Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.mft
File:                     Pt2SfwZixfFehUkxznNfwDpi9Mk.mft (raw, json)
Hash identifier:          hLmt5nYdEoC2yUokNPBAeXQwQZXrF7Yp1ia92SQDk2Y=
Subject key identifier:   06:F7:DB:A5:FE:F3:9F:85:C8:19:3B:27:5A:81:67:ED:81:65:68:78
Authority key identifier: 3E:DD:92:7F:06:62:C5:F1:5E:85:49:31:CE:73:5F:C0:3A:62:F4:C9
Certificate issuer:       /CN=3edd927f0662c5f15e854931ce735fc03a62f4c9
Certificate serial:       01905321CE921CC5B9F674CE9462FBD2F2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt2SfwZixfFehUkxznNfwDpi9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.mft
Manifest number:          0164
Signing time:             Wed 26 Jun 2024 06:00:42 +0000
Manifest this update:     Wed 26 Jun 2024 06:00:42 +0000
Manifest next update:     Thu 27 Jun 2024 06:00:42 +0000
Files and hashes:         1: Ni7u1JtJoIPhdbjBKxpHJHmFAZE.roa (hash: OpaImTk2wp4C7oDbuKEKMLmCcDyB3rcpb6c7ocx1Bp8=)
                          2: Pt2SfwZixfFehUkxznNfwDpi9Mk.crl (hash: D4gwMkzFRrNnbDfgIK0vcM/Xz3X3pykD3d8WW18eAw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:21:ce:92:1c:c5:b9:f6:74:ce:94:62:fb:d2:f2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edd927f0662c5f15e854931ce735fc03a62f4c9
        Validity
            Not Before: Jun 26 06:00:42 2024 GMT
            Not After : Jun 27 06:00:42 2024 GMT
        Subject: CN=06f7dba5fef39f85c8193b275a8167ed81656878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:bf:f6:98:91:46:0b:cf:cc:ec:04:f3:25:
                    43:54:4d:59:24:66:61:04:01:d1:6c:72:f2:93:4e:
                    55:a9:92:24:25:8c:fa:32:51:c9:d6:bf:cb:4e:88:
                    f3:e8:22:e2:a7:29:f6:25:d5:55:84:69:90:06:22:
                    27:ac:9b:e4:ad:cf:f7:ef:f6:96:be:4e:d9:59:a9:
                    22:41:67:9a:de:74:c9:46:11:c6:aa:fb:a3:58:94:
                    62:27:26:a5:37:13:44:41:57:0b:6d:b3:82:33:a6:
                    7f:6e:33:98:37:58:0d:f5:fa:09:97:fd:75:06:34:
                    8b:d4:ef:ed:b5:2e:d1:a7:76:94:9e:18:6e:a4:82:
                    2c:68:14:e1:29:76:5e:2f:cf:44:8f:b4:cd:00:f2:
                    0d:df:1c:59:3e:75:cc:2f:ea:63:1f:9f:96:e8:d2:
                    c3:f7:6a:5b:48:d4:5e:9f:16:9a:e1:27:a4:5e:e0:
                    ae:98:c4:a3:99:74:19:01:97:c0:58:b7:7c:2b:48:
                    a4:49:ea:a3:d1:4b:39:9b:b3:a2:ef:31:7b:1e:92:
                    89:c6:c2:1a:f3:7c:8c:de:2a:9e:58:6a:38:6c:e4:
                    ef:92:71:ca:02:e0:f6:65:a8:20:20:22:36:b4:ee:
                    26:f6:59:64:1d:64:03:20:87:66:d4:7e:6c:b7:26:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:DB:A5:FE:F3:9F:85:C8:19:3B:27:5A:81:67:ED:81:65:68:78
            X509v3 Authority Key Identifier:
                keyid:3E:DD:92:7F:06:62:C5:F1:5E:85:49:31:CE:73:5F:C0:3A:62:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt2SfwZixfFehUkxznNfwDpi9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:29:28:40:a2:63:ca:6c:e9:1f:a1:a3:a1:ae:2b:74:48:
         6d:ca:6c:a0:cc:10:e4:94:fa:ab:fb:97:77:7f:62:08:e3:d7:
         63:0d:46:76:e5:1e:84:01:94:f7:cf:73:33:f6:bb:85:88:ff:
         7f:fa:0a:c8:93:1a:b3:7b:ef:30:80:46:10:c0:08:87:64:a7:
         01:c1:9f:49:c8:6d:d2:b6:f0:91:99:65:44:bf:28:0e:9b:3d:
         5b:36:87:96:73:cd:50:2a:2e:f6:d7:c9:d6:c9:e6:f4:2d:99:
         5c:f5:7f:f1:c3:f2:54:9e:38:cf:09:c6:e1:90:a8:e2:ac:11:
         2c:93:74:9a:17:f5:19:6b:a2:54:35:f9:1e:cb:a9:a5:0f:ae:
         5d:c3:a2:72:c0:9a:0f:ff:00:4a:1a:44:bb:e2:b5:fd:ac:28:
         20:18:45:02:44:ba:4a:7d:0f:d9:d6:8d:e0:9d:2c:b6:e3:cd:
         84:96:e6:e9:85:25:e0:73:13:c6:1b:03:8a:37:ef:d5:79:0f:
         94:b2:3a:7a:c3:38:d9:8b:91:9d:18:82:6f:9c:21:6b:4c:46:
         67:a8:90:fc:77:cc:e2:30:65:f2:cd:14:df:17:ee:28:d5:07:
         ed:62:8a:b0:db:f4:b7:ad:df:d0:d8:3b:f1:38:e1:5c:a7:fc:
         d7:c0:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----