Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft
File:                     AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft (raw, json)
Hash identifier:          g7sntwlvjsvJSAP+/wBH3w4PuTmYH5mHibT4jKlUjRU=
Subject key identifier:   42:EF:51:60:5A:EE:65:E6:E5:23:A7:E3:5A:28:40:88:27:6F:3F:B3
Authority key identifier: 00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
Certificate issuer:       /CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Certificate serial:       018E0CC7255F225425CCA40B87FEE9C57754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft
Manifest number:          10B5
Signing time:             Tue 05 Mar 2024 04:02:41 +0000
Manifest this update:     Tue 05 Mar 2024 04:02:41 +0000
Manifest next update:     Wed 06 Mar 2024 04:02:41 +0000
Files and hashes:         1: AJWk-PTUGIjkOUxfVkl5KV0vE6o.crl (hash: uM4TiVNlNuJDB3nLWqRzWHhOgW+9tQKr0ARf74pW92Q=)
                          2: cUm614ih1eT9cCzBH8QagpIviVQ.roa (hash: Ng4Vjs/zgi+KyloQvygCqSYzr19M1vYPZ7VGmrLBeTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:0c:c7:25:5f:22:54:25:cc:a4:0b:87:fe:e9:c5:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
        Validity
            Not Before: Mar  5 04:02:41 2024 GMT
            Not After : Mar  6 04:02:41 2024 GMT
        Subject: CN=42ef51605aee65e6e523a7e35a284088276f3fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:95:c7:fc:4a:cb:43:cf:30:df:40:f5:85:
                    e5:9b:9e:40:f8:06:e4:8c:dd:28:70:74:04:2d:d2:
                    62:09:d8:49:64:91:14:6f:62:ad:f7:48:55:37:49:
                    c9:56:07:35:e1:07:72:28:92:10:29:6f:39:a1:0a:
                    76:76:2a:01:f2:0d:55:46:76:f3:06:ce:93:92:da:
                    5c:45:1d:11:cb:e4:c0:33:b3:6c:00:da:f6:f7:c2:
                    cb:48:af:8c:c0:77:62:e6:b8:1d:c6:7e:cf:db:48:
                    af:e4:66:04:ca:ab:ba:f3:26:f6:92:be:66:56:8f:
                    5b:c5:18:6d:ec:e4:fb:4b:32:66:48:72:a0:ed:ab:
                    8a:82:71:ba:4c:55:0c:fd:7f:53:6b:c5:22:7c:11:
                    92:41:62:99:71:dd:bb:81:9c:56:a8:6d:04:5b:6f:
                    29:ca:d7:e4:27:79:d1:3a:b0:5a:3a:9d:c5:f9:ee:
                    af:80:8d:3c:ff:a6:9c:af:12:a7:7d:da:69:61:d7:
                    c6:6c:22:2e:c2:42:97:d1:e8:52:21:8a:c9:98:63:
                    65:e3:0f:47:60:3d:1e:40:b0:25:57:95:0a:cb:c1:
                    e2:5b:28:4a:7f:62:ee:f5:54:b8:10:ae:2c:25:de:
                    41:9a:63:35:bc:cb:7f:21:f0:95:e3:74:ef:65:bf:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:51:60:5A:EE:65:E6:E5:23:A7:E3:5A:28:40:88:27:6F:3F:B3
            X509v3 Authority Key Identifier:
                keyid:00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:40:0c:5b:30:14:5f:73:d4:66:00:c9:22:3b:a2:ad:ce:13:
         ce:63:96:5b:e7:35:3a:ed:fd:51:b7:a5:ed:bb:a1:2a:fd:7f:
         81:a3:d0:de:8e:fb:25:e8:83:f2:38:42:c3:7c:e8:72:8e:4e:
         dd:72:18:49:f5:e7:87:a3:16:f0:d5:1f:52:15:cf:a2:d7:3d:
         95:a9:cb:af:60:8c:f9:d8:00:c1:43:80:06:c7:88:06:ea:ff:
         d4:3b:92:18:96:44:68:4d:2a:8c:e4:08:f7:c0:cc:25:d7:91:
         e0:1a:f6:c9:4b:fb:47:24:77:1b:af:29:14:ea:6f:68:4a:c4:
         92:47:85:3d:53:03:ff:17:b6:35:35:b3:73:1c:3f:2b:45:56:
         52:d1:ac:54:0e:10:6d:77:16:c3:14:34:e7:40:60:51:b8:2b:
         3d:f8:23:a3:75:69:b4:98:13:d9:da:53:25:87:44:51:d8:6c:
         9d:a3:0e:f5:67:1a:22:f4:16:fb:16:85:1c:b4:e6:79:0a:41:
         04:b6:cf:a7:79:28:1c:1d:2d:f6:19:a1:4d:56:7b:1d:dd:f3:
         e6:46:12:dc:18:66:2a:c2:92:0a:33:33:ab:ab:ce:76:70:17:
         83:2f:59:7c:87:1f:ff:09:7a:db:c5:4d:e1:bc:da:dd:3d:06:
         d3:6f:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----