Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft
File:                     b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft (raw, json)
Hash identifier:          ga1ydO62HZQWeiwoduMzim8t5A7TNJhbC5IMth9KHtY=
Subject key identifier:   99:4F:53:B5:05:C3:E4:54:64:8C:46:1B:62:89:D5:82:6C:DF:37:89
Authority key identifier: 6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78
Certificate issuer:       /CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
Certificate serial:       01929421B610327AFCA60F714A96ED641DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft
Manifest number:          130D
Signing time:             Wed 16 Oct 2024 07:01:30 +0000
Manifest this update:     Wed 16 Oct 2024 07:01:30 +0000
Manifest next update:     Thu 17 Oct 2024 07:01:30 +0000
Files and hashes:         1: KvIrK-yiTycFjhVnWB5WI3zYDpw.roa (hash: KwBIc1BMzxQ+cAE4JsfD//IbMPActQH0uPth6ibpw4w=)
                          2: b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl (hash: J8D67DG522ZA4BzlKUtm37aolL8GVCzKwrbUavA/Mrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:94:21:b6:10:32:7a:fc:a6:0f:71:4a:96:ed:64:1d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
        Validity
            Not Before: Oct 16 07:01:30 2024 GMT
            Not After : Oct 17 07:01:30 2024 GMT
        Subject: CN=994f53b505c3e454648c461b6289d5826cdf3789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:70:43:e7:cf:1b:82:77:ad:10:00:0f:56:
                    73:0b:5b:1d:da:f7:99:57:dc:c1:08:cf:e3:c0:85:
                    c0:c7:87:63:55:f3:37:5a:be:79:73:ef:fd:db:dc:
                    8c:d1:8f:c4:6c:5b:f5:46:c8:19:b1:8f:eb:8d:08:
                    f3:45:74:0c:d0:3c:e8:60:60:17:98:85:41:75:9f:
                    ce:05:7d:ad:10:14:6f:32:01:a9:6a:98:7f:d9:f9:
                    90:2b:11:0a:e2:71:aa:b0:83:0a:1f:be:57:6f:15:
                    7a:82:a2:82:be:b5:09:3b:34:86:30:49:96:a3:5c:
                    cc:67:6d:3e:6e:38:4d:02:44:21:34:c4:18:ba:22:
                    98:27:b4:dd:35:f3:5e:df:c8:82:7c:70:22:e4:98:
                    ac:92:bc:14:52:7f:1c:9e:1f:4f:da:cb:6e:19:08:
                    cc:73:23:f9:41:88:9f:a5:77:58:8b:12:8b:aa:1b:
                    f5:b3:e5:0d:e0:7d:77:1d:d3:e0:56:4b:3c:da:01:
                    46:05:a4:8f:54:fb:d6:28:b7:dd:f8:17:13:cc:6f:
                    da:0b:70:bb:b4:c8:05:21:37:56:52:95:ee:36:3a:
                    b6:ac:13:bc:a3:3d:af:9c:24:d7:ca:67:db:45:0d:
                    e8:07:44:0c:f3:ef:68:37:f5:ff:a3:83:53:86:c3:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:53:B5:05:C3:E4:54:64:8C:46:1B:62:89:D5:82:6C:DF:37:89
            X509v3 Authority Key Identifier:
                keyid:6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d0:ee:2b:5c:c8:98:53:47:19:77:c4:e0:d1:3b:02:08:1a:
         b5:3a:c4:37:29:6c:4a:e3:09:08:e0:2e:e9:af:69:99:60:01:
         0d:d9:2e:76:e1:af:d6:b0:ea:7c:97:5a:7e:c8:4c:c7:cf:de:
         6e:42:b2:6e:a0:36:80:f2:5d:1e:b4:4e:ca:00:37:0f:41:86:
         58:dc:c7:88:2d:44:45:9a:5c:2d:41:b6:6b:8d:03:35:ea:7e:
         ed:8d:36:f3:cc:8e:71:1a:08:c5:3a:ec:8e:9c:dd:82:7f:56:
         f0:9d:e9:d6:5e:ce:2d:a8:22:2b:e5:ff:50:95:23:fa:32:01:
         af:be:35:fc:86:ed:cc:93:c3:48:29:25:a5:ec:5f:1f:1b:d7:
         d7:8e:5c:b6:7b:ec:a0:58:41:a0:e5:a4:7c:72:d3:e7:65:3b:
         03:2f:48:7a:aa:7c:a8:4b:c0:34:4c:c5:a9:45:7e:16:de:25:
         6f:a0:24:9c:84:11:85:c4:2e:0b:e1:c1:01:91:f1:16:56:7a:
         18:91:98:70:6b:8c:ce:95:b3:66:9d:07:fd:dc:b6:f0:a5:b8:
         ab:24:51:1d:73:95:1d:b3:33:be:26:fa:f1:3a:97:b2:9d:a0:
         1c:ff:90:f6:f4:c2:39:37:59:0c:fb:5f:fc:43:d3:3d:9c:88:
         e5:b5:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----