Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
File:                     hfyyKdh4rherMdmISIku6ivvluE.mft (raw, json)
Hash identifier:          Od5eLAcVnqTOO7xGFDw+HOywvOLkoDe69dUm6duaJ6s=
Subject key identifier:   B1:F7:13:5D:68:20:7F:9E:32:62:79:61:5A:F0:7D:1E:63:C3:73:9F
Authority key identifier: 85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1
Certificate issuer:       /CN=85fcb229d878ae17ab31d98848892eea2bef96e1
Certificate serial:       01919CB91C78FD7A99EDC15C5C5DBB3C48FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
Manifest number:          128B
Signing time:             Thu 29 Aug 2024 06:01:02 +0000
Manifest this update:     Thu 29 Aug 2024 06:01:02 +0000
Manifest next update:     Fri 30 Aug 2024 06:01:02 +0000
Files and hashes:         1: BAS0U9mPjEuGyMwPtaYguX9Lx8M.roa (hash: OvtM+f1nrNFYqueyPV/1JlVtnnu737QmSa3TE+o+Co0=)
                          2: hfyyKdh4rherMdmISIku6ivvluE.crl (hash: vRuhl7ET477OYn+hDksfw0ACCXs/vSnQWNKpQrEd/Og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9c:b9:1c:78:fd:7a:99:ed:c1:5c:5c:5d:bb:3c:48:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85fcb229d878ae17ab31d98848892eea2bef96e1
        Validity
            Not Before: Aug 29 06:01:02 2024 GMT
            Not After : Aug 30 06:01:02 2024 GMT
        Subject: CN=b1f7135d68207f9e326279615af07d1e63c3739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:cd:cc:67:85:62:10:0d:b2:29:91:b4:b4:
                    87:58:39:8a:01:66:5e:9b:57:23:8e:9a:f4:15:cc:
                    f2:4f:36:53:60:c9:2a:ee:f5:c1:41:55:79:d8:fa:
                    99:65:f2:7c:13:66:d3:b4:7f:cb:cd:45:88:50:40:
                    81:d1:44:60:74:2f:f9:11:8e:d3:d4:e6:71:18:a8:
                    33:db:1a:34:5f:ce:9d:42:17:20:4d:15:dd:b0:b8:
                    b8:cb:0a:77:ca:bb:1f:ff:0b:49:7e:15:9d:53:64:
                    c3:8c:8d:3e:b0:7f:11:92:0c:cb:e5:b0:be:1c:9c:
                    55:96:91:6a:e1:46:2c:e4:73:07:be:e0:f2:6e:c8:
                    a6:b4:80:52:8e:00:bc:13:b4:eb:8e:f7:a3:45:ae:
                    d5:4e:98:ac:f3:c5:8e:2b:74:36:52:f1:4d:38:0a:
                    f6:82:fa:62:9a:a7:5c:a3:0e:f6:b7:ca:83:69:25:
                    17:0f:84:41:67:4f:47:8a:f9:4f:22:17:f5:66:6c:
                    17:80:2d:eb:1d:e0:4a:3f:33:a4:28:17:ad:55:6c:
                    b4:4d:0a:e5:24:55:19:d9:29:8f:37:5d:c1:44:23:
                    5b:d9:5c:cf:70:45:ed:b5:b9:70:34:d7:3e:44:c2:
                    04:dc:cd:7e:0b:6f:13:bb:34:83:35:94:38:61:fb:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:13:5D:68:20:7F:9E:32:62:79:61:5A:F0:7D:1E:63:C3:73:9F
            X509v3 Authority Key Identifier:
                keyid:85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:22:61:66:91:0c:a6:35:8a:7d:53:20:41:82:f6:6e:63:87:
         f2:99:9e:f5:11:eb:ea:66:18:8f:11:73:45:f6:a3:55:37:de:
         34:f6:95:42:92:1b:be:fe:0f:09:1a:82:08:e5:85:7e:b6:40:
         db:43:c8:c3:32:87:76:99:11:05:6f:fd:3b:7a:2f:67:0b:9f:
         7f:31:a2:02:01:14:6d:41:36:ae:09:a7:17:ba:f4:1c:02:db:
         ad:68:a9:c1:1c:5c:35:b4:21:e6:c0:95:da:9c:80:c3:04:05:
         03:19:dc:6b:b1:84:61:46:72:05:c8:f9:43:3f:66:57:e8:65:
         f2:ea:b9:d7:24:21:07:fc:49:c7:3b:94:8c:2d:d1:ae:82:03:
         05:0c:5d:f7:78:a5:f8:28:d6:60:16:91:f2:54:fd:eb:81:0c:
         af:4d:1b:c2:ac:cd:ea:eb:25:ca:8b:43:a4:55:06:bd:4e:c1:
         c0:79:3c:c5:0d:b6:26:06:7c:fa:72:c9:29:83:3a:c2:76:de:
         0f:27:9c:a5:ec:02:87:90:b6:7b:cf:62:b2:e9:0e:ca:ff:10:
         c8:e9:8b:da:ca:c9:cb:3d:ce:f6:9a:9b:ab:07:87:bb:e9:f0:
         62:ba:61:1c:d7:96:a0:84:64:2e:ba:44:e9:5d:ba:95:bd:4d:
         84:62:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----