Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.mft
File:                     8iH_aF9OyAPPrvF1bp6copqFTgI.mft (raw, json)
Hash identifier:          Z5/SK58DFxD+bCGpEYFdqyN8w4/lscZPpUZ6h9Rxlh4=
Subject key identifier:   92:91:3D:21:75:15:27:DB:1B:EC:D4:06:8D:30:87:C1:2D:5D:6F:23
Authority key identifier: F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02
Certificate issuer:       /CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
Certificate serial:       018F62982B31084FA3B507B9C9463B82A2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.mft
Manifest number:          0202
Signing time:             Fri 10 May 2024 13:01:30 +0000
Manifest this update:     Fri 10 May 2024 13:01:30 +0000
Manifest next update:     Sat 11 May 2024 13:01:30 +0000
Files and hashes:         1: 8iH_aF9OyAPPrvF1bp6copqFTgI.crl (hash: uHYpMtqpZB2fDKR9N9s5S/DWvnKFcGp/tDGE1924o8M=)
                          2: DOK3poLou59UpMc35R5JkdESs3k.roa (hash: Ny05gs18xdZ/qUkLhgL3+MmGHHUJJIg5QvT4v956noc=)
                          3: Ldr1vnYWs2pKLKB7SUv-e7tQ3Zk.roa (hash: lDdeP8HIOwAT1jZkeqXAc8ISizm/X6MT5BV9zKVYD9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:62:98:2b:31:08:4f:a3:b5:07:b9:c9:46:3b:82:a2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
        Validity
            Not Before: May 10 13:01:30 2024 GMT
            Not After : May 11 13:01:30 2024 GMT
        Subject: CN=92913d21751527db1becd4068d3087c12d5d6f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:8f:a9:b2:67:f1:5f:d6:8e:38:a1:45:ce:
                    d4:e4:6b:09:4f:ac:3a:9d:88:f7:57:8c:06:84:6e:
                    56:fc:5f:39:1d:ff:04:04:3c:e6:cd:46:b0:bf:9f:
                    97:58:9a:da:00:7b:5d:7b:c2:d1:e7:35:c9:fe:6f:
                    85:d1:45:0e:75:23:d9:2c:10:5f:73:f1:5f:b6:16:
                    a7:c5:e7:08:27:2f:e9:d4:db:eb:7a:79:63:a7:36:
                    93:eb:3a:8d:eb:5c:68:9d:8f:df:34:1c:9a:43:b2:
                    83:b9:4b:be:f4:0d:a4:ac:27:35:67:70:f5:4f:81:
                    cc:9c:2c:36:fe:eb:9d:02:2d:6c:cf:24:68:e6:7c:
                    f4:25:45:32:52:3e:39:a5:c1:a2:7d:45:c8:1d:6a:
                    1f:fc:d9:58:3a:92:1a:14:52:13:01:45:2f:71:6f:
                    9d:03:11:52:0f:24:dd:1a:7a:5c:50:ad:36:99:54:
                    72:9f:76:cd:15:24:b6:a2:77:1b:49:cd:ae:2b:21:
                    cc:29:fa:98:8a:1e:2e:05:41:e1:a1:02:d6:7b:9c:
                    49:63:47:2f:aa:09:94:37:74:10:77:34:a9:3a:9a:
                    16:cc:ed:92:38:24:ca:4d:1c:cb:ad:f8:f8:44:16:
                    70:da:c4:46:f8:ca:18:5b:57:4e:a6:9e:e8:88:cf:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:3D:21:75:15:27:DB:1B:EC:D4:06:8D:30:87:C1:2D:5D:6F:23
            X509v3 Authority Key Identifier:
                keyid:F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:12:bd:57:d2:36:a8:84:25:71:a5:a0:4c:03:6f:de:d3:
         09:8a:6e:d1:79:4c:c0:00:96:cd:5a:50:fa:21:f7:c1:63:fa:
         fd:0e:31:13:92:b3:80:01:35:ed:d8:68:22:2f:4e:c9:05:06:
         f4:23:56:be:ca:d4:ee:ae:60:4f:37:b2:27:1e:d4:ad:ae:d9:
         50:99:8b:14:18:d6:16:70:8d:ce:94:ca:e9:6f:e5:06:5d:28:
         cf:e7:8f:0c:9b:7c:89:69:44:d2:1d:7f:43:e6:2f:f2:d1:7d:
         6a:27:eb:98:fa:b2:ed:67:3f:79:c6:82:a7:e8:2c:82:58:1a:
         cc:97:54:ea:50:f0:3a:4b:3c:4e:3a:ec:61:c4:36:7a:a7:d7:
         18:5f:94:a4:f3:64:3e:00:a9:91:3f:99:4b:7c:1e:be:1d:b6:
         00:e8:9d:43:07:b8:f0:1b:1b:97:07:57:0d:f3:97:ac:31:c6:
         46:bf:15:53:16:95:f1:d5:b1:47:08:ef:1c:13:06:5d:d0:f8:
         b8:e3:39:22:be:91:b0:51:0d:39:89:c5:e5:e1:00:ee:92:22:
         56:ba:6c:b1:9e:b3:81:e5:cc:93:f4:4d:12:c3:5a:56:a2:36:
         f9:4a:29:d7:42:6a:dc:3c:61:34:1c:76:96:e9:30:54:11:b6:
         31:0a:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----