Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
File:                     ha931EioETh6cVJ_wzTcxP9x3o8.mft (raw, json)
Hash identifier:          5xo6wsNGTtcdqpWDs58MQQHs5eDzzWkVbFSQHqHDFDw=
Subject key identifier:   23:88:9E:F2:2E:EA:80:EB:13:0C:3C:2B:66:7C:63:C2:71:18:70:BB
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Certificate issuer:       /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial:       01933D6E5F742020FC2AD830EAFCC028B331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
Manifest number:          0E4F
Signing time:             Mon 18 Nov 2024 04:01:03 +0000
Manifest this update:     Mon 18 Nov 2024 04:01:03 +0000
Manifest next update:     Tue 19 Nov 2024 04:01:03 +0000
Files and hashes:         1: 9228kPnIVjLwOCjbs1kcvuwCcsQ.roa (hash: FqDEolUQ3+a3IT06pDqbV3fA96hOIcKbdJhPCEb8S74=)
                          2: VBBzWe5SpTdzDV0BcDm-lI8HigE.roa (hash: E1zYiYAQtmcgmIEoOBfC7DxXV7UWd45FAvdAZbvFvVg=)
                          3: ha931EioETh6cVJ_wzTcxP9x3o8.crl (hash: veJKAFeBhGPNE7TLCnuZ4NNtiA4RPlGJsXs/xkQACf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:3d:6e:5f:74:20:20:fc:2a:d8:30:ea:fc:c0:28:b3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
        Validity
            Not Before: Nov 18 04:01:03 2024 GMT
            Not After : Nov 19 04:01:03 2024 GMT
        Subject: CN=23889ef22eea80eb130c3c2b667c63c2711870bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:bd:40:51:85:8c:00:80:1b:66:1c:d3:1d:
                    3d:15:69:4b:7b:8a:2a:81:db:8d:9e:8c:c6:17:2c:
                    65:44:8b:89:ed:4d:84:b7:51:fc:f4:bf:81:7d:83:
                    a7:1b:80:0d:f1:1b:4f:0f:ee:3b:c7:c6:f9:0b:90:
                    43:9e:e4:dd:b7:27:e8:4b:d8:d4:77:dc:2a:49:a7:
                    b2:92:c6:35:9c:70:3f:cb:e6:78:40:ca:3d:e9:89:
                    61:1b:eb:8a:8b:f6:a3:29:b1:c3:4f:c8:33:41:e6:
                    a5:db:c9:51:6e:8f:a9:f2:a2:c6:c8:fe:d5:c5:ec:
                    ec:04:c2:a8:18:b8:0e:61:78:c4:c0:d1:ad:51:2a:
                    08:97:76:03:20:10:34:cd:77:e7:ab:0c:16:44:6b:
                    f7:f4:1e:b2:5f:de:55:8b:a7:0c:65:4f:21:4f:a7:
                    75:1f:fa:22:af:3c:3f:23:ec:bb:ad:b3:58:37:fa:
                    a3:7d:3e:ef:51:01:3a:71:14:36:77:12:94:dc:1d:
                    22:33:ac:fa:01:37:70:83:43:9b:45:b2:30:aa:77:
                    71:4b:f3:20:dd:ca:3d:cf:a7:7e:1a:82:d3:c0:a0:
                    c8:75:91:71:50:19:a2:cc:1a:3f:2f:e4:39:b2:b3:
                    5b:72:00:1b:8c:f1:88:44:55:5a:30:2b:03:ec:53:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:9E:F2:2E:EA:80:EB:13:0C:3C:2B:66:7C:63:C2:71:18:70:BB
            X509v3 Authority Key Identifier:
                keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:55:94:e0:c6:c8:3b:7e:ed:4d:8f:64:88:cc:80:6d:c9:ca:
         0b:36:e9:eb:55:3f:f0:6b:6f:1d:2c:3e:60:1f:22:b3:35:b9:
         0a:1f:29:30:76:11:12:ed:01:0e:88:1b:eb:24:d1:b8:2b:2c:
         4b:53:92:ab:c3:f5:f0:f7:ce:f6:7c:28:c4:7b:cd:05:89:9f:
         2b:f3:63:9d:58:90:e8:d6:e5:0a:46:c6:1f:ff:55:a9:fe:f5:
         38:92:86:d8:92:ac:28:14:ce:9a:67:4c:99:0d:44:46:4c:f3:
         34:59:97:43:37:35:47:9f:b0:99:d0:38:e5:1e:3d:d9:97:f1:
         c9:34:5d:a7:6b:a1:7e:46:21:54:41:0c:85:6b:c2:65:8c:9a:
         70:5c:68:b9:32:6d:3a:1d:8e:3a:56:20:10:84:b9:40:94:1d:
         2a:44:72:27:99:5d:4e:e4:95:38:98:54:c1:76:a0:70:14:f7:
         bb:45:42:f1:d3:31:6c:c8:0c:b3:24:e1:94:1e:1e:02:07:d7:
         b9:e0:a0:56:a9:ab:ca:a8:cc:de:7a:58:06:c2:2c:94:b7:70:
         4f:ed:2f:8f:d3:c7:d0:94:8c:07:3e:57:ff:a2:aa:28:99:80:
         86:1a:d4:2c:ec:e2:29:d5:07:bd:d4:fb:90:04:5d:18:57:a2:
         19:51:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----