Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
File:                     gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft (raw, json)
Hash identifier:          Q9vjiEVAQ0sncGQyVrqWwO/aBiqR7D0zkXtf7i7xg/c=
Subject key identifier:   46:27:82:1C:FD:4C:40:C4:D7:3C:2D:1F:E9:D7:09:4E:98:5F:D0:15
Authority key identifier: 81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61
Certificate issuer:       /CN=81b14fae44dfa0e3349167433c924c9645739861
Certificate serial:       01923023036D59E5E5F1BB5EEF8E52B0484B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
Manifest number:          0B6F
Signing time:             Thu 26 Sep 2024 21:00:53 +0000
Manifest this update:     Thu 26 Sep 2024 21:00:53 +0000
Manifest next update:     Fri 27 Sep 2024 21:00:53 +0000
Files and hashes:         1: CiO8rz6OpJP8kXEDtL6_femYWdw.roa (hash: xrGwN0Y9hlv70stNpeICmZNMBWdiRqCHB0a8cFQp9FI=)
                          2: gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl (hash: UTlu4IiMFq83xqrOPNNBaT3nd76Br0vz4GF+xe6cGh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:03:6d:59:e5:e5:f1:bb:5e:ef:8e:52:b0:48:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b14fae44dfa0e3349167433c924c9645739861
        Validity
            Not Before: Sep 26 21:00:53 2024 GMT
            Not After : Sep 27 21:00:53 2024 GMT
        Subject: CN=4627821cfd4c40c4d73c2d1fe9d7094e985fd015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:cd:f1:d9:7b:f0:4b:50:ae:fc:1e:d7:27:
                    45:2f:25:f7:65:76:75:17:02:f2:e0:38:9b:85:a1:
                    39:d4:a4:df:ea:c4:2c:84:2b:20:92:ca:22:1d:ba:
                    11:72:c8:81:2a:48:62:a5:da:de:89:b5:d3:6c:fe:
                    8d:48:71:1f:a7:96:19:21:35:a0:70:a3:6f:fe:fa:
                    ad:ec:85:4d:6e:96:da:87:85:ad:db:86:f0:c1:c9:
                    80:52:12:f6:5c:26:26:64:54:38:be:21:6c:83:ce:
                    8e:47:13:a8:56:8a:92:e1:41:f1:d6:e9:65:23:90:
                    70:17:f5:4f:66:74:35:7f:62:22:1d:ec:b1:c1:35:
                    d0:26:88:85:24:28:e8:50:9c:12:5d:c2:79:ea:2c:
                    83:b8:a3:68:56:89:42:14:eb:00:a8:f6:d9:e7:54:
                    11:84:1a:b5:52:5d:92:ee:6d:7a:50:fe:29:a8:1b:
                    dc:73:73:92:04:66:db:e5:96:7a:f9:b8:45:b7:7b:
                    8c:d8:26:06:0b:f4:b1:36:1e:d0:33:1e:86:33:5f:
                    68:9b:67:b3:4a:7f:f9:4c:54:38:b4:51:6b:8b:8d:
                    55:07:57:8e:fe:03:88:a7:e6:c4:c4:d5:6d:41:1c:
                    f9:86:d1:af:a5:12:c7:6f:78:53:91:53:3a:7c:0e:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:27:82:1C:FD:4C:40:C4:D7:3C:2D:1F:E9:D7:09:4E:98:5F:D0:15
            X509v3 Authority Key Identifier:
                keyid:81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:d0:04:d9:4d:41:f1:56:e4:06:30:f9:e4:5d:e5:e7:f6:
         fc:69:eb:ec:b5:51:c3:63:04:07:10:a8:7c:bd:12:95:ba:9b:
         39:6f:36:2f:b7:87:b9:60:92:18:6b:ba:f5:38:d8:f7:db:d6:
         65:00:b1:db:2f:ce:6e:50:08:9d:78:8d:71:f0:a3:1b:f9:b0:
         4d:e2:c5:86:dd:2d:d6:a3:19:f6:02:10:34:cb:e9:ab:95:31:
         41:4a:7d:39:e8:6c:f5:af:ba:d3:29:a6:b2:7d:31:34:db:c4:
         ce:ce:cf:7d:03:f5:8e:0d:65:7e:a4:86:60:f5:9b:41:d6:80:
         ef:60:7a:db:85:66:44:f8:e4:06:c9:fc:3b:87:fa:51:a5:06:
         53:fe:d9:3c:f1:98:2b:6b:72:71:98:b4:b3:81:52:8f:19:71:
         a4:1d:17:a6:fc:6d:c4:ac:74:82:32:e2:8c:f3:ee:75:1f:73:
         02:75:6c:78:ae:35:97:87:74:b0:12:80:df:66:28:6c:01:b2:
         75:b8:3a:24:e1:4f:ac:ae:5e:a7:af:8b:57:e7:8f:66:53:ca:
         61:16:99:37:19:ef:d6:cf:d4:25:d8:c3:01:1c:a0:44:2a:16:
         23:ca:77:b6:ea:47:cb:9d:56:c5:c5:5b:db:2b:1d:a0:62:91:
         6f:61:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----