Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
File:                     IvoceuLmneV2nDlpsLD49SW1qwU.mft (raw, json)
Hash identifier:          g6b61iE8/kqu/5wczub8YbeEme9rjodr1MOBRgfkGGo=
Subject key identifier:   BB:23:A2:E6:54:AC:02:9E:AB:FA:A3:86:12:7F:5E:67:03:CA:18:A5
Authority key identifier: 22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
Certificate issuer:       /CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Certificate serial:       018E73FBA14210AF6164111C8D443C05D70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
Manifest number:          02AC
Signing time:             Mon 25 Mar 2024 05:00:54 +0000
Manifest this update:     Mon 25 Mar 2024 05:00:54 +0000
Manifest next update:     Tue 26 Mar 2024 05:00:54 +0000
Files and hashes:         1: IvoceuLmneV2nDlpsLD49SW1qwU.crl (hash: TIjUl3vtAhKLp30TG1olFhY+Thpkjenye8jlZ7gucFU=)
                          2: vlR8nKaATk_z_r9H0ES_iscFHs4.roa (hash: ED9K9xqYedBzpjELbl6txrapano9jZMXiYBkMZragcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:73:fb:a1:42:10:af:61:64:11:1c:8d:44:3c:05:d7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
        Validity
            Not Before: Mar 25 05:00:54 2024 GMT
            Not After : Mar 26 05:00:54 2024 GMT
        Subject: CN=bb23a2e654ac029eabfaa386127f5e6703ca18a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:76:56:5b:a8:37:7e:82:c6:1e:04:aa:4b:
                    ad:7a:21:33:14:7e:e0:f2:f8:6f:91:fc:34:85:34:
                    25:a7:08:17:36:33:42:85:cb:f6:f9:7b:6c:38:83:
                    8d:6f:f0:71:65:6c:63:c9:5b:8a:9c:ae:0c:e0:a1:
                    9e:54:99:63:be:11:b4:88:56:00:8c:32:e8:09:6d:
                    cd:b9:54:12:e0:44:0b:be:09:72:19:cf:35:c6:f8:
                    08:73:68:99:ac:c1:65:0b:15:c0:62:1a:05:1c:52:
                    f8:64:1e:5e:0a:d5:a2:35:cd:c2:85:f3:c7:c1:da:
                    60:7b:f8:b7:53:8f:9a:10:28:1a:99:4d:48:e2:50:
                    8f:ac:6c:a3:3e:e3:15:46:84:93:78:78:cb:7e:ba:
                    25:0b:ea:cb:96:cb:79:3f:42:31:42:e0:7a:3e:03:
                    2a:af:19:ca:2a:0b:dc:54:73:82:66:01:f5:12:7d:
                    37:af:f6:f2:e3:b2:c8:d9:64:ca:58:8e:e3:8a:fa:
                    78:2a:65:2c:9f:80:8d:7e:8d:94:5e:eb:71:5a:1f:
                    cb:94:1b:ba:47:0a:28:7f:36:49:a2:52:b9:0b:76:
                    ae:98:80:d3:94:0e:8f:dc:59:82:83:6d:1f:bc:71:
                    21:55:31:44:85:bd:18:73:2d:e1:c4:df:7f:bc:56:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:A2:E6:54:AC:02:9E:AB:FA:A3:86:12:7F:5E:67:03:CA:18:A5
            X509v3 Authority Key Identifier:
                keyid:22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:13:99:40:7d:ca:14:f7:6d:06:f7:e2:7b:52:4e:82:ea:
         ce:f3:bd:ec:1a:30:3b:83:de:47:7c:a4:d2:d0:d8:54:24:96:
         3b:bc:8d:dd:1a:16:56:20:c2:19:30:bf:f3:15:4f:c3:fe:9c:
         12:ca:4d:ac:63:b1:8f:d3:66:de:e6:9d:99:cc:55:52:20:84:
         fc:ba:8f:e3:ab:9f:d6:ae:9c:a2:1f:c0:fe:f2:c3:0c:e6:00:
         07:d9:48:ee:85:c7:ac:96:d7:b6:7e:80:22:14:cc:51:e5:f6:
         8e:2e:62:f4:04:ef:93:a5:89:4a:20:a2:5a:b1:3c:90:82:f8:
         30:9c:5e:cd:83:68:e9:cb:6d:75:74:8c:f4:c3:51:cd:c7:67:
         70:31:89:df:3d:35:b6:7c:25:c7:80:f4:ba:52:26:f6:8d:9c:
         3a:a8:0b:e3:55:8d:59:53:2b:26:3e:7f:82:97:c4:ec:f7:e5:
         b3:ea:58:a3:4b:94:28:7e:14:56:bd:56:55:dd:41:13:ee:c8:
         72:d0:48:ba:ad:10:30:d3:c0:50:46:c3:1c:6f:56:5d:be:a6:
         1a:96:20:8a:ca:4c:48:25:0d:ac:41:1a:34:fb:ca:ae:f7:91:
         21:79:11:bc:ca:76:ce:43:7b:0a:b0:04:7d:5d:71:58:6a:4c:
         60:bc:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----