Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.mft
File:                     nudhE9vzIDhvc-GTWsmslD6BtYw.mft (raw, json)
Hash identifier:          FWQTsW61VeLyrmUtHz8UvL22hLmCj5w/iqv1VKTncmA=
Subject key identifier:   C8:0A:B9:94:B3:A3:D7:B9:22:1E:DD:18:0E:37:CD:A8:98:A3:09:20
Authority key identifier: 9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C
Certificate issuer:       /CN=9ee76113dbf320386f73e1935ac9ac943e81b58c
Certificate serial:       018EC62B41C276BC50E8BA26B98C9EDF70DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nudhE9vzIDhvc-GTWsmslD6BtYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.mft
Manifest number:          0F96
Signing time:             Wed 10 Apr 2024 04:01:47 +0000
Manifest this update:     Wed 10 Apr 2024 04:01:47 +0000
Manifest next update:     Thu 11 Apr 2024 04:01:47 +0000
Files and hashes:         1: 7X6Q1qqDJrHLgKHjUKSqp8cfd1g.roa (hash: lGIzmgNLFfaeqZvHgjju0vSqmZcbQ4MamlAPJuU8Ldg=)
                          2: PTb09F5nopFGv3kBLutBby23JiY.roa (hash: guj7o271QGBPO5eYX6HsVbaYv/o+zdPbGegxf2B0l5g=)
                          3: nudhE9vzIDhvc-GTWsmslD6BtYw.crl (hash: 0Rca5Q9xa3juveGNTdocAI89RI8SpR5vZJIZd7QEbxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c6:2b:41:c2:76:bc:50:e8:ba:26:b9:8c:9e:df:70:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee76113dbf320386f73e1935ac9ac943e81b58c
        Validity
            Not Before: Apr 10 04:01:47 2024 GMT
            Not After : Apr 11 04:01:47 2024 GMT
        Subject: CN=c80ab994b3a3d7b9221edd180e37cda898a30920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:01:76:f0:db:94:e9:e4:e9:e4:1f:77:83:
                    33:9b:ef:48:da:45:47:56:2b:dc:fe:c3:a4:94:38:
                    20:fe:dc:6c:59:75:28:8c:17:41:b3:fd:76:fc:5a:
                    e7:66:16:c0:c0:2d:15:56:1f:9f:2f:1a:7b:82:6b:
                    05:7e:6e:d5:05:8c:1b:2c:94:0e:99:c4:d5:3c:83:
                    a2:a0:ce:5e:9e:66:7a:bf:a4:14:1b:62:f2:47:b5:
                    86:50:ee:b6:b1:fd:d1:89:9e:f9:ab:e1:e6:8e:d2:
                    0e:83:b4:79:31:40:d2:71:de:ca:b7:53:d8:94:99:
                    02:e0:b4:66:fc:a5:8b:b2:a7:b6:1d:6e:75:d9:f5:
                    23:59:a2:8c:b2:a0:47:17:dc:3f:a6:cf:a0:67:08:
                    42:c9:0b:d1:af:26:1f:ca:6a:f1:43:be:92:1a:47:
                    bf:6c:db:d6:0d:e1:79:8d:f2:c8:6a:f5:34:8e:e7:
                    f9:e4:de:20:04:b6:1c:ae:a6:8b:41:ba:53:69:1d:
                    07:32:4b:36:56:30:99:4d:74:58:4f:ba:f1:d0:01:
                    c3:bb:39:4d:aa:83:0f:e4:4c:6f:c4:08:6b:a8:20:
                    c9:5f:b2:18:bb:ff:cb:71:d1:6d:09:72:99:07:eb:
                    65:a4:cd:bf:54:dd:99:e6:e6:b1:99:05:2b:ec:64:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0A:B9:94:B3:A3:D7:B9:22:1E:DD:18:0E:37:CD:A8:98:A3:09:20
            X509v3 Authority Key Identifier:
                keyid:9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nudhE9vzIDhvc-GTWsmslD6BtYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:74:ef:3a:91:3e:80:e0:47:ed:63:94:65:49:9c:9c:b1:
         cf:46:48:6f:ed:20:c3:5f:af:43:6b:11:1f:a5:b9:01:f0:ff:
         30:87:c1:b4:0f:bb:2c:40:42:99:2d:b2:7d:99:10:6f:4d:ea:
         72:d7:e1:8d:7b:70:a3:40:7b:21:47:a4:02:27:8e:47:b3:cc:
         b4:8f:5b:5e:ba:de:69:3b:03:6f:1d:7c:17:c8:f9:83:4d:e7:
         0b:27:e5:9e:25:41:8f:f2:37:b9:94:2d:2e:f1:62:4a:79:2f:
         34:45:69:60:b0:78:46:90:c1:77:6c:e9:34:66:56:ca:5a:48:
         b7:d8:48:ff:da:1d:dd:64:49:39:e8:96:2b:e5:ad:3b:ae:4e:
         d1:d9:66:c1:f2:a7:39:50:cf:8d:02:3f:f3:92:34:e1:1f:5e:
         95:d0:28:b1:00:1c:cf:15:fd:42:89:eb:ef:72:62:26:3f:c2:
         2c:27:a9:63:29:42:02:61:73:ad:ab:60:52:01:60:ee:83:9b:
         cb:28:04:77:71:0c:7c:90:f5:be:a9:f8:97:a6:98:4f:a6:11:
         a6:3d:45:6a:cb:8b:43:74:3d:b5:b6:af:39:8b:04:b9:3a:e7:
         07:5f:9f:e4:06:45:c8:de:96:5d:78:95:86:e3:62:5c:1b:21:
         7a:6c:1d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----