Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
File:                     0BdL5CbKRRE0N1Teo31qNgo0qbg.mft (raw, json)
Hash identifier:          C6REwtgvuIM1EP+NhcxHbAaJtKjSochy86XiAmU0mFE=
Subject key identifier:   6D:D3:1F:6F:B4:22:EF:65:B9:E4:1C:8A:1E:66:71:3A:CC:35:35:21
Authority key identifier: D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Certificate issuer:       /CN=d0174be426ca4511343754dea37d6a360a34a9b8
Certificate serial:       01923211D67A181B47DCAD774C92A930AFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
Manifest number:          126C
Signing time:             Fri 27 Sep 2024 06:01:22 +0000
Manifest this update:     Fri 27 Sep 2024 06:01:22 +0000
Manifest next update:     Sat 28 Sep 2024 06:01:22 +0000
Files and hashes:         1: 0BdL5CbKRRE0N1Teo31qNgo0qbg.crl (hash: XxQ/Td0MoKiLR3l+eRGW/dm+xQiGoATJNl0RguEEvZE=)
                          2: iI3jJU2eI3m78H8QE9sH5t8vkiI.roa (hash: TSggtqGr27mQn8zZjHAMRv4x/1YJRMajNh3tBIw+Pgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:32:11:d6:7a:18:1b:47:dc:ad:77:4c:92:a9:30:af:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0174be426ca4511343754dea37d6a360a34a9b8
        Validity
            Not Before: Sep 27 06:01:22 2024 GMT
            Not After : Sep 28 06:01:22 2024 GMT
        Subject: CN=6dd31f6fb422ef65b9e41c8a1e66713acc353521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:bf:21:15:be:c5:20:32:80:a8:97:98:11:
                    87:3c:ff:41:ae:ce:35:86:05:a9:7e:8a:7a:ee:14:
                    63:02:98:1f:d6:bb:ed:5c:ea:e4:0f:2b:b1:52:a1:
                    9c:ba:f0:df:3c:36:eb:31:d0:6f:f8:db:24:d7:9c:
                    49:76:80:d5:cd:cc:97:6f:6d:18:91:7d:77:84:61:
                    d3:d3:46:e1:fb:61:81:7e:60:b2:82:73:cf:b1:1f:
                    3d:83:c3:c2:d6:42:42:7f:81:38:48:7c:c7:35:6d:
                    8a:0c:bd:2d:4a:f2:39:a3:c4:f8:f5:65:67:be:4f:
                    73:28:e2:5e:07:b9:17:28:1b:12:a7:8a:ba:c6:65:
                    3e:88:b1:64:21:d9:8e:62:72:95:bf:e8:be:b5:31:
                    dd:2c:93:aa:ca:0a:4f:d5:04:04:f6:9c:09:7a:bb:
                    8c:20:89:fe:ee:11:6e:56:4b:be:d2:b3:a3:24:22:
                    e3:08:68:b5:d2:97:dd:a2:4d:68:ca:84:45:6c:46:
                    65:d3:25:99:bb:de:ae:e9:dd:4f:f9:1e:f8:9a:a6:
                    4b:84:b1:f3:39:52:38:28:c8:fa:0d:33:a9:0b:ab:
                    50:d4:2f:de:90:8c:f5:6d:b1:af:59:3f:8f:00:17:
                    0f:3d:d7:84:75:be:a7:24:ab:2b:5c:d0:6f:36:2d:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D3:1F:6F:B4:22:EF:65:B9:E4:1C:8A:1E:66:71:3A:CC:35:35:21
            X509v3 Authority Key Identifier:
                keyid:D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:40:9f:8d:ad:bb:7c:54:58:4b:bc:60:c0:cd:e1:c8:64:
         f8:24:3c:4d:9d:ba:14:c2:46:47:ce:c6:fb:1d:57:00:ad:92:
         48:ab:32:b2:96:d0:a4:2b:b7:12:d1:9a:82:6c:c1:4f:27:91:
         e8:be:c2:25:de:5a:aa:d4:7a:8e:c8:47:f4:36:ae:e2:9d:1f:
         4e:08:ff:c5:ba:30:43:25:b7:5a:42:ec:d5:07:4c:cf:95:1b:
         8a:ab:9d:cf:d8:62:b3:5a:99:2e:b5:d5:01:b3:da:0d:bd:87:
         ad:b9:2b:e5:4c:a3:89:18:5f:a6:70:57:1d:b3:37:43:e9:ff:
         ee:89:4f:30:bf:76:5b:fa:4f:be:04:61:02:64:d3:e6:ab:bd:
         66:3f:77:b3:a0:60:e1:9e:f9:03:b0:9d:10:84:cd:b0:e9:2c:
         c2:b5:7b:5d:31:91:35:8c:f9:1d:5c:2c:d0:16:2e:83:7e:f3:
         a8:ca:d7:2d:8f:32:dd:16:e8:e0:db:6a:d1:54:5d:ca:da:0b:
         7f:3a:7b:e8:d4:bf:9b:2f:6c:5a:45:d6:bd:9c:89:a8:c1:86:
         43:15:06:a4:2f:f4:15:66:ba:54:e0:6c:9b:34:48:be:d2:70:
         73:a8:67:72:13:6c:af:ee:03:56:06:cc:9f:0c:57:b9:35:74:
         3f:37:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----