Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.mft
File:                     fhgb8HoT78ijQwtCZMkVIUHQzWQ.mft (raw, json)
Hash identifier:          O24BCtJ1I5KwRPuBddgE15iHQ0UslUlrInG3ULY3x4A=
Subject key identifier:   1E:E8:A7:27:20:AB:EE:36:37:B1:CC:EC:18:04:BA:DE:D3:71:77:5C
Authority key identifier: 7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64
Certificate issuer:       /CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
Certificate serial:       01932FEA17997CF0213EC7F1DB43A96CE2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.mft
Manifest number:          135D
Signing time:             Fri 15 Nov 2024 13:01:30 +0000
Manifest this update:     Fri 15 Nov 2024 13:01:30 +0000
Manifest next update:     Sat 16 Nov 2024 13:01:30 +0000
Files and hashes:         1: ByhZNa9NSLWtrsTmqRXmeDSrueM.roa (hash: aRwRLUYCelav+cSQ5Eq9m8T1r7vymjlwGRKELmNCfFU=)
                          2: fhgb8HoT78ijQwtCZMkVIUHQzWQ.crl (hash: Ba+qIn2ovIYfANlRIm+CQ9bc02GYMaxUWQx9S/NgUX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2f:ea:17:99:7c:f0:21:3e:c7:f1:db:43:a9:6c:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
        Validity
            Not Before: Nov 15 13:01:30 2024 GMT
            Not After : Nov 16 13:01:30 2024 GMT
        Subject: CN=1ee8a72720abee3637b1ccec1804baded371775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:47:32:2e:03:b3:e1:60:d4:2e:92:75:c1:
                    7a:f6:b3:56:8e:1c:cb:6e:2e:61:57:98:bb:54:7c:
                    0b:34:77:46:a8:20:f9:3e:69:c1:41:f9:83:ff:d0:
                    0b:2e:09:ea:eb:5c:f7:71:7f:d8:bf:b3:78:cb:b1:
                    7c:f7:fd:cd:b3:b6:b3:ef:40:ac:d2:5c:a7:4f:e8:
                    0f:9a:0b:72:03:25:f9:19:08:17:45:9e:db:14:5b:
                    6f:b4:ad:aa:67:bb:30:5c:2d:06:c4:1a:1c:6f:ce:
                    1b:54:40:7a:70:1f:a4:99:fa:44:7c:d4:8a:3a:d3:
                    55:42:21:e6:97:ec:58:03:fc:b1:8c:38:af:00:42:
                    79:8d:cc:64:7f:27:59:61:fb:10:59:93:79:23:22:
                    22:22:a8:10:cc:c4:88:12:04:ea:50:c4:9e:af:7c:
                    73:85:b0:e0:c1:01:cc:a9:e6:31:85:22:2f:17:74:
                    c6:26:5a:02:e9:a5:31:53:d4:0f:92:73:e9:9f:00:
                    7c:16:e7:84:6a:4d:15:a4:3c:48:12:f0:c6:5b:f8:
                    6f:03:68:85:ca:9b:6d:96:b4:d7:aa:0c:89:4c:66:
                    d6:a3:6f:a8:32:b5:2a:46:3b:96:ac:c8:d8:99:60:
                    e2:ec:84:aa:1c:d6:52:3f:d7:c3:7b:13:61:75:cd:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:A7:27:20:AB:EE:36:37:B1:CC:EC:18:04:BA:DE:D3:71:77:5C
            X509v3 Authority Key Identifier:
                keyid:7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:87:7e:9e:27:d0:aa:5b:99:cb:56:5b:91:22:82:47:df:
         d9:42:7e:e0:48:6b:d9:b1:2e:3e:e3:f6:37:6e:10:8a:05:e8:
         16:ab:77:f1:34:56:83:aa:a3:0a:d9:14:5e:50:b2:5a:bc:56:
         b8:bd:73:78:aa:4e:3d:cd:3b:64:2c:33:1c:f6:55:08:4b:60:
         43:41:2f:47:a8:67:56:b9:aa:27:87:f0:b4:97:1e:2b:cf:99:
         1a:94:95:57:51:e9:ce:2a:6c:fc:93:ad:0c:8a:86:05:be:3c:
         a6:04:9a:a7:13:81:2f:e0:2f:0b:65:e6:68:69:f5:ee:52:63:
         5a:5d:0f:fb:f2:56:2c:79:7c:e0:37:4d:3f:d1:8e:6c:7d:f1:
         80:d7:cf:96:77:ee:0e:94:d7:93:7d:0d:a7:4f:7c:3f:53:00:
         f6:f1:bc:c8:50:e3:fc:0a:28:75:d7:30:fd:7a:8e:72:ac:89:
         64:3b:70:76:06:eb:bb:a2:8c:1f:be:18:78:97:4f:12:c2:35:
         84:5d:ce:e0:95:b2:36:84:1e:61:b5:7c:95:19:3b:43:7c:06:
         5c:0c:eb:36:03:e5:47:27:5c:f3:08:de:a4:2b:35:aa:78:6f:
         7d:07:bc:a8:49:14:10:41:eb:8d:41:e6:38:36:b8:78:9c:57:
         95:15:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----