Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.mft
File:                     BKd0QvaJXJAyRkJgYiiHqpb8bao.mft (raw, json)
Hash identifier:          jWSjSIZxc9fG8onee/9afAJKpIB3XR5dBJGV+w9lGLo=
Subject key identifier:   63:6D:12:59:29:47:A3:1B:ED:D6:58:87:ED:BD:3B:7A:7E:00:49:61
Authority key identifier: 04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA
Certificate issuer:       /CN=04a77442f6895c9032464260622887aa96fc6daa
Certificate serial:       018D573E1EE9BFB49E53CABE94D6EDBC68CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKd0QvaJXJAyRkJgYiiHqpb8bao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.mft
Manifest number:          06CB
Signing time:             Mon 29 Jan 2024 22:01:45 +0000
Manifest this update:     Mon 29 Jan 2024 22:01:45 +0000
Manifest next update:     Tue 30 Jan 2024 22:01:45 +0000
Files and hashes:         1: BKd0QvaJXJAyRkJgYiiHqpb8bao.crl (hash: gJJqrbG1/IawGxAmsbvNSzxYhZ79d95MtnluOymNH1o=)
                          2: eOZGmF3QG3RGGRgxC4QfRLI7-Qk.roa (hash: qY4BjAQ3L2RdjhJrv+9c3TTQfiIgQ0YVws7IL8f5MUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:57:3e:1e:e9:bf:b4:9e:53:ca:be:94:d6:ed:bc:68:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a77442f6895c9032464260622887aa96fc6daa
        Validity
            Not Before: Jan 29 22:01:45 2024 GMT
            Not After : Jan 30 22:01:45 2024 GMT
        Subject: CN=636d12592947a31bedd65887edbd3b7a7e004961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:58:55:42:c5:e2:90:f0:43:92:da:fb:85:
                    3f:4c:0e:3f:e1:04:2c:dd:4f:2a:d4:22:f0:a8:58:
                    1e:1c:1c:6e:a8:57:13:ee:61:38:93:9c:e6:43:64:
                    d8:c7:93:a7:a0:18:9e:42:18:bd:f5:cf:88:6f:11:
                    f6:2e:ce:95:7d:8a:6e:8d:fa:4b:38:20:00:ef:9e:
                    c9:eb:87:ba:25:64:04:5b:2a:18:40:aa:72:ba:bc:
                    80:93:9d:9d:3a:8e:11:96:11:37:e3:46:d4:b2:07:
                    9f:d5:ea:3b:7b:7e:6c:f1:85:89:80:d6:c8:3c:17:
                    03:76:f7:9e:13:8c:94:f6:b7:f8:09:a9:24:a7:44:
                    10:40:10:27:ac:f1:27:c6:c1:ff:dd:0d:42:90:4c:
                    fc:c8:cc:cc:2d:3c:d4:39:13:f0:fa:13:cf:40:c1:
                    38:5a:dd:aa:bb:2a:5b:77:97:8c:b1:51:48:7f:ec:
                    25:53:c5:96:69:5d:ea:ae:a1:d9:33:3b:01:86:8c:
                    21:2d:dd:02:c8:05:80:d8:1d:5c:a9:41:c4:e7:08:
                    b4:d1:61:22:7f:39:7c:6e:47:6c:e8:97:ad:14:55:
                    f1:af:a5:e3:79:b6:23:c3:6c:72:8e:ac:53:d1:f8:
                    bb:7b:e0:88:f2:00:38:1d:0f:53:29:9c:e4:de:81:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:12:59:29:47:A3:1B:ED:D6:58:87:ED:BD:3B:7A:7E:00:49:61
            X509v3 Authority Key Identifier:
                keyid:04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKd0QvaJXJAyRkJgYiiHqpb8bao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:1f:aa:45:89:cd:f7:02:15:32:7c:90:95:3d:ac:82:23:
         65:03:84:eb:6c:fa:d3:6b:6f:9b:39:60:2a:90:58:1d:fa:9b:
         96:5c:8b:d5:ea:9f:de:07:a0:1e:f7:b7:7f:ef:ec:55:d4:ea:
         7c:b7:8b:f7:11:ab:23:6a:14:0e:98:46:d9:52:4d:22:e5:0d:
         68:46:7f:87:92:ce:7a:ef:fc:92:d5:f9:30:0a:ec:b6:77:6f:
         8c:90:2d:8d:c4:3d:29:8c:5a:a9:d6:8c:32:bb:a4:85:96:21:
         3a:e5:eb:bc:ae:07:b4:f0:51:71:ef:a1:6d:74:d6:99:8c:d5:
         d8:f5:5d:e8:fd:e1:9f:6c:b9:f4:88:93:e0:ca:ad:88:64:ca:
         fc:e4:ff:d6:2f:f7:c6:65:94:60:d3:ac:9d:91:2e:30:70:2e:
         c8:dd:04:57:93:fb:82:93:bd:91:92:93:ba:8c:1d:8a:54:d9:
         7a:76:e1:e9:37:2a:b6:67:65:f2:2f:2c:a9:25:8c:15:54:9b:
         31:85:04:b6:41:17:5c:a3:0c:fb:0c:49:a0:e1:99:59:00:6f:
         45:ef:83:9a:9e:10:20:2d:68:c0:31:d7:54:62:0e:82:6e:cb:
         c0:2b:2e:11:2d:b6:5b:25:d9:52:c0:b5:d5:14:5e:77:df:2e:
         99:90:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----