Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.mft
File:                     07PaPsuKfUM944M4Zns15o33P4w.mft (raw, json)
Hash identifier:          6b/irWEdDKrIJt3WPx1MxHnWsGNH3EInU2hbLPRqGcU=
Subject key identifier:   2A:85:3B:61:74:57:D8:E1:52:2B:88:D0:5E:BC:34:92:02:15:0E:07
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EE69C509147DF51B1022C24703F8091CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.mft
Manifest number:          15EF
Signing time:             Tue 16 Apr 2024 11:13:07 +0000
Manifest this update:     Tue 16 Apr 2024 11:13:07 +0000
Manifest next update:     Wed 17 Apr 2024 11:13:07 +0000
Files and hashes:         1: 07PaPsuKfUM944M4Zns15o33P4w.crl (hash: 0H6kk9gSljxbTORcXF8w7U1lRTE5o6gVO+AG4zhJoPo=)
                          2: lodZgjogPF5cVxZMZqbKTcbtNCA.roa (hash: 0Z57MarLG38Ha6Gs9dkAQoIuPqQJpPm46/6GDgJUmt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e6:9c:50:91:47:df:51:b1:02:2c:24:70:3f:80:91:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 16 11:13:07 2024 GMT
            Not After : Apr 17 11:13:07 2024 GMT
        Subject: CN=2a853b617457d8e1522b88d05ebc349202150e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:39:cf:32:3d:76:2f:49:91:3b:ec:0a:a7:
                    d6:ee:b4:e6:15:e2:63:54:ff:4d:7f:a0:bf:dc:60:
                    7b:fd:ef:f8:d9:17:0c:56:5d:30:7c:ca:5c:75:cb:
                    16:82:79:2b:cb:57:b2:cb:48:33:ad:5b:f4:2c:c7:
                    56:47:c2:c3:74:28:1c:99:cc:b5:3a:26:78:00:63:
                    90:63:29:b5:31:90:5b:74:c7:3f:5c:eb:3c:27:50:
                    ce:bb:bb:ae:01:e4:26:5c:ed:be:9d:bb:58:71:8e:
                    c8:72:7f:2d:af:ba:69:c5:71:09:2b:c2:fc:cb:7b:
                    4d:ba:a0:48:3f:d0:af:2f:51:58:65:b2:f7:d5:8e:
                    81:11:ed:09:07:9a:91:86:5f:9d:9d:df:d2:cc:7e:
                    82:57:92:0a:b8:44:07:e5:82:eb:7f:ed:30:9c:77:
                    d0:f7:19:80:5a:c1:c7:84:33:38:d0:fb:da:42:4c:
                    72:bb:be:83:3b:27:fd:f1:4e:fe:a5:86:cc:8b:a8:
                    53:8a:68:6f:f3:59:bd:af:64:30:e7:f9:0f:a6:04:
                    a2:00:42:4c:d7:fc:d5:a9:ec:87:4d:e8:56:c6:7f:
                    70:c7:0c:ca:1d:53:3a:00:bd:ed:07:e9:b7:b3:44:
                    d9:78:19:6c:ba:35:a4:82:1f:8b:70:ff:20:2d:1e:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:3B:61:74:57:D8:E1:52:2B:88:D0:5E:BC:34:92:02:15:0E:07
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:49:f9:d3:05:5a:0f:66:99:06:9a:29:ee:d7:8f:2a:f5:
         5e:27:9c:e6:8e:16:11:80:6c:f4:f7:d1:09:cb:3e:72:bf:68:
         a6:25:23:d2:f0:48:cb:5a:27:c5:ed:73:5b:c8:31:74:f3:5d:
         2c:bc:79:c9:3e:37:2a:a1:79:e6:4b:7c:ed:65:39:4a:3c:57:
         56:81:b9:b3:c1:e3:1c:2a:2e:97:12:89:9e:c1:11:d6:84:73:
         1f:70:e8:e1:13:5f:88:5b:d8:3d:77:e0:5d:99:72:d2:4e:55:
         bc:3f:7c:47:c1:38:1c:19:fd:3a:f3:8b:d0:41:bd:63:6b:9b:
         1c:e0:8f:24:56:df:b5:c3:db:08:ab:f7:a7:55:18:e1:df:d8:
         be:ce:73:8c:d0:f6:93:cb:d4:50:2e:9d:ef:23:76:4b:ab:f7:
         5a:48:39:10:8c:6d:78:13:26:12:32:a2:1b:a7:49:c4:14:ba:
         12:51:7b:1a:e9:f2:41:bc:e6:84:e4:a4:6b:ed:5d:fd:82:6b:
         1a:b7:d5:fb:84:81:52:9f:c5:16:ca:f7:b9:79:25:6d:fc:44:
         e0:18:c8:dd:b0:3e:80:38:dc:d3:e8:d3:6e:61:94:73:3c:1f:
         52:65:20:fd:18:99:d1:8b:4c:07:66:a8:ab:07:47:c4:f3:2d:
         8d:98:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----