Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
File:                     i5k5NI9Nv9sQH096N8ecBHR9DQM.mft (raw, json)
Hash identifier:          /RVlkNEz38urMMET1hIDHv6Pp+hyYBZsVYdXC0vrjGE=
Subject key identifier:   0B:AD:92:41:C4:F1:7E:F7:6A:89:9D:79:04:11:E7:6B:70:21:4E:75
Authority key identifier: 8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03
Certificate issuer:       /CN=8b9939348f4dbfdb101f4f7a37c79c04747d0d03
Certificate serial:       0192E0BD8B8EFD47E38D4A0CC1D47375B90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
Manifest number:          07E2
Signing time:             Thu 31 Oct 2024 04:02:51 +0000
Manifest this update:     Thu 31 Oct 2024 04:02:51 +0000
Manifest next update:     Fri 01 Nov 2024 04:02:51 +0000
Files and hashes:         1: i5k5NI9Nv9sQH096N8ecBHR9DQM.crl (hash: XMeuCq5Ey/HxJq5m4zkB2/eKeJAl+1RZnBSj3u8r8r4=)
                          2: tREMf7QGdM-PQji27EWjh87JWTs.roa (hash: s5XimyknGqlx3y0B3fb8n7wxeFvpK0dSsHVAasJO12w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e0:bd:8b:8e:fd:47:e3:8d:4a:0c:c1:d4:73:75:b9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9939348f4dbfdb101f4f7a37c79c04747d0d03
        Validity
            Not Before: Oct 31 04:02:51 2024 GMT
            Not After : Nov  1 04:02:51 2024 GMT
        Subject: CN=0bad9241c4f17ef76a899d790411e76b70214e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:7d:7d:64:d2:3d:5d:cb:67:e2:7d:c5:18:
                    94:d8:e4:bc:53:14:22:d8:82:54:ab:8a:e6:c5:62:
                    c3:7a:67:29:e4:8d:29:9e:be:08:52:3c:76:d5:11:
                    d1:8d:47:29:af:5c:9e:af:4d:4e:fb:e7:77:7b:7e:
                    ad:3d:47:07:13:28:0c:b1:a2:ff:a1:9a:7a:d2:75:
                    bd:17:88:87:e6:e5:cb:79:14:90:f8:6a:b5:77:a2:
                    53:c6:fa:51:c5:aa:66:5d:f5:c5:e6:7e:8b:13:f8:
                    55:cf:a2:da:f2:ee:9e:bc:b9:16:35:85:21:05:8c:
                    88:4a:02:92:e1:21:2c:1f:48:c9:da:64:c5:1a:7c:
                    9a:16:ac:05:49:88:87:bc:62:5a:e5:76:b7:d8:d4:
                    01:00:cd:65:a9:7b:18:c0:b4:76:a0:71:04:c2:4f:
                    7f:db:be:f3:97:9e:7e:d2:45:0a:4e:c0:58:3b:28:
                    fc:9c:7a:7c:c1:b5:b9:28:8d:5c:7d:19:50:9c:db:
                    87:96:d9:83:e5:8e:fa:35:62:8e:71:fd:03:70:e3:
                    ff:04:87:21:3d:ad:37:4a:b5:15:55:2f:2b:c7:62:
                    e7:05:23:9f:b9:03:0a:bf:2f:62:ce:98:9c:0c:5c:
                    4e:f9:bb:4a:2c:c5:81:f3:4f:60:5d:c8:02:0b:f0:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AD:92:41:C4:F1:7E:F7:6A:89:9D:79:04:11:E7:6B:70:21:4E:75
            X509v3 Authority Key Identifier:
                keyid:8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:64:34:5b:43:fd:37:14:45:2b:37:44:b0:80:c8:3b:5f:
         6d:87:80:b4:fe:fb:56:4f:5d:a7:58:56:46:c1:91:f1:05:ba:
         0a:fd:94:5c:62:3b:4a:ba:14:e0:80:bd:6a:71:9a:0e:8f:80:
         92:62:37:a7:86:b5:e5:6f:cc:c9:2f:96:13:ac:63:fc:5e:16:
         e8:c7:04:66:5e:54:cd:d9:85:c6:1f:ad:22:70:56:a8:4a:5a:
         f3:45:15:c8:47:8a:aa:3f:fa:05:2f:88:9f:d8:77:f6:35:76:
         41:1f:6e:15:fa:a9:8e:a2:81:5a:73:5c:62:a9:f5:ab:10:36:
         00:13:32:57:b4:2c:27:e1:4d:03:91:56:ba:40:b6:98:aa:8d:
         97:46:0f:0e:b8:19:f8:7b:e4:3f:78:25:ae:93:e4:b7:d7:b8:
         ce:b3:9a:53:47:4c:bd:a3:47:95:3b:97:52:d5:15:60:75:d8:
         3a:d2:3a:ad:f4:c0:94:72:ac:eb:47:15:c7:12:e9:6b:0c:31:
         87:d7:23:2f:7b:22:86:ea:9b:d3:58:3a:e3:f0:3f:d0:cc:1d:
         a2:c4:59:30:75:15:63:59:b5:49:15:b9:f8:36:eb:c6:6b:b8:
         37:5e:b3:90:49:4b:97:f1:1a:27:4b:72:c4:c5:78:a7:fa:a0:
         a0:37:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----