Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.mft
File:                     HGIIzm2R1rja3ljlKRuxkp1eOTM.mft (raw, json)
Hash identifier:          XKX6utd5npNLNxIsMgVGQDfQoms268YbXY0Os7bv3KE=
Subject key identifier:   0B:C7:15:36:8C:C6:4B:DB:37:47:B7:4D:BF:B1:1E:84:18:26:03:10
Authority key identifier: 1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33
Certificate issuer:       /CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
Certificate serial:       01929CED04AFC1DAE9AAB0807EAC8C3A910E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.mft
Manifest number:          012C
Signing time:             Fri 18 Oct 2024 00:00:31 +0000
Manifest this update:     Fri 18 Oct 2024 00:00:31 +0000
Manifest next update:     Sat 19 Oct 2024 00:00:31 +0000
Files and hashes:         1: FJN88pnkOXVKZjQP-U2z72QEUAU.roa (hash: ynnhgR/QmJMH/sCeGEqC3pHJRYdeTZ1Sl7CyZS8p5aM=)
                          2: HGIIzm2R1rja3ljlKRuxkp1eOTM.crl (hash: u7apw26W8wTMTltceCRrbyld77xkMcvRn8Jf+zIJ5Uc=)
                          3: MQs7PCCBLuvNzOPZy0YcVTwSHFY.roa (hash: WFiB3jTcHHDYGKVg7I64slQaE3Bh4GT60HM2g+VqA3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9c:ed:04:af:c1:da:e9:aa:b0:80:7e:ac:8c:3a:91:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
        Validity
            Not Before: Oct 18 00:00:31 2024 GMT
            Not After : Oct 19 00:00:31 2024 GMT
        Subject: CN=0bc715368cc64bdb3747b74dbfb11e8418260310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:55:25:2e:d0:e8:ac:f2:cc:9b:fe:23:93:
                    c8:b3:fa:70:9a:20:85:72:bf:98:8e:7a:4a:6f:87:
                    fd:fa:86:56:74:fd:d8:54:9d:5e:b9:12:64:b0:b6:
                    86:e5:b6:f7:ea:d0:9f:83:47:49:ac:61:ea:e6:8c:
                    50:57:86:1f:b1:18:8e:68:3b:68:ed:fc:0b:76:8c:
                    e4:7e:dc:ad:53:ce:fe:20:14:0d:3a:61:93:67:02:
                    be:68:e9:39:4c:a3:ba:96:9d:74:3c:b4:e8:ea:e3:
                    7a:b7:48:aa:83:61:21:66:26:b0:8f:fe:f3:40:27:
                    bc:e8:46:d2:83:12:54:c2:89:cd:e1:62:fb:81:0e:
                    bf:f1:61:a5:ab:97:1e:bd:8e:89:7b:c7:72:14:46:
                    58:a7:df:45:07:03:3a:81:41:c7:c2:3f:5d:38:77:
                    72:4c:a9:c0:c3:88:bd:9d:a2:58:2e:64:5e:54:d2:
                    3d:25:72:dd:7f:26:35:67:88:5b:05:2c:7b:b6:fc:
                    ed:38:81:1b:48:67:77:1c:af:7c:31:16:ea:95:0f:
                    a8:af:02:27:50:f0:ae:c6:a5:2c:de:28:13:12:9d:
                    98:ac:c0:17:a5:ad:1d:a0:e6:35:b5:c3:9f:d4:bf:
                    b2:37:97:75:4f:cd:c0:11:b4:7c:c0:5e:9e:e7:22:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C7:15:36:8C:C6:4B:DB:37:47:B7:4D:BF:B1:1E:84:18:26:03:10
            X509v3 Authority Key Identifier:
                keyid:1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8c:e3:86:76:b1:86:2a:c1:07:37:3a:ca:f1:0a:a7:3c:93:
         1e:cb:b4:75:e1:c1:4d:a0:fb:f6:88:d3:59:10:4a:67:78:58:
         66:88:71:5b:8c:17:92:01:a3:be:b2:ce:72:1f:3f:85:b7:f4:
         e9:79:8c:15:ce:14:4c:f4:96:29:4b:19:a8:c2:c5:b4:f1:e1:
         b6:7e:74:89:0b:b0:f2:2c:d0:b7:8b:2f:4f:ea:22:db:d8:36:
         98:b2:c2:cd:ca:07:d3:01:32:a7:52:f5:19:75:19:98:e3:9e:
         33:76:7e:48:64:d0:79:38:f0:d9:6b:64:b8:3f:7a:17:a2:83:
         08:96:04:d0:40:70:df:0d:4d:cc:f1:f9:5a:a8:e2:c7:1f:77:
         30:37:28:1b:d5:17:a5:cb:be:f6:11:c5:cd:b4:6e:7b:79:c9:
         9f:0b:e8:49:ec:d6:cd:d8:ee:e1:6d:33:56:d1:f6:e0:af:0a:
         bb:df:97:06:15:2a:f8:27:ae:10:97:94:a0:2a:60:2a:3f:eb:
         e3:d3:dc:bd:b6:03:03:7a:9c:52:39:69:d5:ec:5e:02:ac:56:
         ce:60:4c:6b:92:84:27:33:b8:c4:cf:ff:2f:b0:9c:0b:89:41:
         a7:79:14:07:04:9d:35:65:e6:64:28:58:de:3b:05:48:a8:cc:
         cb:45:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----