Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.mft
File:                     gEQkS_XC6EaF29IS8yFqgv-uDwk.mft (raw, json)
Hash identifier:          BbgpbcsVW0xc1jdhPcKQeEoboNu6b4qFCfQbeuYzu/M=
Subject key identifier:   2B:25:E1:91:F2:5B:83:FB:B1:94:F8:1F:8D:B7:48:74:14:15:32:58
Authority key identifier: 80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
Certificate issuer:       /CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Certificate serial:       0192FF6A3BCD3EC3833D4794A17E19467194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.mft
Manifest number:          0EFF
Signing time:             Wed 06 Nov 2024 03:00:05 +0000
Manifest this update:     Wed 06 Nov 2024 03:00:05 +0000
Manifest next update:     Thu 07 Nov 2024 03:00:05 +0000
Files and hashes:         1: QJaEA2oGA8ZeZw0zvQhUdLxjxJI.roa (hash: L/5BCD+JXEEA+6adFtfOvbeIlW4sPuu3SVZId95Qpt8=)
                          2: gEQkS_XC6EaF29IS8yFqgv-uDwk.crl (hash: 7b7unlRo0g0hkKJHbkoVaK61amj2Raig1qXDyydMlOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ff:6a:3b:cd:3e:c3:83:3d:47:94:a1:7e:19:46:71:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
        Validity
            Not Before: Nov  6 03:00:05 2024 GMT
            Not After : Nov  7 03:00:05 2024 GMT
        Subject: CN=2b25e191f25b83fbb194f81f8db7487414153258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:fa:01:36:0e:3c:80:9d:5c:db:38:53:22:
                    08:93:e5:d9:35:63:fb:a1:00:df:9d:6f:93:7d:c9:
                    07:95:96:2b:de:bc:b1:f6:aa:65:61:77:3d:73:50:
                    40:3d:b3:7e:fe:63:b3:e0:c7:97:49:54:59:ec:67:
                    fa:28:e6:cd:e7:20:f3:ec:04:93:0f:7c:b4:4a:19:
                    d1:78:1b:34:10:ac:cf:ca:d8:ab:23:87:12:c2:50:
                    09:a1:56:06:cc:cc:22:6b:b1:43:18:b0:53:7c:a3:
                    cf:80:a2:8a:ae:91:af:a3:45:96:e7:71:95:d1:6c:
                    92:48:63:af:8a:64:b8:aa:d6:92:bf:e9:ed:13:8a:
                    89:d1:31:ea:4e:1f:b5:18:d9:dd:b7:0a:be:5a:bb:
                    16:d2:fb:28:1c:d7:a7:63:89:40:25:68:84:cc:18:
                    ee:90:ee:b3:52:e6:1a:29:6b:ee:31:a9:a0:fb:9f:
                    31:02:e7:55:e7:ca:55:1c:d2:6d:5d:7b:0f:4b:7f:
                    2a:11:04:17:8d:ed:b2:5e:9a:23:f2:19:0a:02:5f:
                    42:64:38:29:41:ff:9e:86:36:59:ef:77:63:02:2e:
                    7f:dd:89:35:cd:9b:12:94:d4:e9:11:24:7e:6e:e1:
                    e5:04:27:d5:41:d0:85:1a:27:bb:97:ea:b4:ef:53:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:25:E1:91:F2:5B:83:FB:B1:94:F8:1F:8D:B7:48:74:14:15:32:58
            X509v3 Authority Key Identifier:
                keyid:80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:f7:3a:66:a9:21:4a:59:ef:f8:6a:63:aa:d6:c3:19:cd:
         ae:3e:03:c7:a1:42:cd:c7:50:a8:74:fc:b5:86:6e:11:17:b9:
         17:ac:23:e3:78:ef:51:60:6d:16:9f:da:31:2e:c6:b4:c9:2d:
         f5:74:ac:e3:a1:b8:45:3e:7a:b0:0a:57:47:43:0f:60:83:89:
         1e:e5:2b:10:81:c3:c9:3c:6f:a2:e8:29:33:35:35:c1:3a:84:
         83:3d:f7:44:aa:30:2d:e1:92:d7:5e:72:d4:c0:e3:26:8c:30:
         14:33:01:51:9a:78:05:b9:a3:6a:de:4c:ae:27:e2:c6:0b:66:
         cf:cf:f8:b7:5a:6c:23:02:a8:bb:e9:24:5e:93:cc:c3:5a:61:
         a5:80:28:4b:cb:cd:98:5c:18:15:c2:08:ee:61:9b:8f:fb:58:
         b4:62:b5:97:3d:c9:52:55:29:0b:1f:4c:5c:eb:39:bd:5a:ab:
         a3:00:b8:04:a0:32:7c:70:25:67:f0:0a:a4:3c:27:51:ea:76:
         2d:bf:99:06:a0:ef:72:17:39:67:c5:74:12:19:cf:f0:9d:32:
         e0:0a:c8:a8:80:1d:eb:14:e7:da:39:c1:f3:97:68:e0:40:6f:
         7e:58:5d:28:c4:c0:38:b5:76:67:90:c5:03:9b:38:e0:a9:7d:
         ce:44:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----