Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/BgkF4Mf-T_LCKD3-9hui0rjNBKk.mft
File:                     BgkF4Mf-T_LCKD3-9hui0rjNBKk.mft (raw, json)
Hash identifier:          YZzdF//nepjT8u/yvk5+nRaHCW6w7RECZgghh964D24=
Subject key identifier:   6A:2B:13:76:3D:E5:E0:8C:F7:AB:6F:66:23:4A:A1:9C:78:33:66:8F
Authority key identifier: 06:09:05:E0:C7:FE:4F:F2:C2:28:3D:FE:F6:1B:A2:D2:B8:CD:04:A9
Certificate issuer:       /CN=060905e0c7fe4ff2c2283dfef61ba2d2b8cd04a9
Certificate serial:       01934602F23F67059F493CC852E7D4034AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgkF4Mf-T_LCKD3-9hui0rjNBKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/BgkF4Mf-T_LCKD3-9hui0rjNBKk.mft
Manifest number:          06FC
Signing time:             Tue 19 Nov 2024 20:00:18 +0000
Manifest this update:     Tue 19 Nov 2024 20:00:18 +0000
Manifest next update:     Wed 20 Nov 2024 20:00:18 +0000
Files and hashes:         1: BgkF4Mf-T_LCKD3-9hui0rjNBKk.crl (hash: qmX1TO/OsoLmAFvrdNWkNjpzuvLmYBG9829cArz1lFM=)
                          2: _jqv4nc0-8_9pz8C10U1onKpwyg.roa (hash: 8/a3Wfj8hSmT3uLWXLABsozMfeV7GYbKE65fGOky9jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:02:f2:3f:67:05:9f:49:3c:c8:52:e7:d4:03:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060905e0c7fe4ff2c2283dfef61ba2d2b8cd04a9
        Validity
            Not Before: Nov 19 20:00:18 2024 GMT
            Not After : Nov 20 20:00:18 2024 GMT
        Subject: CN=6a2b13763de5e08cf7ab6f66234aa19c7833668f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:6d:cf:16:7d:ae:7d:7f:6a:e3:0d:4d:1c:
                    0f:79:ea:70:8a:a8:dd:2b:c2:2c:a4:7e:e0:09:18:
                    98:c1:c6:9f:38:01:81:1b:ac:9a:84:6e:fa:8b:e3:
                    14:ab:ac:1a:80:f0:90:ab:81:c8:58:12:2c:8f:fc:
                    32:30:5a:53:69:55:c6:77:f3:79:be:f6:cc:fb:a0:
                    25:b9:13:d7:aa:31:8f:65:b8:d8:63:ad:63:a5:8b:
                    60:a4:c9:02:59:09:88:e2:4a:71:7a:e7:76:17:20:
                    fd:20:ba:cd:0b:8b:0c:cf:45:44:89:52:70:9b:f3:
                    3e:55:ec:8b:22:4e:63:6e:bc:a1:1b:e3:b4:3b:b6:
                    d5:19:29:9a:df:44:c1:c7:77:f2:06:38:47:de:41:
                    bd:43:30:0f:9d:5e:7f:b5:87:cb:ff:b7:c0:ba:f5:
                    cb:fe:7e:b2:5c:aa:4d:17:1b:f0:e2:f1:2b:bf:0a:
                    c4:c2:c4:93:93:d8:f2:12:0b:4a:d8:21:79:b8:98:
                    e8:79:8d:73:b9:a9:82:3a:77:e2:47:6d:fd:8b:8d:
                    03:fd:3c:01:e3:4e:d7:64:5f:ee:37:f6:13:8c:6d:
                    27:fe:69:13:55:0b:3b:cd:a5:8c:2d:86:fa:f6:fb:
                    1d:69:47:46:62:48:1c:8e:23:d6:e5:cc:2d:86:56:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:13:76:3D:E5:E0:8C:F7:AB:6F:66:23:4A:A1:9C:78:33:66:8F
            X509v3 Authority Key Identifier:
                keyid:06:09:05:E0:C7:FE:4F:F2:C2:28:3D:FE:F6:1B:A2:D2:B8:CD:04:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgkF4Mf-T_LCKD3-9hui0rjNBKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/BgkF4Mf-T_LCKD3-9hui0rjNBKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/BgkF4Mf-T_LCKD3-9hui0rjNBKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:33:19:f4:6f:f3:da:3c:5d:fa:e6:47:86:18:d5:80:52:
         4c:a5:a6:40:aa:fa:82:b9:36:95:62:b5:c7:e0:66:16:4b:d6:
         a2:22:2b:56:c2:f4:e5:1e:a5:d3:87:fa:18:60:df:8e:e9:4a:
         a9:2b:5a:6e:88:07:53:42:62:44:37:df:ac:c4:1f:7c:ff:d6:
         7b:0a:eb:9b:13:ac:bd:a0:b6:d4:37:11:ff:c3:81:c1:46:4a:
         93:fc:ff:74:d1:7a:2b:1f:95:d4:24:ce:ff:68:ff:81:aa:66:
         e7:e7:a8:21:e1:25:52:61:cf:b2:16:84:2b:fd:88:24:f4:97:
         d9:ee:13:57:13:a8:0d:6b:af:2d:92:20:e9:95:39:e6:7b:7f:
         7f:b4:fc:43:a1:8b:6a:64:41:30:2b:01:49:d5:21:f5:35:a9:
         c7:67:74:91:28:36:87:bf:8e:83:e5:e6:eb:6b:6e:c9:ce:cc:
         a7:62:68:b2:43:2d:3d:e0:48:81:f6:6c:ac:3c:b7:0a:97:dd:
         6e:94:47:81:b8:76:81:89:ac:10:0d:8d:81:04:b7:eb:35:14:
         e5:f4:27:c8:e3:ea:65:fa:2a:61:e6:1e:5c:06:33:9e:e8:94:
         67:5e:80:80:16:44:0c:81:1c:8f:72:79:3e:9f:45:de:3f:9b:
         93:87:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----