Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft
File:                     aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft (raw, json)
Hash identifier:          ItW1BDTJT5Poi+s85CILeKnGYviFKtU+5QIqdCTICEM=
Subject key identifier:   48:DE:A1:BE:26:2B:27:36:EA:69:E6:92:82:C5:57:AE:D8:A4:02:A9
Authority key identifier: 68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED
Certificate issuer:       /CN=68a839cc8159fc5d3d75dedf62aadb81c40eabed
Certificate serial:       018F7A690340221843CB5B112985E0E7D8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft
Manifest number:          0886
Signing time:             Wed 15 May 2024 04:00:53 +0000
Manifest this update:     Wed 15 May 2024 04:00:53 +0000
Manifest next update:     Thu 16 May 2024 04:00:53 +0000
Files and hashes:         1: aKg5zIFZ_F09dd7fYqrbgcQOq-0.crl (hash: iMMz/PDs8ZqhV7L/1nNhaH+uJGz/37ae23oA5MCDzJA=)
                          2: ayEy7dFAQZ8xJJFUaaYqDxxLgS8.roa (hash: 5Zr9FUQE3SSt63mJPxR/rWCbm4O71wz38aLmtng/AIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7a:69:03:40:22:18:43:cb:5b:11:29:85:e0:e7:d8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a839cc8159fc5d3d75dedf62aadb81c40eabed
        Validity
            Not Before: May 15 04:00:53 2024 GMT
            Not After : May 16 04:00:53 2024 GMT
        Subject: CN=48dea1be262b2736ea69e69282c557aed8a402a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:35:58:c7:9c:91:c9:90:43:97:59:34:b0:
                    b8:7a:0c:49:f6:37:76:10:a8:65:7c:2e:5a:f5:ae:
                    eb:a3:0f:c1:96:0c:65:e4:27:c6:7f:7e:d1:59:a1:
                    8d:1d:c7:52:a5:5f:a3:ea:0c:fc:2f:04:a2:5d:85:
                    89:ca:4a:a7:f3:c5:57:cb:d3:ec:00:dc:f6:6d:ca:
                    a4:96:64:c2:15:3b:89:62:88:0c:d3:a9:10:59:b3:
                    0e:6b:b2:40:6a:e4:c4:c0:d7:48:cf:25:f7:8d:3c:
                    ac:07:8e:99:84:55:09:b4:0d:ea:2a:1d:97:f9:c6:
                    6f:9a:44:31:65:5a:a7:af:42:41:eb:6d:d3:4e:20:
                    6d:c8:03:e4:2c:bf:30:d6:83:36:94:a2:d1:48:c3:
                    4e:b6:c4:0b:00:f6:f7:eb:bf:6c:b5:22:1b:0a:61:
                    83:68:64:0d:5d:e1:21:ff:6d:e3:a6:75:6a:25:7d:
                    55:45:39:77:f4:d9:73:4c:9a:29:70:45:4d:47:df:
                    14:f8:b8:83:d6:2a:d1:b4:d3:e5:a5:9b:90:f5:18:
                    93:ce:d1:e7:b3:40:9b:74:71:cc:de:42:66:09:c3:
                    4c:e1:42:f4:36:c4:37:bf:32:a5:bf:3b:4c:df:03:
                    32:d7:f9:d1:e7:c9:83:39:92:41:b0:4f:13:3b:b6:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DE:A1:BE:26:2B:27:36:EA:69:E6:92:82:C5:57:AE:D8:A4:02:A9
            X509v3 Authority Key Identifier:
                keyid:68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:a2:c8:26:30:a9:03:bf:a3:7d:57:d5:e7:7c:4c:d9:e6:
         39:44:c0:53:5d:e3:72:f5:3a:ad:fe:e0:d1:29:e5:cb:e1:de:
         2e:f3:12:71:a7:c4:81:9c:4c:cc:9d:66:5b:90:aa:14:e8:db:
         34:cd:e3:b2:b4:89:b0:a0:6c:65:85:27:ef:0e:48:fd:61:a0:
         56:45:4e:97:7b:6d:90:32:1a:7e:c7:f8:ec:ce:37:07:ab:18:
         a4:ee:9e:98:11:ee:3e:fe:58:b6:0f:a8:de:0d:c7:cd:ec:5a:
         98:03:42:0e:9a:ad:1a:b2:45:b1:81:2c:86:ee:46:a8:a9:d4:
         e2:fa:7a:b3:4f:0c:36:89:1f:3d:cc:98:d3:37:d6:86:24:af:
         2b:bd:bd:9c:12:ab:8e:f5:17:81:79:ac:79:74:d4:51:a9:8a:
         a3:6c:fd:f0:9d:59:7f:20:bc:9f:a6:66:53:ea:28:87:7e:fc:
         ce:28:52:75:e3:31:c8:aa:2d:a0:bc:11:d9:20:a3:75:32:93:
         5d:2d:c1:e1:d0:11:52:84:9b:42:a2:b8:05:4f:08:1d:a7:c7:
         1e:bc:dc:3b:d3:c2:e9:45:a7:38:09:30:6e:25:64:e8:96:3a:
         00:0e:c5:84:0a:2d:52:f1:7a:d4:67:e1:85:0d:a4:0f:88:63:
         66:6d:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----