Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.mft
File:                     FZgr4gDy7ZvkD8mD2U2ccmNQqdk.mft (raw, json)
Hash identifier:          eWIEEYBmGBMA1zEwiTktyMUbwEDSPyIdf/vJSoR8XTw=
Subject key identifier:   18:A9:24:47:DC:55:8F:49:DB:1B:5A:93:56:91:2E:CB:3C:21:64:EB
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Certificate issuer:       /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial:       018D303B0985F810D07E9F5739A68748398E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.mft
Manifest number:          0678
Signing time:             Mon 22 Jan 2024 08:13:11 +0000
Manifest this update:     Mon 22 Jan 2024 08:13:11 +0000
Manifest next update:     Tue 23 Jan 2024 08:13:11 +0000
Files and hashes:         1: FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl (hash: WZ6e4Lhar/9qptO+/CBt3qBoRRAIiMHDIRzBvfNCmg8=)
                          2: KOIFVYu0yOGtw-0WEwpoSYV-D7A.roa (hash: VdPQuNOYOpbbnBryjE0WsOjxSIw7Ks1ct2PFdVNPAMw=)
                          3: WnC8_H8WON3BAEDSbN-LUEK5slg.roa (hash: 9p7JoQVrHBUFx+ZeYp4bJbLnn+TLru+eFrwkkRAV8LE=)
                          4: kIrbpKAai_lOY8TQMohDCLGhcqE.roa (hash: 6YkIaiB3qv1TGmR2ttKHgIxzG46O+T2WW/seCTNtrtw=)
                          5: tRZHeGzheyIaDQTQRNeEp4azgYc.roa (hash: cyvPd8t+p5H1mTdG/EjSG3bqhtHEYJ2uspGSgSyFF64=)
                          6: wF7Zf6uKGiJbJKlraGK_bQUbxjc.roa (hash: tjbcrLrLvXmwwZAo93XzdMt84kUp64Mh3YCtJ1qIFmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:30:3b:09:85:f8:10:d0:7e:9f:57:39:a6:87:48:39:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
        Validity
            Not Before: Jan 22 08:13:11 2024 GMT
            Not After : Jan 23 08:13:11 2024 GMT
        Subject: CN=18a92447dc558f49db1b5a9356912ecb3c2164eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:4a:9b:ef:3f:ef:f3:9c:00:0c:a9:a5:26:
                    57:8a:bb:72:43:a1:64:79:bd:75:26:52:47:aa:e1:
                    41:3b:9c:20:d3:9e:fe:66:4f:75:28:c6:81:98:e3:
                    f2:68:76:6a:8c:37:8b:e2:33:bf:32:ae:00:f5:eb:
                    13:0a:f1:e6:27:5a:e0:a8:06:50:84:f0:94:75:e9:
                    b4:60:fd:08:ff:d4:c2:d2:56:cf:72:03:b7:19:0f:
                    be:ee:8c:f0:18:a7:84:35:8a:ec:0c:fb:d4:7b:eb:
                    37:63:52:85:24:25:00:8f:19:42:2d:6f:ad:1e:fa:
                    58:af:24:c6:de:67:c7:67:18:ff:e7:28:6a:6f:3f:
                    27:0b:33:e4:58:f4:64:87:82:88:e9:89:4a:a3:d3:
                    7f:3d:65:bf:cb:6b:a8:36:50:67:0c:f6:d7:a9:90:
                    d7:eb:1f:5b:17:83:80:c6:2a:84:29:0c:88:7e:ce:
                    0b:ea:90:b2:46:04:30:73:fa:8d:9c:7c:67:5b:01:
                    42:41:a8:f6:6e:1a:ad:30:ad:ae:51:39:19:52:a1:
                    0a:50:6f:72:90:de:46:fb:3a:b9:ad:40:56:ce:b3:
                    5f:ce:5c:26:f7:1d:93:91:2a:c8:32:4b:6b:93:4a:
                    e3:32:8d:4f:0b:ab:5c:85:56:50:32:be:7b:80:1f:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:24:47:DC:55:8F:49:DB:1B:5A:93:56:91:2E:CB:3C:21:64:EB
            X509v3 Authority Key Identifier:
                keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:76:1d:c9:70:85:ec:36:05:13:f3:60:82:b6:7d:4e:84:
         bd:fa:a7:4e:46:78:e0:7a:c1:0c:53:ea:06:f3:56:6b:87:bf:
         9f:23:be:74:cf:72:ed:f2:85:23:2a:cb:7b:26:c9:5c:85:50:
         99:6b:cc:a8:31:30:91:21:99:4c:55:e1:bf:d0:a0:3c:01:6c:
         c5:79:58:bd:99:77:f4:ef:e1:af:43:b8:d0:3d:d6:33:a3:9f:
         9a:4b:70:6e:d0:2e:c2:80:bc:5c:9c:1b:ce:07:39:2a:e3:57:
         f5:04:93:7e:d6:05:7e:2f:1c:37:12:08:0a:18:41:40:c8:a5:
         b5:1e:3a:98:89:57:34:dd:00:5f:68:e1:ed:28:00:59:91:44:
         de:ff:9f:ba:96:9e:07:96:7c:31:7c:d5:6d:0c:b0:98:f1:54:
         dc:eb:b2:b1:ce:d0:fa:54:2b:b2:7d:11:30:55:0a:e2:c5:6e:
         ab:0c:67:b9:dd:17:8f:da:e9:bd:c0:7c:ba:b5:67:01:ae:72:
         1d:7f:f5:1a:ce:0e:8e:25:69:80:6d:b1:a9:3d:59:d2:51:77:
         c0:30:dc:f2:42:6c:e4:16:e9:ca:ec:31:eb:7a:3f:d4:a1:a4:
         ab:e6:28:2e:6d:b4:22:9d:77:c1:d6:97:fd:b9:88:7f:40:47:
         cd:21:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----