGpDE.roa (hash: ccrQ88b08wAl+XNuVQpVhPUiGMMdf+t02kURa756oYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7f:8f:00:bd:02:35:1b:a0:18:5f:df:8a:47:41:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
        Validity
            Not Before: May 16 04:00:29 2024 GMT
            Not After : May 17 04:00:29 2024 GMT
        Subject: CN=f66c392537b60aabf722acf5184629d8087529cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:64:f4:ba:e4:71:56:b4:64:41:6a:33:b2:
                    ac:07:b1:9e:3e:7c:5f:60:48:2d:9c:fb:93:a0:9b:
                    64:19:46:36:d9:8b:74:20:dd:35:ea:85:89:2b:e6:
                    79:f4:dc:40:fb:da:1a:48:3a:56:14:6d:0e:6a:3b:
                    a0:b5:29:a3:3b:86:51:ec:ca:18:cb:39:54:fc:3f:
                    51:8a:1d:f5:e8:a7:1b:b4:d0:13:2c:72:a2:9d:98:
                    e9:64:cf:a3:49:a7:a0:29:2f:60:ec:16:81:67:c1:
                    fe:3a:81:4d:d2:8c:e3:5a:a0:a9:8e:61:d2:bf:33:
                    ea:d9:e3:c2:00:ea:09:e0:8b:a8:a2:ee:01:c9:b2:
                    26:f1:4d:8d:e1:9a:47:83:1a:4c:b3:7e:33:eb:cb:
                    f9:39:7d:5d:15:b1:89:6c:19:f4:69:a2:be:6f:e8:
                    94:9d:ff:ef:d6:62:a9:46:4b:38:fb:e2:bc:dd:cb:
                    bc:7e:91:61:d0:9a:c8:50:f6:5d:10:8c:5b:47:29:
                    c7:6f:0f:f8:42:3c:05:5a:1a:09:3e:aa:80:ac:8c:
                    6a:4d:56:a7:90:f9:1a:4f:ee:65:36:6a:20:91:65:
                    3a:8a:8a:6d:58:ad:08:96:05:e7:57:fb:ea:5c:a3:
                    b0:82:f6:31:c8:58:b0:d3:b7:7d:fc:6b:68:98:f7:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:39:25:37:B6:0A:AB:F7:22:AC:F5:18:46:29:D8:08:75:29:CB
            X509v3 Authority Key Identifier:
                keyid:9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:92:0f:df:64:f4:ab:e8:49:16:f1:d0:c5:9d:ca:7c:b4:92:
         77:5b:de:72:96:42:a7:db:64:8c:03:79:60:e1:e9:92:7f:9a:
         7f:11:17:d7:19:25:3b:43:96:66:f2:b0:96:f7:29:d8:9e:c1:
         77:6b:4d:85:cf:4b:e0:eb:65:46:d1:92:c1:eb:4d:0b:ed:e1:
         9f:e0:26:ed:07:8d:d9:47:bd:76:66:26:22:1d:46:80:3b:82:
         00:97:90:dd:5a:c9:f3:30:a1:6e:05:33:a8:0f:52:98:0b:9f:
         fe:37:27:1d:40:7f:cd:f4:68:4a:4a:d6:cb:d5:31:fe:a9:35:
         f3:08:5a:62:ad:0b:17:8f:0a:6d:a8:12:66:20:ec:e3:f1:aa:
         0a:b7:7c:01:7e:21:63:35:af:ea:dd:7f:05:24:2e:18:48:cc:
         6c:05:7f:f6:6a:95:f7:cb:80:b0:9f:47:6a:44:ce:dc:f5:12:
         ca:db:b2:28:59:ff:28:ae:95:f1:2a:c7:b0:e5:28:13:0f:70:
         82:8d:a3:e5:a4:75:c1:e1:9a:0a:a8:c6:04:9d:54:3c:c8:82:
         ec:a4:93:5d:b9:b5:9d:5a:ab:54:1c:f5:b4:4b:58:31:0f:45:
         f4:c9:fa:cb:d0:70:33:33:2a:d0:36:3b:d8:b4:b8:21:fb:b4:
         93:52:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----