Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/GL0FwbhTxfKAWw-TJlvTeHVzTlM.mft
File:                     GL0FwbhTxfKAWw-TJlvTeHVzTlM.mft (raw, json)
Hash identifier:          i2/DDgM8UhhnTkDwSyl4DnLKib3VXuf36peiClDzsbo=
Subject key identifier:   96:AF:65:86:59:B1:0A:76:40:BF:E9:1A:BB:9F:D2:3A:B7:E1:07:62
Authority key identifier: 18:BD:05:C1:B8:53:C5:F2:80:5B:0F:93:26:5B:D3:78:75:73:4E:53
Certificate issuer:       /CN=18bd05c1b853c5f2805b0f93265bd37875734e53
Certificate serial:       018E302D18765428762131CD0001DCD8FE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL0FwbhTxfKAWw-TJlvTeHVzTlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/GL0FwbhTxfKAWw-TJlvTeHVzTlM.mft
Manifest number:          074D
Signing time:             Tue 12 Mar 2024 01:00:45 +0000
Manifest this update:     Tue 12 Mar 2024 01:00:45 +0000
Manifest next update:     Wed 13 Mar 2024 01:00:45 +0000
Files and hashes:         1: GL0FwbhTxfKAWw-TJlvTeHVzTlM.crl (hash: Zyr3HNdxunyIeN7e48HVjcEw1ttIPvBl4EhNVvNQ00Y=)
                          2: SEy8Yve3G6RuDzoM-S9b4DYRwTQ.roa (hash: wvow68iW3Q39qt4hoVXfF4Zv9G4kRCa/vI9yaq/pFCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:30:2d:18:76:54:28:76:21:31:cd:00:01:dc:d8:fe:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bd05c1b853c5f2805b0f93265bd37875734e53
        Validity
            Not Before: Mar 12 01:00:45 2024 GMT
            Not After : Mar 13 01:00:45 2024 GMT
        Subject: CN=96af658659b10a7640bfe91abb9fd23ab7e10762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:1f:94:29:9d:75:c1:5b:5f:8a:21:81:ee:
                    30:77:d5:2d:6c:f4:43:23:dd:b5:72:78:72:4f:1e:
                    e0:c5:bd:36:54:84:fb:98:b1:a9:bc:62:c5:a9:3f:
                    55:27:52:b8:66:38:09:ad:ba:c7:e9:71:f5:4a:c1:
                    b7:32:2a:cc:d1:8e:eb:2d:e3:29:93:eb:a9:cf:4e:
                    4d:b9:09:fe:e0:31:cd:f0:d6:c2:1a:47:d8:78:69:
                    62:fd:4c:e9:57:96:14:f8:fb:af:2d:94:87:03:8d:
                    fa:b9:07:df:d4:80:00:31:b7:9e:a2:90:e9:1a:cc:
                    52:ba:f4:86:8a:ac:c3:3f:02:34:74:c0:20:20:be:
                    89:ec:e5:25:3e:55:a9:5b:42:66:29:08:e1:44:e0:
                    36:59:73:6d:02:0f:de:4f:45:84:2a:df:fb:da:86:
                    ec:6b:24:50:64:d8:72:9e:e7:2b:45:6a:f4:a3:cc:
                    a3:85:cf:66:01:f6:33:4e:fa:0d:70:40:e0:69:b8:
                    ce:20:cc:ed:65:6b:8d:15:11:9d:bf:6f:34:82:78:
                    b3:3b:fa:41:c3:bf:19:81:4c:15:82:3c:a4:58:26:
                    34:73:1c:ed:6a:2c:2d:c6:68:10:43:e8:a8:0a:89:
                    b7:63:19:97:3b:4e:19:7a:2c:a4:dd:63:06:33:71:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:65:86:59:B1:0A:76:40:BF:E9:1A:BB:9F:D2:3A:B7:E1:07:62
            X509v3 Authority Key Identifier:
                keyid:18:BD:05:C1:B8:53:C5:F2:80:5B:0F:93:26:5B:D3:78:75:73:4E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL0FwbhTxfKAWw-TJlvTeHVzTlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/GL0FwbhTxfKAWw-TJlvTeHVzTlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a20fee-da92-4807-9a3b-3d8d684f5368/1/GL0FwbhTxfKAWw-TJlvTeHVzTlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:75:25:fa:22:ca:4a:e1:6d:2c:fa:99:8e:7b:4b:c2:aa:3c:
         4d:9d:b7:a9:61:46:69:22:d3:e2:97:06:1a:74:2c:4f:1e:0d:
         a4:98:22:26:48:17:58:4f:85:6a:a3:50:28:55:eb:5a:e5:46:
         1d:84:da:6a:81:49:dc:df:29:07:e7:fd:91:07:d3:ff:29:38:
         29:37:ba:d4:7d:10:f5:15:7d:db:ca:7b:34:60:64:ff:11:35:
         f6:6c:3e:68:ea:a4:3f:63:1e:86:25:9c:c0:09:e7:55:f1:53:
         10:89:d1:f6:5f:48:ab:96:1b:39:24:a4:75:55:a1:14:8a:b5:
         1b:35:15:39:50:9d:d9:7d:bf:a5:86:5e:5b:d3:a0:43:5d:a4:
         b0:e1:53:f0:34:e4:84:89:3b:f4:f7:3e:a7:fb:4c:06:7d:68:
         be:c2:58:9e:22:4d:f3:37:88:23:17:28:7e:b3:d6:14:5e:04:
         9c:35:20:44:cc:ca:14:14:70:26:d9:21:f7:cf:ad:48:79:ce:
         84:3f:84:f3:17:e4:97:76:c6:75:f3:ac:50:ed:97:6c:23:9e:
         dc:a9:1f:e3:74:af:f8:9a:8a:ab:69:b5:21:15:3e:bd:71:72:
         33:6c:13:ab:e2:2e:6a:e1:df:b0:74:ce:50:d7:2f:61:1e:68:
         93:3d:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----