Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.mft
File:                     a9DFs_psKIhgzLbZAgDLuOV9t_c.mft (raw, json)
Hash identifier:          zyIesybTIiotCvctRYEDkSWDsigaPaEFGxG4xjlJFTA=
Subject key identifier:   65:E5:F8:61:B3:52:2F:19:AF:3C:65:F8:12:E1:33:F3:F5:E2:06:77
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Certificate issuer:       /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial:       018E5093D398A968BE89EF97064B0B92B52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.mft
Manifest number:          10E7
Signing time:             Mon 18 Mar 2024 08:00:48 +0000
Manifest this update:     Mon 18 Mar 2024 08:00:48 +0000
Manifest next update:     Tue 19 Mar 2024 08:00:48 +0000
Files and hashes:         1: 0C6iM11GyXSY8S5-w8YzyMwIFes.roa (hash: QnzHEn+0LsrOImtIexyre2yWUBKN2KPPnUrc84ODBR0=)
                          2: 5dC1Khbckc0wM6Uv-yBzD6-6IEI.roa (hash: 3FbZhhHsnlyanOh1GgXi6PUVCoRefwVdHLxGG9aq4wc=)
                          3: a9DFs_psKIhgzLbZAgDLuOV9t_c.crl (hash: 1drgI4+MXPkifvzonfxQzUl+w8M54LJ1Yr1Aw67IRC4=)
                          4: lrAHSYHMcT-QnCBgDWbaE1MqczQ.roa (hash: Q9wjRPgLxrPVhdjep0bc5VmCtdpQhpNo8k2oXqLLi1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:50:93:d3:98:a9:68:be:89:ef:97:06:4b:0b:92:b5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
        Validity
            Not Before: Mar 18 08:00:48 2024 GMT
            Not After : Mar 19 08:00:48 2024 GMT
        Subject: CN=65e5f861b3522f19af3c65f812e133f3f5e20677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:c4:21:7b:ee:dc:2f:7e:c7:3a:14:b5:c6:
                    7b:80:bf:49:81:b9:b0:ae:b8:30:88:a6:06:42:79:
                    b7:fe:1a:62:e5:04:c5:8c:44:62:90:26:fa:c2:8d:
                    36:d6:ab:19:fb:d7:70:67:a0:c5:73:19:db:31:28:
                    39:38:b8:db:de:01:9c:86:64:dd:f6:47:c9:67:3c:
                    cd:dd:78:c4:84:2d:1b:f6:f3:70:20:1d:6c:f7:7d:
                    dd:79:dc:09:0f:8f:26:1a:b2:bd:10:d5:ce:db:cc:
                    b5:14:8c:c8:79:b8:c7:68:d7:12:2a:0b:9a:50:42:
                    12:aa:3d:d2:ef:1f:bd:e7:4c:78:b7:4a:7e:18:15:
                    bc:6f:66:5c:8b:e5:d8:e6:25:ab:23:6d:8f:a1:bf:
                    ea:79:bd:eb:57:21:81:9b:00:6e:cd:c1:14:49:54:
                    c3:a1:ff:bd:9a:ba:71:51:8c:0c:63:d4:05:ac:40:
                    17:03:68:60:20:79:20:f9:91:85:99:80:74:d7:35:
                    77:c1:e9:ca:65:4a:fc:ed:e1:29:c1:48:bc:d8:4a:
                    69:08:71:dc:f0:f9:f0:dc:4c:16:a0:f6:65:21:9b:
                    0f:fa:75:5d:26:0f:b7:df:12:fa:12:4c:fe:0c:d9:
                    68:0d:11:12:ab:ef:bd:24:0d:b1:73:72:6d:03:12:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:F8:61:B3:52:2F:19:AF:3C:65:F8:12:E1:33:F3:F5:E2:06:77
            X509v3 Authority Key Identifier:
                keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:50:9c:33:62:23:45:52:5b:09:25:98:8d:08:aa:63:e1:35:
         47:8d:0f:05:9a:f3:7d:ee:00:5f:c4:8d:55:cc:ec:d1:a9:c7:
         59:05:26:98:ed:af:d8:08:56:62:d6:cb:ce:ee:97:87:d8:6e:
         ee:95:44:97:fc:0b:e9:2f:ce:8b:c0:8f:b7:94:5c:95:47:1b:
         59:d1:ff:59:58:3c:13:48:57:dd:26:bc:48:f1:d7:f9:54:ba:
         28:1e:2b:7f:03:e2:bd:6e:9e:01:2b:eb:41:8d:c9:02:2a:8b:
         c7:94:b6:4b:dc:e9:4b:bd:cd:30:dc:49:cb:ea:e3:18:91:9f:
         8a:4b:db:61:02:c7:b6:a2:bc:b0:73:47:06:08:30:7a:1a:36:
         24:f4:c7:51:13:c1:cd:5f:ef:ea:fa:77:ad:eb:33:dd:9c:da:
         70:22:6b:96:a0:a0:33:56:f4:1a:ef:ef:93:69:88:ce:69:20:
         6d:81:80:49:10:43:9c:ab:a1:59:62:12:c3:a8:da:a8:c4:f2:
         52:d6:dc:2b:52:a7:4e:0f:b2:25:ac:00:9f:d5:b1:12:48:e0:
         6d:41:55:bb:c0:4c:fb:8b:67:a9:c7:d9:0e:66:e4:77:32:b8:
         9b:20:39:9d:2f:cf:50:84:be:e7:b8:5f:bc:0f:b6:0f:0f:88:
         cc:1f:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----