Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft
File:                     7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft (raw, json)
Hash identifier:          odDov0xRuLLrwVfzdFAaTWZ/30p0mUWf0c+GVSlr21o=
Subject key identifier:   3E:0C:BC:20:59:C3:14:F9:B2:E2:44:13:F3:F1:01:1A:78:C1:CA:D0
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Certificate issuer:       /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial:       018D8C73E393ACB9F937B048664CE7466142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft
Manifest number:          0BEA
Signing time:             Fri 09 Feb 2024 06:00:21 +0000
Manifest this update:     Fri 09 Feb 2024 06:00:21 +0000
Manifest next update:     Sat 10 Feb 2024 06:00:21 +0000
Files and hashes:         1: 7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl (hash: x8hEBjGNWpf4YEzacccbu+IAqAihJhDYyP5u3N52ICk=)
                          2: Rno-yJEc1S8JUuAc_nrhiZ05e-w.roa (hash: iIJodFy51l2Con55T/5O5td+doKVzX9/SEMJ2gNPQZw=)
                          3: kiaM0Ly4FAtRd8dG5IpEpmQtbt4.roa (hash: 3ae8zNK8+sOhkvKr2grcjS3MOOX7G8EZ2uVXIXrC+JM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8c:73:e3:93:ac:b9:f9:37:b0:48:66:4c:e7:46:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
        Validity
            Not Before: Feb  9 06:00:21 2024 GMT
            Not After : Feb 10 06:00:21 2024 GMT
        Subject: CN=3e0cbc2059c314f9b2e24413f3f1011a78c1cad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:42:cb:af:7d:c6:d6:0e:61:7f:5d:d5:b8:
                    99:9d:52:74:00:04:1c:e7:ba:b4:64:f8:72:55:01:
                    2b:94:3e:f4:13:41:74:95:65:1b:a6:32:50:e6:d3:
                    56:0e:d4:89:d8:7a:fd:76:f7:9d:91:64:1f:ff:76:
                    44:c4:ce:c7:cb:e0:a5:3b:6f:07:63:5b:c1:ff:93:
                    10:8c:fe:7a:f2:a6:0a:97:4e:c0:28:30:08:02:ea:
                    13:28:8f:bb:c6:38:40:f4:84:0a:33:c7:16:e7:cf:
                    e6:e0:93:da:13:76:40:40:ce:c1:83:b5:9d:b5:86:
                    0c:fd:5e:d5:15:59:43:ce:99:2c:1d:27:c2:82:69:
                    d9:88:96:a2:d6:fc:69:19:6d:ea:74:7a:bf:cb:2b:
                    a6:4d:26:9b:f9:ed:a5:dd:71:29:56:af:94:a2:e9:
                    33:8d:85:fe:15:b7:80:68:00:b7:1f:cc:31:2d:73:
                    8d:86:c6:8a:44:29:15:7b:ea:85:57:3d:b8:13:28:
                    f7:40:e7:5a:a5:b3:e1:96:51:71:24:17:15:17:a1:
                    00:3f:4c:18:be:0f:fc:cd:3a:c6:7c:14:e0:b0:98:
                    ed:c7:60:c3:b9:9d:92:f5:b7:63:eb:09:7e:4c:82:
                    e3:6e:7b:8a:01:9f:be:e3:bf:70:41:b5:37:00:bc:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:BC:20:59:C3:14:F9:B2:E2:44:13:F3:F1:01:1A:78:C1:CA:D0
            X509v3 Authority Key Identifier:
                keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:e4:09:57:50:43:dd:55:7d:ad:9d:c9:1f:7f:ea:4d:f0:
         34:35:c3:b3:5d:76:7c:5b:a5:8e:65:ff:e2:68:82:ba:3a:5a:
         b4:30:9a:ec:7c:36:0d:a6:01:28:2f:40:d9:da:7f:db:ad:cc:
         f0:25:66:bd:2b:a2:81:5d:72:9d:4a:da:f0:87:6e:2b:59:54:
         3e:ea:fe:20:25:f2:f5:9a:a7:bd:c1:ec:78:08:d9:8f:3f:44:
         14:3e:d3:60:16:67:6a:ec:e0:36:95:86:b2:2c:a5:ab:7e:54:
         40:de:fe:36:ef:2c:3e:b3:95:a2:85:87:d4:80:1d:77:68:d9:
         a9:89:5b:1f:27:30:09:50:4f:73:59:40:c0:39:04:2d:60:c9:
         bd:00:ee:99:6d:e6:69:93:2d:6d:ae:90:f6:35:f1:8a:5d:6d:
         f5:a3:57:00:24:37:b4:0a:7c:fe:72:9c:15:bc:b9:40:83:67:
         6f:2f:17:d9:96:80:d5:60:a2:49:2f:fb:2c:18:4a:e4:4e:7d:
         27:3d:be:50:e8:12:71:26:55:02:5d:e3:13:ae:01:00:ae:7a:
         f9:ce:b2:21:fc:29:b8:cf:48:bb:19:4e:84:31:4b:62:32:79:
         77:f0:23:29:70:39:d8:32:99:d8:62:1a:aa:e4:69:54:fa:08:
         e3:02:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----