Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
File:                     h_cYJqExaaYp5xqJ264QhzCiqgY.mft (raw, json)
Hash identifier:          uZsUtPLJBcdXAR+NVbufHMBA4DpVk3c9uxmVnLcYK24=
Subject key identifier:   01:89:14:39:FB:E1:6A:54:E9:93:F0:03:E5:6C:E9:DF:00:3A:7D:AC
Authority key identifier: 87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
Certificate issuer:       /CN=87f71826a13169a629e71a89dbae108730a2aa06
Certificate serial:       018F26BB68EBD981D9D183ACDC0C3BF8FF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
Manifest number:          023C
Signing time:             Sun 28 Apr 2024 22:02:47 +0000
Manifest this update:     Sun 28 Apr 2024 22:02:47 +0000
Manifest next update:     Mon 29 Apr 2024 22:02:47 +0000
Files and hashes:         1: 9t8eN8zBNTvQp_gLSFvGtooKX00.roa (hash: b0TzIM063+oZdZILpd+m3hPGt9hsA8p4crGvy+ZmGJk=)
                          2: h_cYJqExaaYp5xqJ264QhzCiqgY.crl (hash: LZEliPd8cv4wK9KkdqBr3CK1d6VaA6vhOH89vQehMno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:26:bb:68:eb:d9:81:d9:d1:83:ac:dc:0c:3b:f8:ff:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f71826a13169a629e71a89dbae108730a2aa06
        Validity
            Not Before: Apr 28 22:02:47 2024 GMT
            Not After : Apr 29 22:02:47 2024 GMT
        Subject: CN=01891439fbe16a54e993f003e56ce9df003a7dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:7f:3e:53:47:92:d1:4b:46:87:e2:1c:bf:
                    88:a9:49:49:ee:01:2a:cf:04:ed:47:6f:05:f1:78:
                    bd:22:a0:11:e5:5b:d3:41:eb:99:c0:32:44:ac:95:
                    a3:36:88:43:c0:02:30:3f:55:18:d9:86:10:1d:03:
                    b4:84:fd:c9:ac:ef:1e:0a:4b:82:38:e3:05:25:3c:
                    78:4c:40:82:41:aa:c6:23:67:16:ef:57:48:dc:5a:
                    77:a2:3f:e5:5d:ba:fa:85:32:19:e9:14:9e:46:d3:
                    cd:28:5a:ec:78:5e:95:f3:22:9f:d9:cb:19:b8:9c:
                    91:52:75:37:5b:1d:a6:0c:50:b7:cc:42:4c:bf:4f:
                    4c:5c:b8:b8:59:c8:0f:31:b1:21:82:3b:5d:3f:4e:
                    b3:e2:a5:7d:33:d3:2f:16:82:8a:08:92:aa:5d:1e:
                    d8:47:c1:b7:d3:c5:4c:e6:28:2b:db:3d:86:c7:b5:
                    9a:fb:d8:5b:db:0c:8c:ac:1d:19:b7:69:b9:3c:be:
                    7e:cb:6c:98:f9:3e:93:b0:72:c5:02:53:40:a9:77:
                    f5:d0:17:8d:1d:7b:26:18:17:90:ea:4f:57:59:c1:
                    d2:bb:4a:81:1f:c4:3e:07:9d:42:d5:3c:bd:22:5b:
                    d0:3e:98:b8:2a:fd:fc:11:60:30:5d:b7:dd:2d:ca:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:14:39:FB:E1:6A:54:E9:93:F0:03:E5:6C:E9:DF:00:3A:7D:AC
            X509v3 Authority Key Identifier:
                keyid:87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:2c:13:a9:ef:fa:4d:c9:a6:e6:46:da:a8:ae:97:8d:62:
         ba:fd:a8:b4:cf:86:51:2d:53:4c:ad:fe:6a:76:6a:af:e8:43:
         03:57:28:77:81:49:e3:81:24:a4:a5:02:a7:cd:a2:18:96:b8:
         45:22:71:64:41:4f:e0:b0:65:9e:b9:b7:bc:9b:dd:da:39:a3:
         5d:b5:d8:93:19:44:42:44:c8:06:11:2e:15:a7:a5:5e:10:c5:
         ae:5c:1f:38:e3:68:ac:31:40:8d:eb:cd:62:ab:c6:ee:f3:d8:
         b6:dc:a5:10:63:89:75:34:0c:a1:07:ba:88:6e:d6:6f:f1:e9:
         e9:be:24:f3:66:48:dd:70:84:54:d2:f3:ac:09:8d:c5:8e:9b:
         e1:3f:4a:eb:07:65:b0:77:83:6f:ba:e8:52:a6:ef:77:57:bb:
         51:97:cb:e8:d5:65:31:f9:1e:86:2d:16:07:46:02:30:ee:bd:
         f2:4e:12:f3:3f:b3:65:b7:7c:bf:46:75:bb:ca:8e:c6:4c:3e:
         c6:3f:92:6f:71:d7:52:85:f1:f4:97:64:fa:ec:83:b9:3f:d3:
         02:e6:43:7f:b4:de:76:75:74:c8:5b:27:a5:be:05:17:6f:fb:
         59:3f:92:1a:42:4e:06:81:5f:af:c2:70:19:bf:ff:8a:05:6f:
         f0:ef:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----