Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
File:                     fPWJoxF0uISmT9CRrVwsulVFu9w.mft (raw, json)
Hash identifier:          GpYr3d1F9NCS5BmRcp4smODYAzMoMv0oXw+Ake3r/Eg=
Subject key identifier:   50:7D:05:9F:E4:00:0B:6D:DD:4B:25:95:90:B0:F3:24:0D:BB:45:C9
Authority key identifier: 7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
Certificate issuer:       /CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Certificate serial:       018F2795253ABB04C244B2233D995B6578CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
Manifest number:          08B3
Signing time:             Mon 29 Apr 2024 02:00:36 +0000
Manifest this update:     Mon 29 Apr 2024 02:00:36 +0000
Manifest next update:     Tue 30 Apr 2024 02:00:36 +0000
Files and hashes:         1: fPWJoxF0uISmT9CRrVwsulVFu9w.crl (hash: P7sPCggRT6YmVAPfPSUkgMkyeU06Ag9wjYl111yp8UM=)
                          2: l7gpHa6bLxNbNGbEySco-S3hVIg.roa (hash: XGmxfD0cNQWMmDYJ0G3iEkIiecyovXpHoExMfQFLC/Y=)
                          3: vixhGnmWI7JMMiZjm-UdvsaIMhY.roa (hash: ELb1Ma1bMVhIemvoF9B3eSpkJpK1kQxve7ZbAaAqocU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:27:95:25:3a:bb:04:c2:44:b2:23:3d:99:5b:65:78:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
        Validity
            Not Before: Apr 29 02:00:36 2024 GMT
            Not After : Apr 30 02:00:36 2024 GMT
        Subject: CN=507d059fe4000b6ddd4b259590b0f3240dbb45c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:92:60:96:4e:8f:83:d5:3f:26:5e:43:25:
                    70:b5:a2:80:27:0c:ad:2c:d4:fb:c3:a4:60:3c:4e:
                    1f:32:d9:56:60:43:94:db:71:01:ca:c8:3d:c5:cb:
                    d2:65:7c:8a:cf:b1:dd:2f:41:cf:50:a8:b6:d4:14:
                    5b:c1:c1:1d:a7:fe:b6:3e:ad:e2:ea:83:72:c0:81:
                    7c:01:97:3e:04:2c:84:ba:0b:5c:35:5f:21:3b:4a:
                    86:d7:af:cf:49:d5:73:13:f2:66:c2:01:eb:5b:6c:
                    0b:fc:3f:84:bf:81:14:b5:65:be:54:6b:b6:3d:11:
                    13:bc:60:ad:86:ea:52:87:59:c3:df:d8:86:f0:e4:
                    6b:7c:da:b9:ed:2f:1f:13:a8:c3:bf:47:81:e1:57:
                    cb:d5:82:54:e8:4b:3e:0a:15:80:87:ef:6a:a4:da:
                    01:11:e3:f4:8e:1b:24:67:db:dd:a3:05:d6:2b:c0:
                    61:63:5c:c8:02:17:a6:18:bd:7d:ef:50:5a:52:f8:
                    76:6d:b9:ce:a7:2e:7c:98:23:1e:fc:d6:65:b9:f7:
                    3a:c8:ca:91:f3:74:09:83:91:bb:f5:b6:0d:d5:18:
                    03:72:08:6a:d8:33:71:a7:b9:28:32:e2:b6:ea:74:
                    1b:b9:51:4e:23:b3:0a:56:81:78:7e:57:5b:34:d9:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7D:05:9F:E4:00:0B:6D:DD:4B:25:95:90:B0:F3:24:0D:BB:45:C9
            X509v3 Authority Key Identifier:
                keyid:7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:93:80:58:bd:b3:9c:93:fa:52:6e:54:20:ab:b8:ec:ee:56:
         d0:5c:b9:58:d2:d2:b8:4c:da:fc:22:fe:03:03:99:f2:1a:20:
         a3:9a:71:e2:a5:f7:2a:30:00:13:84:a5:0e:4e:be:61:d5:47:
         3e:72:d1:94:97:e2:ac:4f:b9:96:dd:37:55:a1:fe:5b:74:6c:
         a5:3b:86:af:38:ac:44:0b:84:24:2d:85:bd:98:a8:20:43:28:
         08:4f:18:80:dd:0f:c0:8c:9a:ad:16:a7:b3:ea:89:9a:d0:d3:
         bc:a8:4c:34:35:bf:c1:8e:c6:4c:e6:ec:60:d6:94:fd:4a:db:
         4d:f6:d8:d0:c1:6d:77:29:0a:d4:77:ad:e1:be:02:5e:0d:69:
         40:55:73:2a:bd:8f:e2:aa:88:20:ff:14:b7:c0:4c:9e:b9:fe:
         34:1e:fb:9f:78:be:e6:e2:4f:76:6f:c5:69:ce:68:33:ef:eb:
         bf:96:ff:64:b7:5f:8d:26:08:24:d1:9c:1c:12:3e:cb:37:99:
         fc:37:6d:30:fb:94:da:ae:43:da:e9:22:a0:f0:29:e5:f5:a4:
         01:04:57:10:40:87:3b:6e:24:73:55:ee:08:c3:4b:b9:7f:c4:
         71:1f:8d:46:7a:4a:7d:0a:a3:ec:73:68:32:cd:ed:0f:28:7f:
         d6:d1:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----