Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.mft
File:                     IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.mft (raw, json)
Hash identifier:          CDT/z1+rakGpV7/syWi6vbHpTA3R5sm9zw7dcKlX1fQ=
Subject key identifier:   63:90:FA:0F:FE:60:DD:1B:87:37:E1:9F:D0:1E:DC:0E:8E:CA:3D:3A
Authority key identifier: 21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46
Certificate issuer:       /CN=2145c7418668c725392fc63e632f4615fab3a346
Certificate serial:       018E06FB0C6D1BECB7367867210C3FC53DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.mft
Manifest number:          0DBF
Signing time:             Mon 04 Mar 2024 01:01:39 +0000
Manifest this update:     Mon 04 Mar 2024 01:01:39 +0000
Manifest next update:     Tue 05 Mar 2024 01:01:39 +0000
Files and hashes:         1: IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.crl (hash: R7zRcwyEDkBkMiVIDIUjxCR3KWGZv7qjBb72GFIV+lA=)
                          2: gT0-CnVn1qTt2W7RU5oL-oJPu2c.roa (hash: K5oMsUQ2p2VN4eQWLKziun9N33vKl7dchh0U98N1bP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:06:fb:0c:6d:1b:ec:b7:36:78:67:21:0c:3f:c5:3d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2145c7418668c725392fc63e632f4615fab3a346
        Validity
            Not Before: Mar  4 01:01:39 2024 GMT
            Not After : Mar  5 01:01:39 2024 GMT
        Subject: CN=6390fa0ffe60dd1b8737e19fd01edc0e8eca3d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:86:a0:cc:bb:0f:dd:60:d4:19:0d:c8:5c:
                    48:95:8a:fa:66:6d:3a:b3:a8:59:fc:91:ed:cc:af:
                    b7:e1:57:04:59:3a:c9:ad:24:39:2a:e5:c5:d5:bc:
                    ed:a4:8d:a5:f7:ec:73:64:91:63:4a:26:8a:78:f3:
                    7d:b8:ff:da:da:61:89:2d:72:c1:ae:e0:ae:42:9e:
                    da:b9:08:da:b9:37:44:b4:e6:0d:e9:bb:fd:f2:93:
                    1a:38:39:39:fa:a4:d4:eb:c9:9c:3f:65:65:c7:9f:
                    37:6c:d5:d7:19:e3:7e:2f:93:f7:13:d1:57:6f:2c:
                    fd:9b:4f:56:b7:db:01:4f:9c:a0:4f:cd:00:b8:69:
                    82:46:f7:ce:2f:0b:02:ae:37:69:0b:0d:c0:fe:15:
                    7a:4c:bf:c1:a6:d2:4d:45:68:d2:31:67:0a:92:52:
                    1c:fd:de:be:5c:1b:c9:2a:a3:8f:df:6e:f5:e4:f9:
                    2d:27:36:37:1f:40:29:59:4b:55:57:68:a7:99:98:
                    21:42:d8:af:06:8f:08:ee:5a:17:c1:9b:b6:85:6e:
                    b3:59:42:d9:ba:a4:b6:ad:8e:7e:8c:89:8b:0e:70:
                    54:fa:29:38:0c:97:76:9e:1b:cd:1c:12:67:e1:58:
                    33:99:d0:a9:7e:8b:9b:c6:ae:f4:de:47:a6:4a:ab:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:FA:0F:FE:60:DD:1B:87:37:E1:9F:D0:1E:DC:0E:8E:CA:3D:3A
            X509v3 Authority Key Identifier:
                keyid:21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f7:7f:cb:08:c6:47:9a:65:a7:21:e5:8a:29:c8:c2:0c:ff:
         6a:10:83:2c:2d:da:68:2f:c3:ed:46:d9:af:e4:c9:42:49:cf:
         cc:30:84:1a:fa:c5:e0:2e:85:26:64:58:b7:ab:bd:81:47:ff:
         17:f2:3d:ee:dc:ac:9e:4a:9a:4c:19:49:72:28:ba:f4:37:ed:
         e0:7a:56:5d:6e:2a:1c:37:44:f8:e6:05:d8:a6:b0:67:76:3a:
         78:55:06:04:8d:6a:ae:1c:5e:b5:b0:1f:18:28:85:98:00:9b:
         45:bf:d1:b6:d3:27:a7:ac:d9:fe:9a:9e:42:2e:02:2d:3f:13:
         ce:87:f3:89:e9:57:e7:01:f9:ee:6a:75:f3:40:f7:c7:76:c5:
         cd:25:6e:a3:6b:07:04:97:95:54:78:58:2a:70:45:80:a6:19:
         15:c6:70:87:4c:43:bb:6f:30:d3:21:76:69:99:42:96:2b:b2:
         46:02:01:bc:de:dd:57:ac:61:d4:79:56:28:e0:54:6d:8b:88:
         86:53:ad:68:e3:84:aa:57:dc:40:7d:cf:98:be:32:2a:5b:8c:
         f7:94:cb:19:f5:18:91:fd:7e:08:d8:9a:71:57:fb:38:ac:8d:
         c4:58:6c:5c:40:23:fd:62:e4:e2:05:92:c0:a0:6c:ab:5f:2b:
         7f:c9:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----