Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
File:                     3KCtsai3lwIPDseimptautQLZT4.mft (raw, json)
Hash identifier:          NhCTjfOqcEKIo4QNiHYzDtGKlocpFZFT5e/EHZ+ox3U=
Subject key identifier:   C4:6D:9E:5C:61:0C:93:88:E7:AC:AE:6B:5C:44:DA:8D:6F:D5:BD:E6
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Certificate issuer:       /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial:       018F74D4EFDE94AA56CD27F29322F542BA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
Manifest number:          0EAC
Signing time:             Tue 14 May 2024 02:01:03 +0000
Manifest this update:     Tue 14 May 2024 02:01:03 +0000
Manifest next update:     Wed 15 May 2024 02:01:03 +0000
Files and hashes:         1: 3KCtsai3lwIPDseimptautQLZT4.crl (hash: eRo1ymvPTL8fWCcdtRoZqoywgIPbkTjFCAbTu1GnfGU=)
                          2: RJPHi4UfLVVQ4xHpe8tTM4SNRO4.roa (hash: dOTSLMDpTF1t5bpzc8oTYmvPXAzi5ssP1A0AdSL2ViI=)
                          3: dYbNkP2f_Df2uxPOf7CEmKnF3T4.roa (hash: wI1uXZNbRGt0oS7TOdAXketR7ThvKx6z1q85aKWkfP4=)
                          4: jnz2GmGfv_VdS-L9BYFVZieLk58.roa (hash: zl85sHjKjo9qpU/wWL5PrVm5Ov3oLqYTXEEB8KIAozc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:74:d4:ef:de:94:aa:56:cd:27:f2:93:22:f5:42:ba:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
        Validity
            Not Before: May 14 02:01:03 2024 GMT
            Not After : May 15 02:01:03 2024 GMT
        Subject: CN=c46d9e5c610c9388e7acae6b5c44da8d6fd5bde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:76:fc:aa:8a:fe:f2:05:df:0f:7f:37:bd:
                    d8:02:f6:6c:a3:2c:49:a4:e0:33:34:f4:89:2b:89:
                    bc:5d:51:1c:1e:7d:f5:69:5e:4f:11:e5:1e:f9:65:
                    22:02:70:69:e8:c0:23:f2:8a:aa:41:27:92:6d:2d:
                    97:1b:25:f6:e7:c4:2d:17:b4:31:93:af:24:d1:81:
                    e9:7e:c4:99:be:d5:f6:1e:82:98:04:4a:e1:8b:fa:
                    83:e7:20:4b:8a:16:31:e1:41:7a:cf:8c:74:11:86:
                    c5:0c:aa:61:b4:62:33:01:76:f2:52:8e:c7:e6:2f:
                    c4:be:44:62:62:f5:e0:fe:f3:b6:69:3d:8d:cc:9e:
                    b0:f6:83:77:7d:4e:16:b3:6c:a4:be:e9:c0:5c:91:
                    5e:7e:6c:ba:04:02:dd:9c:3d:ad:b2:10:db:84:2a:
                    68:9d:ff:5f:63:af:c6:f6:c7:9e:2c:48:d6:c5:7c:
                    13:34:2d:b6:04:7f:a3:d8:f6:9d:ec:84:b3:61:a6:
                    8a:f9:66:8f:c6:20:31:2b:19:02:0a:19:0f:19:2c:
                    3c:d4:4d:23:58:67:ee:ff:fb:6e:f8:f1:92:0b:5f:
                    49:2d:80:33:58:45:91:49:99:1f:c6:4f:0a:54:3a:
                    e2:5e:bb:63:84:ad:a3:77:68:77:5c:55:84:db:47:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:9E:5C:61:0C:93:88:E7:AC:AE:6B:5C:44:DA:8D:6F:D5:BD:E6
            X509v3 Authority Key Identifier:
                keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:36:7e:c1:4a:b5:b2:e3:2f:6c:50:e0:88:0d:6b:15:e3:93:
         ff:98:b9:be:18:64:19:eb:13:00:53:17:9e:9e:56:95:a8:15:
         50:27:5a:98:25:ed:9a:11:4a:4d:fa:8b:85:d2:67:16:16:41:
         cf:05:d0:da:e7:bb:29:12:18:be:67:be:a0:f3:43:d7:4d:2a:
         7b:c0:f2:61:fb:20:8f:93:51:b6:98:e9:cf:b1:c5:41:1b:4e:
         5d:53:cc:66:72:84:8d:90:1d:40:b3:29:5c:52:16:da:11:f0:
         e9:a1:4d:50:28:f9:0f:a3:c0:7a:97:b0:06:c2:be:31:5b:ae:
         c3:44:43:a8:a3:9f:3a:f0:f0:8c:25:dc:f9:7f:43:cc:38:54:
         96:b2:60:b5:84:82:2a:5e:bb:22:0d:11:cb:3d:19:de:c9:6b:
         29:a7:d6:7a:32:eb:89:4e:fb:c3:1b:08:28:ae:30:fd:4e:2b:
         48:87:d3:99:0e:36:a4:49:98:c9:26:e1:75:1e:6d:07:a7:a1:
         87:81:87:fd:52:7c:e4:85:ec:cc:46:24:a0:ac:e3:73:27:b5:
         4d:ac:f5:c7:ad:17:fb:86:67:ff:3b:4d:6c:6f:15:e4:63:f0:
         ab:d2:c9:ed:9f:cd:8d:d1:a6:98:56:39:07:73:73:4b:47:3c:
         8f:71:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----