Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.mft
File:                     d9ARAEB_VT8PsTG-crMuSYEjfvw.mft (raw, json)
Hash identifier:          YNeAgaPyWN86Ig1H+aUuRknqy6IVbZzCAVYjqciOZOY=
Subject key identifier:   EA:59:16:2A:FD:B9:E1:2C:17:A4:B7:E0:6A:D1:D3:3F:FD:2C:B2:6C
Authority key identifier: 77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Certificate issuer:       /CN=77d01100407f553f0fb131be72b32e4981237efc
Certificate serial:       01906C05A673F036BBF6989C30C6A7F777F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.mft
Manifest number:          116C
Signing time:             Mon 01 Jul 2024 02:00:27 +0000
Manifest this update:     Mon 01 Jul 2024 02:00:27 +0000
Manifest next update:     Tue 02 Jul 2024 02:00:27 +0000
Files and hashes:         1: BMb0rW16dYBV_vIKMC4DCxNpxVs.roa (hash: cCKR+A5QMWWpV7BTCI/pRxrmyeu1uoMux3hTbt4gBOA=)
                          2: d9ARAEB_VT8PsTG-crMuSYEjfvw.crl (hash: SymiiLjqm+qCja5GpBz8v49aTnsB1l3uCWnDnZEEWuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:05:a6:73:f0:36:bb:f6:98:9c:30:c6:a7:f7:77:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d01100407f553f0fb131be72b32e4981237efc
        Validity
            Not Before: Jul  1 02:00:27 2024 GMT
            Not After : Jul  2 02:00:27 2024 GMT
        Subject: CN=ea59162afdb9e12c17a4b7e06ad1d33ffd2cb26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:bb:c8:27:54:08:cb:b1:2f:f3:c5:fa:87:
                    04:87:81:88:35:4b:b6:ba:a0:be:5b:95:1a:75:84:
                    be:26:27:3a:3b:eb:d8:6d:cc:53:7a:69:10:8a:c8:
                    84:a8:03:3b:19:88:5b:cc:15:99:c3:f6:ac:e4:6b:
                    20:fb:c3:47:71:cf:37:0c:fb:f3:41:97:42:fb:8d:
                    19:31:9f:9f:a1:31:5b:95:73:0d:b5:fe:95:ef:4c:
                    b2:d7:6d:3e:c4:be:d0:26:c5:ab:69:d6:88:f1:5d:
                    6c:e9:f4:0a:3f:f4:f1:96:7d:e1:b8:7f:10:a5:dc:
                    31:c2:49:9a:23:c1:1c:85:40:99:6e:fc:16:0a:18:
                    08:fe:cc:ec:97:1c:f0:a0:cf:04:10:f5:a9:67:b4:
                    87:45:f4:7e:fd:86:12:3f:5c:4f:0a:a5:4d:2c:da:
                    39:ea:e0:1b:e9:ad:da:c7:68:f9:0f:05:25:84:19:
                    97:6f:39:9d:f3:2b:01:73:e0:6c:8c:92:26:9c:a9:
                    7b:a1:e0:ee:61:fb:b4:df:00:b1:01:15:8b:44:57:
                    33:52:64:dd:e1:aa:43:37:7d:d8:e5:88:3f:39:cd:
                    fd:02:1a:9e:b3:45:2d:40:e6:97:63:0a:30:b7:62:
                    68:36:55:32:38:e1:3d:a8:3d:f7:8a:c9:99:23:c2:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:16:2A:FD:B9:E1:2C:17:A4:B7:E0:6A:D1:D3:3F:FD:2C:B2:6C
            X509v3 Authority Key Identifier:
                keyid:77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:c6:14:7f:f1:33:0c:e9:36:1a:61:6d:70:ae:07:4a:ba:
         24:aa:fa:bc:a6:86:6a:81:4e:b9:e7:4c:0a:aa:50:4f:3b:be:
         3c:6d:cb:e5:46:58:7d:a1:f1:3d:17:20:a8:13:66:2c:9d:56:
         e5:a8:07:a1:95:f5:3f:5c:d1:18:3d:84:2d:12:f7:5f:70:f4:
         79:1c:41:51:cd:82:7a:83:9d:3b:e0:52:dc:f1:69:17:9c:9c:
         6e:05:5c:25:4f:a2:9f:44:af:a8:5e:b2:63:6d:8b:90:db:81:
         5e:60:84:cd:61:e9:71:ee:30:04:80:53:ed:51:5a:05:a2:c3:
         38:59:7c:19:c6:cf:6d:16:c5:7f:e0:31:58:03:89:9e:b1:b1:
         2a:ff:96:b9:bf:82:c5:e1:89:5d:3b:1e:65:b8:d0:fe:2f:3d:
         a6:a3:32:b4:31:ff:97:6b:1a:9e:b5:e5:ad:85:9a:77:2e:05:
         97:7e:43:37:77:da:13:83:6e:04:4a:8e:19:cb:1f:0e:bb:7a:
         35:84:b8:46:97:de:f5:e7:96:47:4a:1e:a2:7c:09:f7:6d:cc:
         13:ba:2d:b7:dd:80:c9:7d:2c:69:7e:7e:67:15:65:6c:81:e0:
         2d:c5:73:ba:49:bb:62:2a:ad:6f:50:d5:8e:92:51:36:95:29:
         6f:94:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----