Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft
File:                     BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft (raw, json)
Hash identifier:          cGnAZDELwMRgIc6S97cX1k+zYoiVW81gUfu1ovBNiXo=
Subject key identifier:   B6:2E:88:E5:02:42:80:34:8C:11:83:2F:4C:BF:CC:66:F4:3D:19:2B
Authority key identifier: 06:5C:4B:FF:9A:0E:E9:F9:87:95:1F:48:0F:81:57:B9:1A:89:83:F8
Certificate issuer:       /CN=065c4bff9a0ee9f987951f480f8157b91a8983f8
Certificate serial:       01921C2EAEDD84161735DC21C45CA384DBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlxL_5oO6fmHlR9ID4FXuRqJg_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft
Manifest number:          12CD
Signing time:             Mon 23 Sep 2024 00:01:14 +0000
Manifest this update:     Mon 23 Sep 2024 00:01:14 +0000
Manifest next update:     Tue 24 Sep 2024 00:01:14 +0000
Files and hashes:         1: BlxL_5oO6fmHlR9ID4FXuRqJg_g.crl (hash: cP8PynDaOG2sLhBb2kYwGBlZaAp9PiXVUm6GFFhTbwA=)
                          2: kUr9DjEwmehbKgfncE1Pj-8N80w.roa (hash: uRvPZbPZA85Z01MYPkPEQAj8iDxJ5N/90GVH1bYc8ZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1c:2e:ae:dd:84:16:17:35:dc:21:c4:5c:a3:84:db:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c4bff9a0ee9f987951f480f8157b91a8983f8
        Validity
            Not Before: Sep 23 00:01:14 2024 GMT
            Not After : Sep 24 00:01:14 2024 GMT
        Subject: CN=b62e88e5024280348c11832f4cbfcc66f43d192b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:40:71:ad:a1:b5:7a:08:87:0a:a2:8a:19:
                    09:6e:24:22:08:27:37:05:e9:f2:b3:e1:98:bd:31:
                    8e:28:bf:7f:18:dc:12:8a:64:f9:7f:1f:08:9f:93:
                    90:4e:f3:89:7a:b5:7d:96:db:9d:c1:0c:b5:48:3e:
                    d8:f6:4f:32:76:df:6b:77:c6:3f:1c:c2:d7:0b:4a:
                    bc:2f:67:b7:68:4a:5e:8b:d7:6a:a0:bf:c9:41:3a:
                    76:82:57:1f:99:56:04:fe:1f:01:ed:f7:25:e9:84:
                    19:be:7b:92:e4:c4:8f:58:e8:55:69:54:f9:22:0a:
                    a7:d7:28:3f:16:1e:ac:ed:8d:ef:16:46:28:3e:b8:
                    e0:fa:b3:3a:89:70:9c:10:45:0f:49:96:be:6c:56:
                    25:41:c3:f7:9c:02:b9:cf:2c:45:e1:38:0e:9e:a5:
                    6f:5a:5b:1e:05:7b:97:4b:9a:ff:f3:9d:29:81:32:
                    3e:f8:74:df:80:1b:53:b7:a5:72:ff:20:14:b4:0f:
                    ac:09:05:ba:88:11:33:bc:a5:39:53:31:17:9c:8c:
                    9d:8f:15:59:2c:8d:ef:cb:30:6b:3c:9f:f8:ed:72:
                    60:18:0c:34:a5:43:da:75:90:c4:d3:15:0c:01:f6:
                    99:0b:6d:6a:c1:2a:b6:40:00:71:54:85:b1:cf:ab:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:88:E5:02:42:80:34:8C:11:83:2F:4C:BF:CC:66:F4:3D:19:2B
            X509v3 Authority Key Identifier:
                keyid:06:5C:4B:FF:9A:0E:E9:F9:87:95:1F:48:0F:81:57:B9:1A:89:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlxL_5oO6fmHlR9ID4FXuRqJg_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:b8:14:36:53:22:5b:b1:2a:54:45:e3:a3:51:88:36:f7:
         57:c7:32:61:33:88:38:2e:42:61:76:10:64:7b:ea:13:c4:7d:
         2b:fc:35:d5:41:09:ca:5f:bb:ac:9f:2e:f7:4c:e6:2c:36:bf:
         ac:f2:37:c7:17:5f:6c:52:ea:25:01:0d:bf:a0:e4:f1:04:b1:
         78:79:8b:74:9a:8e:05:2e:eb:54:6c:c7:26:05:27:2b:e7:d0:
         f0:9a:08:c0:56:96:c5:b8:d8:30:77:41:5b:04:0d:27:5b:ab:
         bb:bc:97:6c:97:4c:59:1e:f6:bd:78:be:c8:34:b4:4e:2e:a2:
         b4:0b:c6:bb:ff:09:f0:46:f0:20:ca:cc:9f:10:59:9b:cc:6e:
         2d:2c:d4:31:ce:21:19:0a:f7:c1:6a:17:89:f5:e5:2f:85:fc:
         93:4b:0e:d3:c9:36:46:57:b3:9d:a5:0f:1f:45:20:55:34:d4:
         bb:03:83:dc:76:7a:50:18:e8:fb:dd:58:f7:0b:4b:e5:1f:aa:
         15:af:2e:e3:05:19:91:d1:64:15:4f:f0:c5:a1:17:7d:f2:d1:
         bb:12:f1:cf:4a:71:87:3f:10:85:6e:b4:dc:ad:3c:6a:0e:76:
         9c:ef:01:16:24:97:7c:e1:c2:41:05:9c:7e:1b:44:7b:61:3a:
         ee:5c:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----