Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.mft
File:                     aXSAi64n2jxp7tr0QPw-2f2JOYg.mft (raw, json)
Hash identifier:          B/FhQ7qshcqpJPrz2S8bO411CKwySLGA+J75xmADDmg=
Subject key identifier:   69:4E:EB:71:92:7D:56:D1:B4:A1:B4:43:23:8A:29:66:5A:78:6E:C7
Authority key identifier: 69:74:80:8B:AE:27:DA:3C:69:EE:DA:F4:40:FC:3E:D9:FD:89:39:88
Certificate issuer:       /CN=6974808bae27da3c69eedaf440fc3ed9fd893988
Certificate serial:       01909ACD3A1697849E6A1F685B1B17A50DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXSAi64n2jxp7tr0QPw-2f2JOYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.mft
Manifest number:          1209
Signing time:             Wed 10 Jul 2024 04:00:59 +0000
Manifest this update:     Wed 10 Jul 2024 04:00:59 +0000
Manifest next update:     Thu 11 Jul 2024 04:00:59 +0000
Files and hashes:         1: 7GNQfmtiaIKhIeVHx_-YUw6NR5A.roa (hash: bOzgGgRxld4spzZyJys8BMOyQxHOFpwQhhFlzUJ6rgw=)
                          2: SI4vPVk0VAmWPVLWUzjc8fVXglM.roa (hash: lAr5S+FLXPYZobhH86cxSDLPUpNY2klDn8rtUcWNM2o=)
                          3: aXSAi64n2jxp7tr0QPw-2f2JOYg.crl (hash: wH357BAH0VP5sgYuZIbwqwCOc99lqm7rTCcFjNe3YmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:cd:3a:16:97:84:9e:6a:1f:68:5b:1b:17:a5:0d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6974808bae27da3c69eedaf440fc3ed9fd893988
        Validity
            Not Before: Jul 10 04:00:59 2024 GMT
            Not After : Jul 11 04:00:59 2024 GMT
        Subject: CN=694eeb71927d56d1b4a1b443238a29665a786ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:35:de:30:ba:39:b2:6e:bd:07:ed:e8:57:
                    eb:8d:d0:3b:20:d0:72:d7:ef:c4:14:fc:f9:57:cd:
                    6b:5b:81:b9:82:92:70:e7:e2:28:dc:58:b3:aa:90:
                    bc:55:5e:ad:2f:c4:48:b9:7a:c0:d2:dd:5e:d9:8c:
                    43:15:d1:53:f3:b6:77:2b:2c:7b:0f:99:d5:cc:d4:
                    1c:95:0d:6a:9b:91:ac:2e:17:d0:14:1e:8a:0f:b4:
                    7e:3f:03:fe:f2:f7:fc:48:01:9d:2b:eb:85:41:40:
                    db:af:c9:cf:b2:9e:31:d3:ee:87:af:0a:df:53:30:
                    fc:3e:5e:d0:f7:d0:c0:a7:84:f0:4c:35:ae:63:ac:
                    dd:d8:8d:71:f9:12:15:0d:88:ed:be:a8:f3:06:65:
                    4c:a1:be:93:94:3c:5f:57:aa:ba:2b:08:a4:16:a3:
                    eb:dc:2a:43:02:3b:36:85:4e:b6:91:f2:21:99:22:
                    30:b6:dd:b9:56:bf:cb:63:a8:e1:c2:72:0b:ac:8b:
                    52:a8:cd:d5:64:e9:9a:af:91:f1:5a:d0:89:fa:86:
                    fb:3d:56:ff:f0:4a:cd:4c:48:d4:8b:f3:73:60:0b:
                    e1:19:bb:97:1b:35:30:6e:7e:24:2c:6a:41:76:0d:
                    39:cb:2b:79:39:d8:96:43:b5:6a:7b:c8:ab:f5:c0:
                    b0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:EB:71:92:7D:56:D1:B4:A1:B4:43:23:8A:29:66:5A:78:6E:C7
            X509v3 Authority Key Identifier:
                keyid:69:74:80:8B:AE:27:DA:3C:69:EE:DA:F4:40:FC:3E:D9:FD:89:39:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXSAi64n2jxp7tr0QPw-2f2JOYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:12:8c:26:ac:4a:fd:85:ec:81:e4:d8:1d:22:76:4f:f5:db:
         c9:df:2b:d8:01:d5:9f:51:dd:8e:12:0f:1f:76:4f:56:d6:5d:
         58:cb:fe:fc:de:2c:0a:63:09:b5:bc:12:91:50:64:7e:4c:a6:
         58:19:58:d1:14:8c:5a:59:be:c0:34:13:48:df:68:76:35:ee:
         e8:4a:d9:65:00:d1:38:a6:81:b3:64:ee:57:da:36:13:41:73:
         18:54:fe:0e:f0:2a:1e:ed:83:75:41:39:47:46:91:17:63:f9:
         68:38:73:1e:6f:07:c4:a8:ac:ec:c3:a3:84:82:4d:30:17:f5:
         37:e5:a0:97:c9:22:ef:3a:d4:ea:1e:2e:9d:fa:69:69:da:f6:
         bc:49:48:3a:d9:10:aa:da:a0:dc:e2:ec:66:8f:b9:bc:fa:fb:
         dc:28:67:0f:68:7e:d3:ba:1c:ba:55:b7:b0:fe:59:d4:ca:6e:
         59:5f:59:14:59:44:69:94:0d:d6:dc:ea:60:4c:60:20:c7:56:
         e9:b3:99:a2:10:52:92:b5:2d:3e:f2:e3:4f:62:4c:d4:f8:0c:
         a3:01:61:34:bd:5c:2e:8f:6d:58:34:1d:5c:3e:56:8f:96:e4:
         cb:0d:9c:62:1a:30:74:97:05:5e:a3:c6:5b:07:66:25:ce:b7:
         e7:05:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----