Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft
File:                     4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft (raw, json)
Hash identifier:          00ubA+lOzOJuzZSfxlKlUsxQrJtl6wB2XrQK2UNXn3s=
Subject key identifier:   2D:76:25:96:E4:34:CF:E3:6E:46:92:8F:10:41:0D:AC:24:2F:6D:53
Authority key identifier: E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
Certificate issuer:       /CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Certificate serial:       018F72E687038F995A94175ED65DF4A6673B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft
Manifest number:          116E
Signing time:             Mon 13 May 2024 17:01:01 +0000
Manifest this update:     Mon 13 May 2024 17:01:01 +0000
Manifest next update:     Tue 14 May 2024 17:01:01 +0000
Files and hashes:         1: 4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl (hash: HlSt8eC30ticjJTcGiuRmOml+RD4EdAwrTDe6m+GcKc=)
                          2: wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa (hash: ZL9vAJ7ZKDurr49b3XjVTc1vx9luIVm9W8hU+1tDYj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:72:e6:87:03:8f:99:5a:94:17:5e:d6:5d:f4:a6:67:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
        Validity
            Not Before: May 13 17:01:01 2024 GMT
            Not After : May 14 17:01:01 2024 GMT
        Subject: CN=2d762596e434cfe36e46928f10410dac242f6d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:dd:52:c5:77:66:84:3e:b6:aa:3c:69:6b:
                    ca:c1:fc:e2:02:58:a3:d4:2f:bf:ed:ea:07:cd:e3:
                    ae:74:51:d6:4c:0b:8b:af:41:ad:40:ab:c5:d5:b4:
                    32:bf:de:28:c0:5c:53:c3:75:db:b4:77:6a:20:80:
                    9a:15:3a:29:9c:59:3b:02:50:bd:3f:d1:f8:c5:4c:
                    0b:45:a2:9d:f3:21:07:9e:8c:ab:94:a2:d1:a6:45:
                    9f:dc:5d:d2:cf:fe:b3:3c:aa:9f:b5:e5:82:23:96:
                    4c:52:30:8f:ff:9c:62:0a:5b:ec:b6:fe:ad:09:1f:
                    02:a7:7a:a9:df:35:cf:ab:cd:31:b1:ff:0c:ab:e3:
                    c7:c1:23:cb:57:fc:53:f4:dd:4d:ae:1d:21:71:55:
                    5a:77:18:d6:38:8d:5f:4b:db:b6:91:c6:f5:37:bb:
                    88:d6:61:48:60:4e:4a:35:53:bf:35:db:a3:64:5b:
                    5c:e6:5d:e2:b0:c3:e2:b0:2b:a5:a2:3e:93:86:b3:
                    31:a2:0c:0a:9c:95:dd:81:00:9a:c7:f9:18:8c:c7:
                    7d:3c:88:8a:65:b8:9a:3e:17:bb:90:1b:14:d2:8f:
                    7a:cc:f5:55:0e:fa:c5:f1:54:cc:10:5d:ad:de:37:
                    e4:89:93:40:de:9b:01:96:0f:e6:51:99:cb:67:c6:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:25:96:E4:34:CF:E3:6E:46:92:8F:10:41:0D:AC:24:2F:6D:53
            X509v3 Authority Key Identifier:
                keyid:E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4d:8e:3f:c7:f3:df:9e:59:9d:54:26:f2:04:6f:4a:64:1e:
         b8:dc:a5:50:41:1e:79:fb:b6:cf:49:32:13:19:1a:97:be:21:
         6d:7b:bd:29:be:b8:3e:16:b8:7b:9b:92:36:f7:71:0c:60:98:
         4c:00:51:ed:40:6d:9e:c5:5f:47:87:5f:63:74:7b:6c:16:37:
         cc:bb:9d:ed:9f:15:75:87:9c:a6:6b:8d:85:92:d5:7e:7d:b5:
         35:f6:e5:98:7a:6b:1f:d0:17:ad:1f:cc:5d:fb:d9:b8:3a:d7:
         a4:ad:65:f8:59:24:f8:ea:1e:c6:ed:c7:ea:72:5e:71:26:f5:
         ac:51:a4:99:a1:2c:8e:8b:ed:9d:7b:45:ae:64:f4:8e:3e:60:
         bb:30:39:0a:b7:0b:db:ff:e2:aa:0b:b8:da:cf:72:9a:bb:25:
         83:f1:f3:89:12:10:0e:b1:72:cc:36:e2:8c:c0:04:06:67:97:
         7e:fb:67:c4:b1:2b:9d:8e:dc:ec:fb:dc:2b:a9:6c:b5:4f:4f:
         55:a4:15:e6:24:dc:55:7c:8b:a9:e2:51:89:03:79:08:30:a2:
         6e:52:fc:e3:6b:dc:55:47:c7:23:ea:14:ea:67:2b:21:25:1a:
         50:29:7b:f7:8c:27:9c:de:f0:69:ff:f1:e9:e8:47:0b:67:09:
         e8:9a:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----