Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/z6KwFgug00B83Q7W4xny9Davfw4.mft
File:                     z6KwFgug00B83Q7W4xny9Davfw4.mft (raw, json)
Hash identifier:          R3w5rnKf/9rHQ/rJYzz6k0q1DkK5k7CTiiEThx2p1m0=
Subject key identifier:   B8:60:E5:89:28:68:56:A6:FC:DD:BD:8F:7E:3B:B4:05:CE:23:EB:10
Authority key identifier: CF:A2:B0:16:0B:A0:D3:40:7C:DD:0E:D6:E3:19:F2:F4:36:AF:7F:0E
Certificate issuer:       /CN=cfa2b0160ba0d3407cdd0ed6e319f2f436af7f0e
Certificate serial:       01923248E24FFAB5885897A67C1092D29F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6KwFgug00B83Q7W4xny9Davfw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/z6KwFgug00B83Q7W4xny9Davfw4.mft
Manifest number:          12D9
Signing time:             Fri 27 Sep 2024 07:01:30 +0000
Manifest this update:     Fri 27 Sep 2024 07:01:30 +0000
Manifest next update:     Sat 28 Sep 2024 07:01:30 +0000
Files and hashes:         1: 5q2pLV8FHxTyn2kWG7KNP2PVVR8.roa (hash: YMqkDxcDl7r+QPJC5bA0X3KA7sgfsKJJqGDTi2nP0CA=)
                          2: z6KwFgug00B83Q7W4xny9Davfw4.crl (hash: xLWGOb/R7wWs+UGkJp9wGdShAkR+WsYPVyNycjG6Pmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:32:48:e2:4f:fa:b5:88:58:97:a6:7c:10:92:d2:9f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa2b0160ba0d3407cdd0ed6e319f2f436af7f0e
        Validity
            Not Before: Sep 27 07:01:30 2024 GMT
            Not After : Sep 28 07:01:30 2024 GMT
        Subject: CN=b860e589286856a6fcddbd8f7e3bb405ce23eb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:39:8e:b0:44:58:fa:91:d9:f4:d9:88:7c:
                    60:1b:56:77:39:e5:11:1a:91:ab:54:e1:c7:a2:a4:
                    2d:07:87:a7:ae:14:68:c5:23:9c:70:c9:00:88:94:
                    47:f3:77:7f:ad:df:c8:fb:27:9b:2a:17:f2:39:95:
                    43:f4:3f:0d:76:f9:4f:74:b2:37:68:47:8e:0f:68:
                    97:95:21:36:04:ac:b7:b8:8a:84:37:72:82:06:a1:
                    05:94:7b:8b:50:33:c7:e9:eb:e7:73:6c:c3:ea:c7:
                    81:02:d5:ec:37:2a:1e:cd:5e:ea:3d:13:36:01:6e:
                    0c:80:0e:4b:a3:92:cb:b2:42:46:d3:8a:d5:12:8e:
                    4a:1d:ad:19:cf:cf:b1:8c:f1:cb:d3:81:ac:ae:8e:
                    f2:5c:5f:e8:79:97:13:1d:cd:7b:48:55:da:1c:93:
                    93:fe:4b:fb:6f:6a:6d:70:a7:02:30:30:b7:08:6c:
                    2a:91:a7:2e:1c:15:34:88:83:bf:e7:72:8a:72:57:
                    d4:75:20:a9:2d:7c:b7:5f:bd:5c:80:24:84:58:88:
                    0a:db:b7:e9:62:3f:df:db:a7:d3:f1:e7:7d:9e:46:
                    2a:72:dc:83:c3:55:d5:fe:b6:e9:6f:58:0a:2f:2e:
                    a4:6c:67:c5:ef:1e:41:e3:d7:95:aa:64:da:02:d7:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:E5:89:28:68:56:A6:FC:DD:BD:8F:7E:3B:B4:05:CE:23:EB:10
            X509v3 Authority Key Identifier:
                keyid:CF:A2:B0:16:0B:A0:D3:40:7C:DD:0E:D6:E3:19:F2:F4:36:AF:7F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6KwFgug00B83Q7W4xny9Davfw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/z6KwFgug00B83Q7W4xny9Davfw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/z6KwFgug00B83Q7W4xny9Davfw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:02:68:63:fc:a9:92:c5:c9:7c:e3:16:9d:4f:05:c5:76:5d:
         bb:47:2a:82:69:e4:e1:78:c2:42:76:c1:79:58:a7:7d:bd:a1:
         6f:ed:96:71:40:e8:7a:d5:f5:14:f0:68:79:5c:33:cd:85:7c:
         bc:36:a8:80:45:74:57:3e:23:5f:60:ab:f2:23:7e:3b:dd:1f:
         22:7c:e9:8b:78:62:6c:dd:b2:01:2e:bf:12:37:d6:1e:e6:b8:
         e0:04:d7:73:31:c9:e7:ec:81:02:0d:7c:a1:f1:de:9b:7b:72:
         bf:86:f1:ef:7f:3e:85:45:75:d2:d4:35:86:b2:ef:f1:f8:55:
         d0:e3:1f:2b:4b:b5:fe:45:cb:49:78:60:ed:13:89:42:a5:8b:
         8d:56:98:54:50:72:f2:11:ad:af:5c:14:1b:df:f8:7c:74:6a:
         27:bc:83:e0:3a:9d:e5:38:80:43:52:ec:06:86:cb:37:57:b6:
         c8:f2:42:ba:91:07:0d:79:3a:06:72:fc:4e:97:1a:8a:03:6a:
         5a:54:39:d9:59:46:45:87:ea:3c:a9:70:4c:db:c0:05:6f:b7:
         1c:7c:77:0c:17:20:e1:ae:02:69:02:2c:04:b8:06:0e:09:2a:
         3e:8f:f8:03:28:46:ba:bf:40:30:97:c7:2f:33:62:c5:5e:cd:
         46:c4:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----