Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.mft
File:                     K4lm0PFP1ZmTykh453T6R3kDZpQ.mft (raw, json)
Hash identifier:          hF9mVEy+tXF169+fM01d8K0yW/P7Sevw9lPiykTQQKU=
Subject key identifier:   55:00:A3:34:C1:16:CF:5D:42:94:05:AB:2F:27:24:3F:EC:10:F4:54
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Certificate issuer:       /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial:       018E11EB2FF13DCEB01306C0DD29F990A847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.mft
Manifest number:          01B1
Signing time:             Wed 06 Mar 2024 04:00:09 +0000
Manifest this update:     Wed 06 Mar 2024 04:00:09 +0000
Manifest next update:     Thu 07 Mar 2024 04:00:09 +0000
Files and hashes:         1: 74O9CF2yHMaUBEhcWd6QeUsUbOI.roa (hash: uhMnU7c+F+RTu2DvxrtBHJN4DNf+PmpuS1wJ8cEHq8g=)
                          2: 84IXKrykMHhQZadqxb0M1TXpcYI.roa (hash: b+8zzbLY/VeNpaX2SYeC0kMBetjfoN3ysocF9RsOKE0=)
                          3: EnGNfEjT6Y9BTRjk_Uw9VpyifnY.roa (hash: JxOECGAXwA/YDGNPLzePN4Qy1g6T+3v/oIxdC2Jn3Is=)
                          4: I-PPAOt-YKUBgDp6l0tkZ2d7eYY.roa (hash: W0cC5ZLdlKPvP0lZjgJP0XpZcTOKChfvHR1OJxNvQww=)
                          5: K4lm0PFP1ZmTykh453T6R3kDZpQ.crl (hash: kSvKB3XWtdRxmGhEUeuBGGie9YibE/1GbEHgYIqb8nk=)
                          6: b2uiN-RTrtHIUR5ExCICg3dQpLw.roa (hash: YIQ7dwM+CEBuNyuzyuIaM7qfDrk8tRKFQNDyc4ncCAA=)
                          7: oq685bLMKvQhg75R4EcVDNsXm4U.roa (hash: OR/IdOISWYE7dXlUaGRQlKNYW7/x6mXkllgdLxjCnVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:11:eb:2f:f1:3d:ce:b0:13:06:c0:dd:29:f9:90:a8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
        Validity
            Not Before: Mar  6 04:00:09 2024 GMT
            Not After : Mar  7 04:00:09 2024 GMT
        Subject: CN=5500a334c116cf5d429405ab2f27243fec10f454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:f0:ec:06:10:d9:4f:44:be:97:5b:87:80:
                    87:0b:fb:31:34:bd:b2:6a:b3:01:fd:79:16:a9:3c:
                    63:ce:ff:4d:0b:e4:a4:a0:3a:d4:48:c3:cf:b5:6d:
                    e3:3d:04:19:e8:49:37:5b:88:e6:f8:77:2c:d0:52:
                    2b:86:28:8e:33:26:ea:2d:d8:d7:23:78:e6:41:05:
                    10:2c:5c:6a:e8:6b:ad:a4:15:5d:79:b5:42:00:82:
                    59:d2:5a:83:2f:6b:3b:41:7d:be:65:bd:78:f6:d7:
                    0a:cb:90:2b:03:99:99:0a:52:b8:d2:26:b6:1b:6c:
                    af:1c:02:5c:92:86:9c:bb:54:18:db:71:05:8f:0e:
                    ef:24:79:c6:7b:da:71:f5:e3:4d:b4:fa:9b:89:04:
                    da:17:17:92:3b:bf:a2:eb:ab:ce:7f:58:71:4b:f3:
                    fc:27:ae:2e:54:f5:a0:ba:f9:a2:5a:d7:fa:ac:83:
                    be:de:81:4d:4c:90:12:2c:3f:08:e8:31:50:55:c7:
                    da:2a:63:8a:d0:05:80:f0:c7:b6:e9:46:b9:e2:d8:
                    1d:b7:97:e8:1c:16:e9:2a:c5:a6:fa:c2:75:ca:b9:
                    3f:82:73:94:fc:65:39:95:81:7b:62:77:86:40:ea:
                    2b:cd:07:f0:c9:98:d3:9d:0b:ff:81:06:22:20:a5:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:A3:34:C1:16:CF:5D:42:94:05:AB:2F:27:24:3F:EC:10:F4:54
            X509v3 Authority Key Identifier:
                keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:ca:3d:df:9b:fb:15:f3:a2:4c:1b:bc:58:e2:46:a5:d1:
         b9:92:99:1d:fe:85:b0:ad:5e:fe:1e:10:21:32:36:37:9e:32:
         b2:c1:98:bb:3f:61:e8:33:c3:63:af:4b:2d:86:cd:a8:76:b4:
         c5:93:81:fe:8c:3e:f0:62:e3:37:ca:28:0d:f7:a7:93:ff:8f:
         69:58:fe:96:8c:b1:0f:a5:32:cb:24:f0:b1:eb:5c:82:68:a8:
         9e:af:f0:f3:e5:a6:4f:e7:d4:a6:f4:3d:7a:ff:fe:d6:2f:02:
         7e:ad:b4:3a:84:de:8d:00:4b:ac:e3:d2:a2:4a:c8:a4:9d:eb:
         fa:d4:0a:a0:14:5e:51:91:1d:a4:ac:fa:43:6f:42:1d:5d:86:
         21:89:8d:73:64:02:80:c0:7d:ee:9c:57:36:fe:10:8d:ea:21:
         89:08:b1:7a:69:cc:fd:4e:98:d3:0a:53:85:fd:63:6b:aa:57:
         cd:f4:f8:b6:1c:3f:66:0f:f8:d7:f0:e4:6a:2e:cb:d7:b6:88:
         a3:60:6b:a3:6b:2f:77:a1:b9:fe:3e:df:ef:dc:f0:99:79:ac:
         d0:90:91:b9:1f:6e:c1:d4:3d:52:6f:c8:9c:51:28:4c:fa:45:
         c9:cd:de:69:60:22:e5:39:b2:74:37:bf:06:70:1d:f8:fb:e9:
         9f:52:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----