Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
File:                     9Lp8FFiYuK49KzocccUKsZqT9kc.mft (raw, json)
Hash identifier:          FrsWVWZRCgWs0D/GeUjkG2EG2v8OYbUVNCMXnoxv6ic=
Subject key identifier:   7B:CE:4B:00:A7:51:93:6A:61:56:35:72:4D:DA:4A:47:11:0E:B9:7C
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Certificate issuer:       /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial:       018EE5119AB35808F8596E4D127E57468500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
Manifest number:          091C
Signing time:             Tue 16 Apr 2024 04:01:59 +0000
Manifest this update:     Tue 16 Apr 2024 04:01:59 +0000
Manifest next update:     Wed 17 Apr 2024 04:01:59 +0000
Files and hashes:         1: 9Lp8FFiYuK49KzocccUKsZqT9kc.crl (hash: jmjJvlAyvfLLMRBhU9m2exKKIxZNV/RZ2KgvttyKxmA=)
                          2: gUjay7S2lD-NGIuvQV60U1UgCl8.roa (hash: kZNCeAFsIxqcLbgHZrI8o6dSw6s6559zm573JKLGJ9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e5:11:9a:b3:58:08:f8:59:6e:4d:12:7e:57:46:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
        Validity
            Not Before: Apr 16 04:01:59 2024 GMT
            Not After : Apr 17 04:01:59 2024 GMT
        Subject: CN=7bce4b00a751936a615635724dda4a47110eb97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:3e:d3:be:67:1d:d1:cc:8d:55:cc:ac:ba:
                    99:ba:66:d1:e0:f6:19:6f:9d:31:f5:40:50:42:c3:
                    0c:80:3e:9d:f2:80:d7:02:0a:ef:47:16:a9:3a:48:
                    c9:fc:f1:9d:09:7b:79:06:5a:98:ae:4d:93:dc:fe:
                    f5:b2:1e:d0:35:6a:94:5b:b1:ad:c4:f6:71:50:53:
                    c7:15:9b:c3:a1:e2:e4:73:18:a4:79:b6:c7:32:80:
                    fa:ef:6a:74:4e:97:27:64:46:42:1c:cc:94:ce:20:
                    4b:e7:41:7f:9b:8f:b3:48:b8:e4:cb:4f:35:35:08:
                    3d:37:13:49:20:8f:c0:96:a1:c3:ad:b3:aa:70:63:
                    59:39:6d:3e:db:11:00:3c:3a:8e:a4:d7:26:e6:1f:
                    a9:b7:89:1d:54:6d:2e:b9:3b:c7:d3:c1:cf:ea:75:
                    9a:87:4d:60:8c:57:7e:04:47:3b:a2:68:38:93:26:
                    9e:ea:1e:62:db:bb:64:59:5f:1c:bb:c1:1f:7e:c2:
                    63:80:cd:f4:84:12:93:8c:7e:63:50:f0:bf:90:ec:
                    df:46:9e:2f:96:11:bb:4c:59:1d:f0:bd:94:64:fd:
                    cc:d2:40:f0:d2:8b:39:db:ee:f2:3d:80:16:ff:e7:
                    10:ec:a1:67:84:d6:03:dd:fd:55:0e:ee:92:a5:5d:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:4B:00:A7:51:93:6A:61:56:35:72:4D:DA:4A:47:11:0E:B9:7C
            X509v3 Authority Key Identifier:
                keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:63:59:be:a0:c3:b3:23:1e:2b:de:68:a4:77:af:ba:f7:
         83:71:ae:e4:16:13:94:cf:d5:e4:16:8d:b1:71:6f:59:61:74:
         87:67:b2:09:e7:24:c4:f7:62:e3:a8:c7:e4:2d:13:7d:16:20:
         10:8b:b5:71:88:c8:53:32:4b:9b:0d:03:13:ad:86:a9:bf:25:
         95:70:b1:35:c6:d7:65:87:6d:f3:e1:70:33:81:dc:b3:40:fe:
         76:9d:65:9a:26:39:4b:7f:2b:c8:72:70:0a:b1:b8:01:05:72:
         00:0b:92:84:1f:1b:82:50:c6:2b:93:a9:82:40:8f:73:09:fa:
         b9:8c:2b:cc:88:24:c8:dd:a9:fc:58:81:cc:63:3c:56:5a:ee:
         97:00:05:e6:d1:02:8e:fd:45:1f:3b:bf:42:ed:1c:17:aa:ab:
         ff:85:5b:4b:10:eb:3c:f8:f1:32:fa:ef:38:ce:e2:bd:8e:23:
         ec:7c:d8:29:2e:ce:20:b3:97:5e:66:f5:4e:34:95:eb:ff:34:
         f0:a5:f3:8f:23:bf:7f:40:5f:3b:34:fc:f2:08:c6:d6:0c:d5:
         2e:bf:a3:cc:bd:1c:cd:e3:81:ab:bb:62:b6:82:39:b5:b2:76:
         e4:b8:8d:07:60:9f:54:00:ee:8e:1a:f9:4b:0d:5b:6b:83:4d:
         f2:5b:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----