Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.mft
File:                     Nvq0iX-xTuHgn4UgDv5E1ecKaag.mft (raw, json)
Hash identifier:          tsjz6ASCzQLC4u7fRqiW/A9YAQ9wZENBoNIEnLypyrQ=
Subject key identifier:   7D:88:88:44:36:2C:0E:4B:50:2F:99:17:5A:BD:10:B9:AF:DB:23:BE
Authority key identifier: 36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
Certificate issuer:       /CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Certificate serial:       018E309B4642E44E46CE009A0CE6F0A8668D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.mft
Manifest number:          028A
Signing time:             Tue 12 Mar 2024 03:01:06 +0000
Manifest this update:     Tue 12 Mar 2024 03:01:06 +0000
Manifest next update:     Wed 13 Mar 2024 03:01:06 +0000
Files and hashes:         1: Nvq0iX-xTuHgn4UgDv5E1ecKaag.crl (hash: CwVYQOOAkSGC2xzbcRwbLS78LibKUemulqJT2DGTH1A=)
                          2: ZwlDjt_xgB-8tvlAco5ggoOevlU.roa (hash: gF4VlZeZHH43L8O/wmD70kItuRuBgYgi4TVkRRSt3Qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:30:9b:46:42:e4:4e:46:ce:00:9a:0c:e6:f0:a8:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
        Validity
            Not Before: Mar 12 03:01:06 2024 GMT
            Not After : Mar 13 03:01:06 2024 GMT
        Subject: CN=7d888844362c0e4b502f99175abd10b9afdb23be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:05:5e:01:7f:04:a0:7b:fa:c7:18:99:8d:
                    4b:b1:20:9b:88:43:43:e6:87:27:98:12:ea:82:da:
                    10:52:52:ea:75:51:09:8f:8a:80:27:b5:85:82:cc:
                    72:f3:ec:7f:15:ad:a0:fe:03:d1:93:39:cd:c6:6a:
                    61:d9:07:94:63:fd:05:3f:87:0f:17:56:58:7b:ca:
                    d5:18:0e:3b:51:75:2c:1c:1b:23:83:b2:27:47:50:
                    0a:43:e2:34:8d:38:f9:ee:8d:c9:78:bc:1a:4d:c3:
                    1c:ba:1d:e2:e6:10:a3:d4:11:63:4b:3c:70:b0:83:
                    25:0f:34:23:52:ac:be:fb:b7:9e:f2:99:ff:35:07:
                    99:18:70:2f:d2:7f:94:a8:00:3a:7b:20:5e:18:1b:
                    84:aa:ff:9a:24:4c:c5:b0:df:f1:5e:2f:a0:d1:ad:
                    33:7c:0c:44:ff:73:97:9b:f4:c1:71:c4:da:bb:f9:
                    35:71:d3:54:5b:bd:a2:7b:b7:41:61:54:13:13:1d:
                    de:2c:6d:4a:b4:74:1e:02:b5:35:27:82:bb:34:4a:
                    63:4d:3e:fc:c7:18:16:3a:af:0d:f3:eb:3a:d7:7b:
                    de:e0:4c:1a:93:19:9c:c9:8f:35:38:04:62:f9:bc:
                    9b:2d:5e:e5:4e:d4:51:31:fd:12:3a:24:d9:8f:a8:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:88:44:36:2C:0E:4B:50:2F:99:17:5A:BD:10:B9:AF:DB:23:BE
            X509v3 Authority Key Identifier:
                keyid:36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ad:e5:ef:d4:3c:dc:c2:fb:f8:53:e6:2b:c2:c0:06:3f:c6:
         ca:3f:eb:83:96:d9:46:b8:99:3f:99:32:97:f8:c3:18:0f:96:
         71:f0:55:11:17:46:6e:b2:2a:93:2b:03:29:ef:e3:de:52:12:
         a2:86:dc:47:6b:fe:77:2e:8c:ab:4c:6c:aa:f1:3d:b6:1d:97:
         92:2f:41:2a:00:49:04:8f:f4:c4:b7:2a:20:2b:c2:0e:13:de:
         5e:0c:ed:5f:86:22:68:12:bb:21:98:af:7b:fc:7e:00:ff:24:
         5d:5d:b1:57:a5:ee:83:a5:42:73:68:c7:5b:10:45:0e:3a:9a:
         d5:0f:d3:79:e9:09:9f:32:44:9f:68:11:7c:ba:48:e1:9c:ba:
         8c:ba:3d:7c:d4:7c:a1:89:97:6c:4b:4d:a7:f5:ab:44:db:40:
         e8:df:a2:35:5c:0a:50:da:aa:55:dc:89:e5:78:da:d9:d0:7c:
         f7:20:90:8d:6e:60:d6:d9:72:ba:2c:89:82:70:87:98:c5:09:
         7c:d8:5a:bb:98:a6:ac:93:d0:dd:37:47:25:5d:37:61:ed:2e:
         2e:cb:ee:ae:6d:32:b8:b2:dc:a4:f0:4e:74:c6:f7:cc:5f:c1:
         bc:a8:a6:44:48:f3:02:d5:64:f0:dc:74:e3:a9:fe:31:8f:85:
         f0:01:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----