Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.mft
File:                     dpQzKHmwFOBArExm6CXuLWuEQzA.mft (raw, json)
Hash identifier:          TL+fD2VsY2rpuJd/sv4j/L8GGksv7O13VAdKfTgxfyg=
Subject key identifier:   9F:E9:E3:2C:D1:F2:39:FF:BB:6B:A5:05:D7:15:1C:C6:70:A4:B2:47
Authority key identifier: 76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30
Certificate issuer:       /CN=7694332879b014e040ac4c66e825ee2d6b844330
Certificate serial:       018E7EB81D2B4D40302CD9A3E286580875F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpQzKHmwFOBArExm6CXuLWuEQzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.mft
Manifest number:          10EF
Signing time:             Wed 27 Mar 2024 07:02:59 +0000
Manifest this update:     Wed 27 Mar 2024 07:02:59 +0000
Manifest next update:     Thu 28 Mar 2024 07:02:59 +0000
Files and hashes:         1: 9YTHxX0utiCEdrG8bTKjLRVks1g.roa (hash: NOZ9TfY0Pc7geZyTrdLa8QCBu4TxW35s+wnT2wGPbOY=)
                          2: dpQzKHmwFOBArExm6CXuLWuEQzA.crl (hash: MBr9l0UFNdoCSzmMv0W31JifaLSpeiN2A1ikg26y+Nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7e:b8:1d:2b:4d:40:30:2c:d9:a3:e2:86:58:08:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7694332879b014e040ac4c66e825ee2d6b844330
        Validity
            Not Before: Mar 27 07:02:59 2024 GMT
            Not After : Mar 28 07:02:59 2024 GMT
        Subject: CN=9fe9e32cd1f239ffbb6ba505d7151cc670a4b247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:73:b4:ad:e2:23:38:1d:67:cb:f9:a3:81:
                    26:e1:a6:b8:ed:92:95:f2:d5:6d:c9:fb:0a:0c:c4:
                    10:55:48:34:0b:2c:50:3e:2b:80:90:ef:97:4f:ba:
                    6c:ef:1b:65:ba:29:d3:3d:07:87:10:68:49:ff:76:
                    d9:4d:de:94:09:18:f0:a9:b4:92:5c:51:b9:b8:02:
                    69:e3:28:4c:3a:9b:db:52:40:7a:12:49:f3:d9:54:
                    e9:9c:dd:2b:78:8e:d0:47:93:75:fb:b3:c3:09:b0:
                    14:8a:ce:54:ba:42:36:15:a8:73:38:94:8e:8c:2a:
                    16:33:52:31:ed:8a:06:aa:48:ce:4d:86:2a:ec:d1:
                    ea:73:65:fa:01:dd:f1:8c:0e:c7:da:66:b5:a7:d1:
                    8d:e3:81:3f:d5:62:4e:fe:5e:32:0b:0a:83:5d:bd:
                    d0:d4:04:e3:c2:48:54:19:eb:4d:e5:3d:72:a1:0d:
                    b8:35:a1:f4:c7:9c:94:eb:47:9a:aa:05:fb:34:f3:
                    c8:72:d1:b9:bb:b6:26:b8:35:6c:f6:77:ee:74:9c:
                    5a:de:64:ca:fc:1b:76:b1:b8:95:ea:d5:05:fe:2a:
                    e0:eb:9f:f5:27:f8:0b:95:36:ba:3e:5a:be:0d:be:
                    c7:ae:6e:29:6a:8b:d6:e2:77:2e:5c:e5:e2:ce:09:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:E3:2C:D1:F2:39:FF:BB:6B:A5:05:D7:15:1C:C6:70:A4:B2:47
            X509v3 Authority Key Identifier:
                keyid:76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpQzKHmwFOBArExm6CXuLWuEQzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:93:39:d1:0d:19:a1:1e:41:57:df:f6:7d:7c:1d:33:33:
         ea:ff:93:63:cd:70:2b:7b:39:c4:19:9a:e9:15:6e:f2:ca:fb:
         37:f7:9d:94:06:3c:36:8e:93:fc:19:59:23:09:d6:4c:61:ac:
         eb:a6:b1:8e:42:3f:c5:29:f8:01:35:04:3b:aa:19:a0:e6:9f:
         11:fa:56:ca:96:57:98:2c:b7:95:e9:b7:55:7d:1b:73:af:95:
         27:69:27:45:63:e7:b1:d1:b7:24:f6:e6:b2:77:1d:b7:12:c3:
         a2:69:45:a1:7d:bd:21:dc:39:31:97:28:c9:ed:df:f3:a1:c2:
         e6:3b:72:59:7e:ff:68:50:ff:f4:0c:33:4c:6e:9f:00:36:e4:
         46:2f:0f:84:ae:d1:8f:28:8b:b1:fc:ac:9e:c8:14:cf:f5:43:
         37:21:fc:4b:69:88:9e:39:db:c6:85:0e:bb:38:04:96:45:4d:
         b6:1e:1e:b4:29:7e:0d:ad:d1:1d:6d:18:b4:e5:3c:91:ae:8b:
         80:0b:c3:e7:f6:39:c2:70:67:a4:60:7e:91:64:93:f8:b8:9f:
         1d:9f:90:59:6c:e4:b8:90:02:d3:8c:72:97:8c:24:e4:4c:a8:
         ea:b2:4e:04:0d:65:8c:60:33:73:f4:93:8c:40:ab:3e:a9:d3:
         ef:48:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----