Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.mft
File:                     BU8euLMHJ5b-5CkihjoLtml_XJc.mft (raw, json)
Hash identifier:          afS1sK+Pfq0fbH9LjfJSqQlZ63AMwfJPjInHr5eMZXU=
Subject key identifier:   F1:8C:35:4F:51:62:BA:78:40:47:D6:12:EE:AF:F3:74:4A:2D:E8:9C
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Certificate issuer:       /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial:       018D86E02D622F23CA571171DFABE2739D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.mft
Manifest number:          0864
Signing time:             Thu 08 Feb 2024 04:00:54 +0000
Manifest this update:     Thu 08 Feb 2024 04:00:54 +0000
Manifest next update:     Fri 09 Feb 2024 04:00:54 +0000
Files and hashes:         1: BU8euLMHJ5b-5CkihjoLtml_XJc.crl (hash: VJMA/MazKLsq9uykWEPiHlsGA9yvHA7isgtIHx3grlE=)
                          2: Dh46ZNEJhY0yZsonNA1WuwYuZmw.roa (hash: W3Qog7pcz/mj/d+++y3CDuJxSohZ1sCRXLB7ldW4EhU=)
                          3: XjKYPzuKwA32GxfmOxvZe14ZJkI.roa (hash: jz5Y6XbNQMmsz+txFCH/rEV+PiPAOe20tDCHfSKn+PA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:86:e0:2d:62:2f:23:ca:57:11:71:df:ab:e2:73:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
        Validity
            Not Before: Feb  8 04:00:54 2024 GMT
            Not After : Feb  9 04:00:54 2024 GMT
        Subject: CN=f18c354f5162ba784047d612eeaff3744a2de89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:46:ef:56:b9:82:75:c9:34:34:da:e7:4b:
                    ea:82:11:02:7e:04:a7:76:06:87:18:78:2e:11:0b:
                    17:25:c0:77:81:c2:7c:4f:49:81:bb:df:29:00:8d:
                    54:aa:1f:1a:77:64:a2:fe:2c:1d:57:e7:32:ce:87:
                    9f:64:fb:a1:42:0b:9f:fe:5c:e7:f2:fe:48:f2:1b:
                    64:c2:de:03:67:64:e0:13:aa:57:7a:6e:d5:b8:6c:
                    6b:0e:bb:fe:96:54:ac:e2:ed:30:6e:26:8a:5e:eb:
                    d0:bd:2d:8f:61:ad:43:4a:50:5f:61:1c:ac:69:a6:
                    1e:11:dd:df:49:1f:c1:8d:f4:70:8f:09:f7:f0:d3:
                    fb:7e:b5:c4:1d:78:73:bd:9b:d8:e7:90:3e:9d:95:
                    32:b9:e8:8b:ed:87:a5:45:86:c2:e3:a3:d9:47:da:
                    93:62:fe:9e:c4:68:cb:57:45:e4:1f:81:02:f5:88:
                    e8:b2:c2:f0:53:25:74:d6:9d:35:8a:75:ca:ff:32:
                    06:54:30:a0:5e:e8:f6:c1:f8:42:d2:4c:13:0f:2d:
                    1a:f3:3f:a5:1b:9f:c3:0f:b0:1c:43:f4:19:52:d9:
                    a2:a6:db:85:38:97:9c:1f:e8:2a:2b:ce:b7:4e:9a:
                    37:f6:b7:aa:01:20:60:26:a5:20:39:d3:4a:b1:ef:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8C:35:4F:51:62:BA:78:40:47:D6:12:EE:AF:F3:74:4A:2D:E8:9C
            X509v3 Authority Key Identifier:
                keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:89:33:6b:c7:fe:ba:0d:05:51:20:05:75:23:d9:5e:11:6a:
         1f:54:ed:e6:7b:1c:6d:29:22:52:b3:5d:13:14:6e:97:6c:9f:
         c7:54:78:78:57:d9:9c:51:a7:d3:bc:49:b8:0e:5b:25:08:70:
         4b:d3:7f:09:99:78:bb:f3:4c:12:bf:8b:d1:ca:01:42:4b:df:
         ae:03:0a:d1:58:5c:0a:cb:bc:7b:4f:77:1b:d5:f8:6f:95:ae:
         4b:2e:09:ef:40:c1:6c:71:6f:a0:82:86:40:7c:a5:47:3b:d3:
         89:7c:70:a4:99:2e:cb:9c:85:ba:23:5f:ea:61:18:12:be:44:
         4a:e3:e9:37:bc:58:0c:df:0b:a7:e7:25:f1:b8:77:53:05:88:
         a9:c1:6d:1c:bf:0b:bc:ef:b4:8e:6d:fa:62:3b:3b:d8:b3:47:
         4c:3d:fb:5e:a4:eb:76:7c:07:79:7b:2b:7d:2e:0f:77:24:04:
         dd:b9:b0:8e:f5:fd:65:dd:07:0e:9d:4d:2f:fd:aa:5f:17:56:
         68:f5:b1:b4:35:e8:7d:db:68:eb:bb:7c:96:d1:d0:38:e6:6c:
         e9:09:b0:fb:91:d5:08:7e:e9:8b:ee:87:8e:f7:9a:89:58:7f:
         14:33:9d:05:a0:ff:1e:86:f8:53:ed:98:b2:2c:ce:8e:3d:fd:
         64:4c:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----