Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
File:                     BF30UOrP3Wee8NCMiAqR_HW4qJc.mft (raw, json)
Hash identifier:          l0MyJBV/bsZG4Gmqfhcd8qsIz6ReHmhVaE0wdz3cS+c=
Subject key identifier:   B7:9F:E1:AA:9D:65:2C:57:38:E4:E8:50:C4:34:96:27:A8:CE:1B:7B
Authority key identifier: 04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
Certificate issuer:       /CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Certificate serial:       0193640F4C602D123C58B546A60253EAF721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
Manifest number:          0AA0
Signing time:             Mon 25 Nov 2024 16:02:24 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:24 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:24 +0000
Files and hashes:         1: BF30UOrP3Wee8NCMiAqR_HW4qJc.crl (hash: 4dpwJLP186HSrqReR9Kn+jI5sWx7dgHFWE2xLgwtCtw=)
                          2: V01B3v4DNa6pEBDxFhPnkLayN_s.roa (hash: Y9qTWXWC42HT8upq877McYVY7T+jC75WCxYPa3RIlrk=)
                          3: at0xU4Xy0rRkmWXUtKUZysC3hhY.roa (hash: rOuoGhZTyll9Aqf+yn6PuggNh2fEqXaUH1QFv8DFpSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:4c:60:2d:12:3c:58:b5:46:a6:02:53:ea:f7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045df450eacfdd679ef0d08c880a91fc75b8a897
        Validity
            Not Before: Nov 25 16:02:24 2024 GMT
            Not After : Nov 26 16:02:24 2024 GMT
        Subject: CN=b79fe1aa9d652c5738e4e850c4349627a8ce1b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:15:75:13:d4:c4:b3:21:2c:8a:67:25:34:
                    7a:ae:e5:5f:b6:50:85:45:0f:c1:a4:7e:48:aa:40:
                    89:63:39:61:b4:86:40:78:65:af:87:61:b6:64:89:
                    45:a4:e4:66:39:b4:bb:34:55:f5:b7:f2:0e:20:3b:
                    45:3c:02:11:3e:56:f4:6a:bb:04:64:9b:e3:66:b8:
                    c3:8f:7b:bf:71:81:61:e1:fc:5b:c7:a4:f6:df:f2:
                    d0:6d:22:06:73:24:d5:38:ab:d0:a2:61:3e:41:a1:
                    ee:c9:bc:0e:a4:17:39:63:c2:3e:6d:6b:dd:6b:66:
                    ae:cf:25:7e:fd:9d:a7:9f:51:0a:15:f5:77:79:d3:
                    ad:3f:fb:b0:a5:d0:c9:e4:10:41:1b:14:bb:83:4c:
                    9d:dd:32:85:d9:0c:99:a8:65:e2:b7:34:1e:b3:44:
                    51:8a:85:65:0e:cc:3c:61:c5:d5:c9:98:da:82:34:
                    f1:10:ac:e1:3b:8e:89:dd:35:f2:18:d3:7d:96:c3:
                    0e:d8:87:70:55:88:57:2c:5c:8f:67:84:2f:b9:1c:
                    8e:dd:98:16:9a:44:43:4e:5f:e4:91:34:cc:65:e4:
                    3f:6a:4d:22:16:6f:09:8f:1c:ee:f2:f0:2f:ac:47:
                    10:4a:48:77:0a:8d:ea:0e:fd:55:a8:a6:70:98:2c:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:E1:AA:9D:65:2C:57:38:E4:E8:50:C4:34:96:27:A8:CE:1B:7B
            X509v3 Authority Key Identifier:
                keyid:04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:f5:96:94:49:33:5b:97:b9:29:b9:1c:9b:89:b1:65:1e:
         a5:7a:20:81:0e:ba:cd:72:cf:c8:9e:5e:af:6c:6b:1a:f9:51:
         d5:85:91:f9:6b:f6:a6:ef:b1:77:06:0a:23:db:4b:29:54:f5:
         2d:bc:30:6a:b8:4d:81:9e:0a:8d:e7:cb:6b:0b:a4:44:0d:cd:
         4e:fc:07:d9:ac:b8:c5:00:14:9a:a7:23:82:2c:84:f5:d9:4b:
         3d:1f:71:b5:b9:43:cb:2f:92:91:17:f9:b5:e8:46:ad:5a:ea:
         e8:20:0c:17:67:92:c1:86:15:d1:fa:84:f6:92:5a:cd:0a:21:
         88:6d:15:e0:33:1b:21:4f:db:8a:e2:ed:d4:5c:97:a8:03:76:
         6c:b9:b0:da:d1:19:85:7f:a5:93:88:7a:e2:55:95:15:47:e9:
         cb:54:08:cf:ff:d3:bf:65:87:c9:48:10:02:5e:f5:f5:a4:d0:
         cd:b9:a5:6e:77:3c:bd:6f:eb:c8:75:76:02:3d:ef:f1:bc:71:
         54:35:46:03:07:34:1d:c5:7c:c0:db:db:ca:ce:8b:06:05:6e:
         ec:5b:63:77:f9:90:d6:69:c3:56:ad:07:14:d7:4d:50:64:2a:
         93:27:00:5e:8b:6c:23:bd:a7:c9:4d:6a:90:75:5f:b0:c0:c8:
         6e:ab:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----