Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.mft
File:                     RARqaDq5K0GBmXckXOdZ4melA2o.mft (raw, json)
Hash identifier:          hJ6yFKlGBYQ1teI3zkQwJh6qgdzK8fQ++QTWNWd3Ef4=
Subject key identifier:   D1:3C:CE:7E:46:36:72:B0:AD:4C:2B:1C:EF:01:2D:06:3B:84:FF:26
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Certificate issuer:       /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial:       018F6C76EEC5DFDAFEEF6182244DA07686BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.mft
Manifest number:          0B91
Signing time:             Sun 12 May 2024 11:01:24 +0000
Manifest this update:     Sun 12 May 2024 11:01:24 +0000
Manifest next update:     Mon 13 May 2024 11:01:24 +0000
Files and hashes:         1: DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa (hash: 0vKa1p+Btf2J4Hc1AcLpA50JbzMhVeF3FjwclweUf0I=)
                          2: RARqaDq5K0GBmXckXOdZ4melA2o.crl (hash: 6W2R5T6bCvmhFFzYtLhJPXuYJl3pzz4Kjs83hBVUNQE=)
                          3: mxzFQ1Iqm7sx-ckt6j2IJRp2FOo.roa (hash: 498HPKltLcKY7YfJFKBgt7pm9SG0cJlLch7vXYUTDjA=)
                          4: rP0Lwe--uFTun0OYu84UpPscbiE.roa (hash: 9EWYT5h+mXR7B4ulU9M0qZNw5L84lodgCkVFwYeM3XE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6c:76:ee:c5:df:da:fe:ef:61:82:24:4d:a0:76:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
        Validity
            Not Before: May 12 11:01:24 2024 GMT
            Not After : May 13 11:01:24 2024 GMT
        Subject: CN=d13cce7e463672b0ad4c2b1cef012d063b84ff26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:37:e3:0a:54:38:b1:47:cf:05:21:d0:f1:
                    fd:cb:39:d4:e6:f7:43:49:32:2d:b7:9e:26:f8:70:
                    3f:42:23:f9:6a:b6:a8:20:57:fe:6e:ea:ad:5d:a1:
                    79:12:38:9c:44:bf:d0:44:c1:08:b4:06:8a:1f:9a:
                    6f:3f:b0:30:8e:53:14:72:a4:98:4d:d7:93:62:a8:
                    5f:ed:7b:2f:6e:d4:c7:b0:e2:3b:b0:fd:c8:73:d1:
                    27:4b:d4:08:63:6b:bf:bb:72:26:4c:5e:8d:0b:a4:
                    18:ac:d5:82:ca:48:14:ca:7b:51:86:56:5d:22:0e:
                    74:14:4e:23:54:08:27:00:9f:54:7d:3b:91:f7:1d:
                    e0:27:58:07:cc:98:a7:c3:ac:c6:f7:a8:b8:c5:05:
                    50:59:aa:b6:07:f2:b6:2c:4a:62:f5:7c:07:15:d5:
                    b2:0e:a9:82:e1:dd:30:e9:d1:94:64:bd:84:72:f5:
                    6c:c2:fb:3f:f4:f4:ca:5a:e0:fe:23:81:89:51:65:
                    5a:69:a4:ef:4c:a1:00:f5:0e:13:a7:d8:e4:77:a2:
                    8b:fb:aa:18:0d:0c:73:06:66:9d:36:2a:d6:58:c7:
                    99:72:54:a5:a9:68:07:93:d9:04:04:f3:e2:8a:a1:
                    93:2a:bb:24:e2:20:bc:21:58:b8:5f:53:d4:b8:5a:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3C:CE:7E:46:36:72:B0:AD:4C:2B:1C:EF:01:2D:06:3B:84:FF:26
            X509v3 Authority Key Identifier:
                keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:3e:46:3e:23:39:26:d2:90:00:de:19:d9:f8:cb:0f:26:
         ea:22:bc:3f:49:ca:8a:db:88:67:60:86:90:98:80:91:f0:e7:
         51:a1:89:b8:8e:e3:9e:0b:9f:9b:c2:83:d3:08:d6:d2:c8:18:
         a1:09:a5:2b:40:59:92:c6:f7:9b:5c:f2:c4:9d:ba:4f:f7:4a:
         27:6d:2f:a4:9c:b8:6b:1c:13:87:33:0d:3b:ec:e1:d9:fa:54:
         9a:af:de:23:e3:fd:2a:08:b4:37:2c:af:22:d0:b1:29:0d:7d:
         ee:83:12:f2:1b:de:7a:99:18:d2:b1:bf:b9:07:03:10:9b:9c:
         9c:55:41:fc:56:ea:b1:18:7d:c6:6d:bc:4f:ce:eb:74:83:17:
         b9:47:65:0a:c7:64:8d:1a:ab:c7:d4:33:94:ff:7b:d0:f0:e9:
         d4:38:5b:a7:f0:b6:2a:a8:98:cf:2a:de:43:e8:a9:b6:25:9f:
         2f:94:8b:87:f4:42:5a:08:fc:76:a4:b0:c7:05:d1:b6:80:99:
         43:c6:7f:e6:a8:e2:c6:30:43:83:18:ec:56:bd:6f:df:8d:ad:
         ab:25:6b:86:65:c9:2c:ab:af:c5:96:a8:72:87:e9:4e:1d:ab:
         b1:33:e4:f5:5e:41:75:49:c9:61:dd:08:15:e2:9e:1b:1e:ea:
         e2:7d:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----