Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
File:                     tfOkHre0qwKEW1sMCD9fQGwoOho.mft (raw, json)
Hash identifier:          CqBsby57TvhewwNEZyi5yMKkyUm4F8RkIb3CPMLsHCk=
Subject key identifier:   FD:D4:86:2E:77:32:F4:18:C7:87:64:0B:1B:29:8C:10:3C:EE:CC:B8
Authority key identifier: B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
Certificate issuer:       /CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Certificate serial:       0191C4A1EE0359A16BDD53206B73AA9F6AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
Manifest number:          BC
Signing time:             Fri 06 Sep 2024 00:00:32 +0000
Manifest this update:     Fri 06 Sep 2024 00:00:32 +0000
Manifest next update:     Sat 07 Sep 2024 00:00:32 +0000
Files and hashes:         1: M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa (hash: B9HQRgcInIThy0NS5CcO27Q+N1HKuEB6UZqSgRqnaOU=)
                          2: p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa (hash: PydqBoHR5MWdeFG26uqpNdN1pxfipu34LI+HJkEtsSk=)
                          3: tfOkHre0qwKEW1sMCD9fQGwoOho.crl (hash: ISHNRkq1a3apUGYT4uQBcgYESZvfECPWhhzF5QkwE0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c4:a1:ee:03:59:a1:6b:dd:53:20:6b:73:aa:9f:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
        Validity
            Not Before: Sep  6 00:00:32 2024 GMT
            Not After : Sep  7 00:00:32 2024 GMT
        Subject: CN=fdd4862e7732f418c787640b1b298c103ceeccb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:15:18:2d:56:d3:b8:2e:6d:46:1a:c6:50:
                    4f:3b:ed:22:3d:21:be:f6:71:63:0d:73:c9:0e:2d:
                    b7:7e:a1:8d:65:7f:34:44:68:d8:66:d0:55:cc:22:
                    de:58:37:c6:9e:45:7b:71:17:15:ec:4b:df:15:6e:
                    f1:47:46:40:be:8a:83:3e:cc:43:23:9a:4e:30:42:
                    6b:05:d8:cb:62:c7:f7:32:77:5a:0f:b5:1d:7d:3a:
                    05:33:35:a4:a6:58:37:e2:aa:47:5a:dc:a5:ca:22:
                    9c:b6:81:00:f9:e2:a2:65:3a:4f:d3:2c:ef:81:47:
                    76:bc:44:f6:3d:7b:5d:ae:56:da:92:f5:4d:ed:a7:
                    65:42:e0:9d:98:9d:54:ef:98:4a:00:79:45:ae:29:
                    6f:24:13:09:c3:95:ff:05:c4:78:bc:b5:52:7d:00:
                    54:db:4b:c6:19:47:a6:e2:74:2d:8e:92:d7:6f:2e:
                    49:51:75:03:22:9f:31:b6:7d:c5:0b:fc:49:1c:06:
                    ef:e5:fa:da:96:c8:8e:21:a9:55:40:f5:5e:aa:fa:
                    f7:b2:22:c9:9e:b3:89:93:74:0f:c2:aa:f9:60:ed:
                    c8:c3:fa:08:d3:bb:d7:a6:fe:df:f5:85:b5:d9:69:
                    93:09:97:e0:6c:03:9f:68:7c:20:ab:6a:99:4a:17:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:86:2E:77:32:F4:18:C7:87:64:0B:1B:29:8C:10:3C:EE:CC:B8
            X509v3 Authority Key Identifier:
                keyid:B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a1:9f:cf:36:50:b9:6c:9e:75:5d:e5:d3:05:a4:e8:9d:d9:
         3e:7b:f8:28:f3:6c:c7:64:9c:fc:56:a1:14:8c:79:d3:6c:4c:
         77:9d:57:22:b2:5a:aa:a3:a4:a1:01:99:85:70:ff:e7:af:ad:
         15:ec:5d:5c:a5:83:19:73:3e:19:cc:b8:73:49:4b:7e:1c:de:
         fd:a8:08:4e:e7:36:6f:63:8a:54:6a:a7:57:07:bb:13:3d:c7:
         c9:c8:95:3e:39:62:c3:fd:9e:ff:7b:4e:5c:04:51:3d:b2:77:
         49:f7:9d:44:6e:fd:50:6a:7e:f7:58:61:52:09:b2:06:16:76:
         ec:ca:f8:63:c7:23:fd:8c:68:59:92:56:47:12:fd:f7:b1:82:
         42:9f:c7:6f:05:b5:65:bf:9a:01:40:03:4a:23:cc:31:c6:fd:
         63:16:07:3a:3b:ac:10:9b:18:37:05:92:26:a8:0f:b9:5f:4c:
         3b:c4:c7:6a:44:0d:5b:3d:d4:67:e5:50:c6:16:94:31:1e:ec:
         9a:ca:87:ab:40:a3:bb:e7:3a:06:40:e6:f5:79:67:17:f5:bd:
         89:19:eb:40:de:1f:4f:85:2d:51:25:e2:97:25:69:af:17:30:
         0c:73:70:5d:d2:77:38:a5:2f:0f:78:ec:30:cf:8e:b4:8d:1b:
         c9:88:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----