Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
File:                     smS9DDwCpMvCz3SpNn481TB5hyY.mft (raw, json)
Hash identifier:          FJu6CPVNIH7agDhHTzABkbeeDFgL0/OZV78gFrbehsA=
Subject key identifier:   3C:68:A9:DB:42:D3:97:64:19:1E:C1:9F:B7:55:54:B9:94:D5:A1:D2
Authority key identifier: B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26
Certificate issuer:       /CN=b264bd0c3c02a4cbc2cf74a9367e3cd530798726
Certificate serial:       0190DDF6E3E19140E5AB43FFE83E610704C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smS9DDwCpMvCz3SpNn481TB5hyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
Manifest number:          0574
Signing time:             Tue 23 Jul 2024 05:01:03 +0000
Manifest this update:     Tue 23 Jul 2024 05:01:03 +0000
Manifest next update:     Wed 24 Jul 2024 05:01:03 +0000
Files and hashes:         1: 0V_LTYEDfJNyJmghNs_MSEUm5EA.roa (hash: 6yn5iO3tavP60XLVkWSvqVvHbjFZPkZlUZpYI4w5qQY=)
                          2: smS9DDwCpMvCz3SpNn481TB5hyY.crl (hash: 9yNY+gwWks8JrQkWzaMwSxKf57c+6HIVYZq03G8ml7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:dd:f6:e3:e1:91:40:e5:ab:43:ff:e8:3e:61:07:04:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b264bd0c3c02a4cbc2cf74a9367e3cd530798726
        Validity
            Not Before: Jul 23 05:01:03 2024 GMT
            Not After : Jul 24 05:01:03 2024 GMT
        Subject: CN=3c68a9db42d39764191ec19fb75554b994d5a1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:bd:10:d1:cb:0b:15:a5:10:08:80:1f:4e:
                    35:51:c9:26:bc:67:c6:b4:49:50:c7:8a:6b:5d:86:
                    e9:c1:7d:76:82:38:15:ea:65:32:b7:60:80:a2:dc:
                    62:fb:c1:43:57:5e:24:8b:d6:fa:8b:b6:93:4b:d9:
                    c2:f4:9f:5c:48:41:30:47:36:84:4a:ff:a2:1b:bc:
                    1a:e4:ce:35:ec:35:a5:11:8a:13:f0:22:b3:ab:53:
                    72:3e:1c:d0:6b:81:ca:24:b7:e9:6f:b2:fe:84:79:
                    c6:76:04:f2:76:94:3b:4f:bc:3a:8d:4a:08:a4:41:
                    7b:62:93:e4:c9:e1:a1:d0:4a:c9:06:92:ea:39:75:
                    e8:ed:51:1d:13:fe:e1:be:16:be:a8:50:4d:e6:b8:
                    44:cf:5b:5f:06:4a:17:ef:7a:98:52:ea:1c:16:9a:
                    f5:ae:95:1c:20:98:9a:3b:73:6c:b0:da:12:8a:47:
                    0d:95:f0:c6:8d:e7:cc:bc:02:58:7c:bc:c6:50:cd:
                    e5:9d:81:bc:21:7e:14:20:da:cc:aa:6d:77:39:55:
                    be:9d:b1:66:6e:95:17:83:24:80:03:b8:d6:9a:fa:
                    97:78:3d:a6:7d:ce:6f:02:0e:1d:2b:bb:fe:4a:93:
                    86:38:f1:f6:24:fb:81:52:23:6e:7f:d0:d5:93:18:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:68:A9:DB:42:D3:97:64:19:1E:C1:9F:B7:55:54:B9:94:D5:A1:D2
            X509v3 Authority Key Identifier:
                keyid:B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smS9DDwCpMvCz3SpNn481TB5hyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:32:ab:9c:d7:b9:05:af:ea:7b:fc:64:de:e7:ee:74:dd:49:
         fa:c3:ed:64:59:cf:95:0b:ab:3c:7b:69:7b:f0:1c:c3:68:34:
         ce:66:e8:82:98:9c:1f:0a:6c:de:cc:09:1d:c7:7c:d9:d3:66:
         3b:dd:a1:e1:8c:19:e7:26:7c:63:9a:0b:9d:48:42:96:9f:b7:
         dc:84:38:1d:d3:e7:34:f3:c1:6c:c0:4d:56:f6:6b:0f:dc:ca:
         14:e5:cc:20:37:e7:d9:0b:39:b8:47:2a:83:88:25:5d:be:94:
         3a:1e:67:31:06:5c:0e:6b:7b:47:50:df:62:7f:8e:d8:8e:69:
         5c:70:df:18:db:f5:f5:be:fc:0b:f9:22:9d:e8:96:64:c4:1f:
         09:32:ea:86:92:7b:aa:a0:7e:26:22:d6:02:14:8e:51:51:1c:
         fc:f7:f3:32:6c:7f:db:1d:79:19:cd:29:da:58:0c:00:c4:95:
         a8:1f:16:80:e8:b1:d1:97:05:d5:a0:d0:c7:7e:07:b4:89:4e:
         14:83:00:5e:9a:8c:a7:92:3f:a3:a6:d0:96:d8:3c:0c:2b:52:
         18:a2:c1:7c:eb:05:2c:ff:a6:65:22:e1:2e:ab:57:d6:b2:c2:
         f2:89:c9:6d:e3:9d:c4:6a:da:1f:52:0b:7c:27:51:0f:47:58:
         d4:69:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----