Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft
File:                     FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft (raw, json)
Hash identifier:          LFAyJn+l+iKpaAUzbi0gcg62yPHUlyukI3f56a33Atg=
Subject key identifier:   06:6B:EC:45:0A:39:CE:08:54:66:59:6A:EB:A6:B9:EC:E0:01:FB:B0
Authority key identifier: 14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
Certificate issuer:       /CN=140ecb72ff00398d3642ec23f212ada0ea72066d
Certificate serial:       018D67F9C0690EA16D9420B8F4EC95AB09E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft
Manifest number:          0A2A
Signing time:             Fri 02 Feb 2024 04:00:37 +0000
Manifest this update:     Fri 02 Feb 2024 04:00:37 +0000
Manifest next update:     Sat 03 Feb 2024 04:00:37 +0000
Files and hashes:         1: 3czROm_h3MfZLryPx4knXldoufw.roa (hash: XD+VTwjfdeLVgdNpSUKSexYHD/baETA08epS9zKx5BU=)
                          2: FA7Lcv8AOY02Quwj8hKtoOpyBm0.crl (hash: a2CCN+yKcRa41QVULw5EuwUA0iiu7/wGQM776G0bQoQ=)
                          3: Z3s_ALTFCMGN3hgPyxpXc0jMaZY.roa (hash: dkBH/X7uKKEfsTuIPAaMedLnwZioRXjmT5oU7U3uYok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:67:f9:c0:69:0e:a1:6d:94:20:b8:f4:ec:95:ab:09:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140ecb72ff00398d3642ec23f212ada0ea72066d
        Validity
            Not Before: Feb  2 04:00:37 2024 GMT
            Not After : Feb  3 04:00:37 2024 GMT
        Subject: CN=066bec450a39ce085466596aeba6b9ece001fbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:97:cb:8e:76:22:9d:17:e7:0e:87:64:bb:
                    ce:fe:f3:ae:20:90:4a:a2:c6:30:ef:c9:5f:f9:7e:
                    6e:b7:dc:7c:d9:6a:5e:a0:4a:01:58:af:fa:8c:8c:
                    56:00:15:0c:5e:3e:28:8d:6a:c4:94:ba:b9:d4:58:
                    a8:32:27:ec:55:33:88:44:d4:ef:31:82:30:74:17:
                    11:07:12:d9:75:9c:76:36:d4:fd:ec:4c:7c:71:f0:
                    f3:d3:9d:ac:19:6b:53:8f:d9:52:08:06:37:e6:49:
                    63:e2:0d:b6:16:84:47:94:9f:f9:dd:52:54:e1:e3:
                    60:6a:f3:73:6c:03:a4:61:1f:3d:7b:d7:bb:dd:69:
                    21:b9:fb:84:fa:4c:5d:d3:d8:d9:6f:f4:e1:2c:65:
                    a6:f6:5c:d2:bc:a6:8e:85:f8:c9:20:c0:d3:99:7b:
                    5f:79:60:98:3b:14:9d:f9:9e:d0:13:bc:5e:71:b2:
                    c0:4f:a3:01:12:f9:37:64:19:5e:aa:f1:bd:56:04:
                    b2:8f:56:6e:a8:d5:e1:70:ba:b2:21:56:49:7d:b6:
                    06:10:67:f0:b1:26:5d:ee:17:78:4b:0a:bf:d0:06:
                    45:a8:f8:fe:e9:6a:0a:bf:4f:8e:ce:fe:58:3c:66:
                    7f:76:0e:89:37:b5:48:0b:fd:9c:20:0f:99:f5:25:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:EC:45:0A:39:CE:08:54:66:59:6A:EB:A6:B9:EC:E0:01:FB:B0
            X509v3 Authority Key Identifier:
                keyid:14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:1f:9d:36:df:da:d1:b1:d7:98:88:7f:5b:29:69:f0:73:
         03:37:d4:a0:48:bf:c1:28:23:a5:76:fe:cb:f6:40:d6:6c:25:
         da:35:a9:20:fe:ac:06:76:57:a5:71:44:35:f3:60:bd:03:5e:
         9e:88:7f:05:76:a4:f9:77:d2:56:9a:be:bf:2a:46:e1:59:b3:
         46:05:5c:71:2b:3a:24:6f:98:57:9b:3b:1d:c1:cd:20:e1:bd:
         ac:2c:26:eb:c7:5b:24:b9:d4:0f:96:45:6f:b6:4f:22:a9:12:
         5b:b8:1a:dd:e6:79:55:2e:76:3c:a6:ad:75:d7:48:74:71:6c:
         9b:35:67:d7:f9:ed:fc:ae:3b:f2:1d:43:aa:8f:91:bf:c8:07:
         d2:29:be:f1:42:ad:ed:92:e5:a4:0c:c5:99:cb:12:79:a3:4f:
         ee:85:b6:71:c7:3d:25:02:79:25:e4:f3:7a:f2:95:38:a0:77:
         53:f4:b4:0d:5c:7c:61:8d:ae:73:27:20:e8:0b:46:95:45:1f:
         a5:71:cd:19:09:f6:40:29:64:e0:7a:74:c6:9e:7a:48:53:bb:
         c3:b0:38:f5:40:e7:3b:6e:d5:f3:d5:69:80:d9:8b:15:c5:4a:
         ed:20:13:f7:b9:e5:d4:66:0a:65:fe:0c:51:88:aa:32:a3:e7:
         77:4e:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----