Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft
File:                     c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft (raw, json)
Hash identifier:          TZFUIGVoJpIudyzIkfz7e7+giZm5x9eUzHpSt3G0sEc=
Subject key identifier:   5F:EB:1C:DE:3A:82:87:FD:F6:B9:45:E2:3E:89:A6:E1:FA:D6:3A:86
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       018F381B7AC1E55961FF20C9C6B245BBBE0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft
Manifest number:          0E6D
Signing time:             Thu 02 May 2024 07:01:15 +0000
Manifest this update:     Thu 02 May 2024 07:01:15 +0000
Manifest next update:     Fri 03 May 2024 07:01:15 +0000
Files and hashes:         1: CQXJUtISUB5cwvUPb6xtu95hfgo.roa (hash: KNQHH4NLXKkymrWWp8hQL/sB+AmGSmvG26kEFvpPmTo=)
                          2: QtAfZ2pjDzeOhOIbkQuYZyxqq3o.roa (hash: SrUfoa6BWhmt9YlExTmRovEV3cWWDioVlvQ8K+AWZuQ=)
                          3: SF2Fc0ZfkVRWYyooJFgZpUayA94.roa (hash: 51qt2q4ABRVZeEVX8xa+kP5Jzy/Ti7CAnpVexOYwUbE=)
                          4: c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl (hash: GBIoEd1EUNWp8qf2eejkHVkBz/C60bRrJ+gOEdwGbUo=)
                          5: ozWv7bU5ZFGqyms4ZyTgSklULO8.roa (hash: mNDmK352Yl78ZUM0HISc1woeJcefBn1mtScDTD+qYDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:7a:c1:e5:59:61:ff:20:c9:c6:b2:45:bb:be:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: May  2 07:01:15 2024 GMT
            Not After : May  3 07:01:15 2024 GMT
        Subject: CN=5feb1cde3a8287fdf6b945e23e89a6e1fad63a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:e0:a7:7e:2c:84:fc:fa:15:b5:57:67:88:
                    6b:a0:1c:a4:6f:9e:69:6f:fb:75:f9:78:ad:f7:42:
                    e7:65:1e:0d:4d:7c:d1:8e:19:e0:f8:5c:c8:3f:46:
                    29:df:a2:de:d5:32:f1:bf:f4:e0:2d:bf:66:3f:b1:
                    bc:a7:f5:bf:66:4b:07:8b:eb:6d:30:7c:7d:13:2c:
                    5b:6d:3d:41:49:a0:a7:12:86:37:57:cb:40:36:47:
                    48:45:61:76:42:41:c0:27:be:ce:ed:f0:c7:4b:38:
                    a8:0d:9a:8c:57:2e:d7:7f:2a:58:62:4a:19:53:d3:
                    73:4a:9c:5c:96:bf:e7:8b:84:3b:0d:81:f6:ed:11:
                    da:5c:a3:1a:2c:15:01:fc:7b:e2:3f:15:75:5f:6c:
                    11:dd:35:e6:e9:52:51:e1:88:76:c7:c4:96:cc:b0:
                    00:b1:8b:00:a9:1e:fc:32:a5:10:74:40:30:82:50:
                    8c:0c:3b:a1:a0:bb:64:7f:f3:23:b8:37:fe:d5:cd:
                    93:76:44:e1:5e:5b:ac:4d:f6:cf:2d:44:87:dc:5e:
                    d7:6c:cf:a6:0b:b8:ac:08:a8:84:d5:a3:04:ee:ef:
                    4b:33:84:8a:cf:0c:6f:1c:84:f2:b0:01:99:f6:1b:
                    eb:57:eb:48:bf:37:6b:c4:65:9c:ea:a3:09:f7:d2:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:1C:DE:3A:82:87:FD:F6:B9:45:E2:3E:89:A6:E1:FA:D6:3A:86
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:a3:88:7b:9f:b9:66:4c:36:63:75:21:cb:eb:40:c7:46:
         8d:80:c2:b7:e7:bf:f9:ed:04:21:99:7b:4b:5e:f7:bd:40:19:
         fb:36:4e:25:eb:05:d5:4a:5b:db:3a:10:8e:64:36:79:87:91:
         94:ce:9f:4d:4f:67:d3:bd:01:a5:40:e0:85:b3:27:bc:13:56:
         04:0d:dc:a9:b5:28:bc:db:ff:90:c8:93:1e:6f:f9:ab:e3:d7:
         32:3f:66:c6:05:a2:3a:21:5c:f9:ee:80:d3:39:2b:3a:f3:7a:
         7e:2a:74:37:f3:c8:47:46:a0:0d:3a:60:c9:b1:49:6b:f4:be:
         df:c6:59:fe:72:54:08:78:d5:bd:1f:0e:50:72:2d:3f:1c:31:
         fe:be:e8:d9:b5:75:e9:bd:81:69:93:c9:9c:28:78:f2:8f:48:
         7e:c2:0e:cb:b9:9e:b8:92:b5:23:53:70:da:af:08:35:a1:b1:
         cd:a1:fd:f3:52:04:54:aa:55:72:4d:90:82:dd:94:16:be:5a:
         ef:00:64:72:33:c3:9f:e9:e1:3e:cf:c0:06:ab:da:60:5f:6a:
         3f:44:58:2e:7c:4b:8c:a5:d4:dd:f1:f3:84:f3:43:c6:20:d3:
         14:00:42:0b:2b:9d:bf:ab:51:9d:22:64:ce:cb:4c:17:25:5d:
         4d:9a:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----