Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft
File:                     8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft (raw, json)
Hash identifier:          9XpoQ7SHuZmwk8s3K34ByL/xOMWzYvp88mcngnuvpBQ=
Subject key identifier:   9E:66:12:E8:46:2F:BD:84:8F:81:A2:2A:06:FE:F0:74:80:1E:9D:5D
Authority key identifier: F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
Certificate issuer:       /CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Certificate serial:       018EF5963840058CEDBABE31A3F7F06B2C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft
Manifest number:          0CFF
Signing time:             Fri 19 Apr 2024 09:00:46 +0000
Manifest this update:     Fri 19 Apr 2024 09:00:46 +0000
Manifest next update:     Sat 20 Apr 2024 09:00:46 +0000
Files and hashes:         1: 1-_PY-FxmScnLUEveE-aHYFEuFk0.roa (hash: Py40Qkp7+oZdR+5SnPGkIDmvcMgl62Xe5r9p5XSxq5o=)
                          2: 8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl (hash: 6/qyaUsPscDpNdHaaE+q4GUPkVkmQkI5B6B7igdrycs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f5:96:38:40:05:8c:ed:ba:be:31:a3:f7:f0:6b:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
        Validity
            Not Before: Apr 19 09:00:46 2024 GMT
            Not After : Apr 20 09:00:46 2024 GMT
        Subject: CN=9e6612e8462fbd848f81a22a06fef074801e9d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:2d:1e:98:59:a7:73:5c:14:32:c3:1b:67:
                    45:38:a7:ad:c6:5d:b8:70:11:8f:e1:cc:8e:f6:dd:
                    53:51:6e:1b:75:f8:47:bc:c4:41:f7:31:58:43:10:
                    ea:a9:4d:23:6b:11:b0:bc:e3:9a:3d:94:c7:97:93:
                    2b:ed:58:4f:08:1d:f9:6d:95:dd:c7:f5:51:f4:96:
                    08:5e:d1:0e:d7:dc:3f:6e:a6:fd:f2:c5:b9:54:9c:
                    d9:4b:94:42:ee:d0:43:26:ed:fe:13:40:93:9a:c6:
                    e3:54:7b:13:ab:ef:12:2f:4f:25:b9:01:ee:7d:c8:
                    63:3d:37:63:de:4a:0a:49:18:44:3e:86:cc:d1:cd:
                    ca:cd:74:89:84:c6:f4:5e:16:1f:33:dc:90:d8:19:
                    20:56:31:6f:2c:e9:23:bc:4c:9a:30:6d:0c:1c:d3:
                    0e:5c:47:2a:62:6f:1e:7c:35:29:13:42:6c:87:16:
                    75:3c:a2:34:c3:98:b2:8a:6a:1e:2a:ce:dc:79:fb:
                    e2:81:64:c3:58:43:71:df:71:19:f7:10:24:34:0f:
                    4b:54:89:ba:09:5b:cf:d0:61:8a:a6:f4:85:1a:03:
                    18:e3:1c:fa:1f:ae:ef:79:4b:b7:d4:9f:5c:a4:bd:
                    95:0f:97:78:2d:ad:8d:26:77:be:e3:65:a4:03:53:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:66:12:E8:46:2F:BD:84:8F:81:A2:2A:06:FE:F0:74:80:1E:9D:5D
            X509v3 Authority Key Identifier:
                keyid:F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:85:65:78:ad:d2:16:93:48:a8:17:b3:0b:43:01:1c:53:
         00:e8:11:a8:91:82:9f:26:ef:2c:c5:92:64:ec:83:f7:1e:19:
         dc:78:8b:5d:e6:90:6c:19:1e:22:fa:b7:b0:a0:a2:8b:78:e2:
         06:4f:b7:50:7a:a3:d8:af:43:7a:c3:84:ac:53:70:55:e2:33:
         18:94:25:a3:92:a0:c9:be:a3:90:60:ae:e4:5b:5b:33:93:00:
         44:d7:0b:05:a9:9e:aa:dd:6a:84:ac:ab:73:b3:78:c0:5c:3c:
         64:0c:f8:3c:e6:ac:ef:ee:24:08:cd:b3:19:32:68:82:1c:1b:
         5f:51:a0:05:3b:ec:18:6c:53:35:20:7b:9a:cd:db:75:fa:b5:
         9f:73:00:8a:e1:e4:c0:17:8a:a1:94:9d:1f:fa:67:fa:eb:af:
         30:ea:d6:43:4e:52:51:08:f3:cf:79:c7:62:d9:32:bb:98:48:
         1c:8e:a4:01:90:4d:56:d4:97:69:4f:32:cd:cb:a2:b0:43:29:
         d1:c1:fe:2f:a1:ad:2e:7c:3b:3b:98:40:ef:9e:97:a0:90:67:
         d6:c0:30:19:cc:38:41:02:82:cf:b5:d2:84:ea:3f:27:4e:f6:
         7a:b9:04:06:63:d8:d7:f9:95:e4:60:01:fb:2e:b7:6c:61:ae:
         4d:3b:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----