Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
File:                     7Er2_cFtaK4mqg6rViPmviFwNsE.mft (raw, json)
Hash identifier:          JNLZmxN80lDYyA9ookJGJNPvEQkICvA/8ixSyyx/eak=
Subject key identifier:   F0:10:7C:98:98:18:98:9E:8E:DD:3F:79:99:EC:6A:D6:D9:72:67:01
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Certificate issuer:       /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial:       01923023143FDF0C0A148193A5E007FF584B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
Manifest number:          12DD
Signing time:             Thu 26 Sep 2024 21:00:58 +0000
Manifest this update:     Thu 26 Sep 2024 21:00:58 +0000
Manifest next update:     Fri 27 Sep 2024 21:00:58 +0000
Files and hashes:         1: 2L8hVVHoKFZw4Yx_D09pPqSfAts.roa (hash: JXU5vI5lUU/SvohRBy8hBIpXka1bkgIZNiffvKaBJto=)
                          2: 7Er2_cFtaK4mqg6rViPmviFwNsE.crl (hash: Y9J6QknXxzUFIsd9wVRdtl9ifkHy6Ft4ghrb1bi1mXk=)
                          3: c_ORZpR3ooKMGPfa0OmblOdGe1o.roa (hash: 7oPG5YhkzTFPq85armoAnIO4OPEMfyiq1TL/Uwm1q9g=)
                          4: ggyIJb7LBeTbi9_w0Iaae3gkTp0.roa (hash: MOO8Uj5uxGUTYw4us+UxZbh2Gc8FX3omN0gvyIRSyx0=)
                          5: y1L9v2vVO-q46RhUkE8N7byr3OU.roa (hash: JA7iGZg7BPOeagDaNGRiFsitu4NX60PuxnepgH1FCks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:14:3f:df:0c:0a:14:81:93:a5:e0:07:ff:58:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
        Validity
            Not Before: Sep 26 21:00:58 2024 GMT
            Not After : Sep 27 21:00:58 2024 GMT
        Subject: CN=f0107c989818989e8edd3f7999ec6ad6d9726701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:04:4c:c7:c6:c0:a4:12:dd:f9:6c:43:b4:
                    d4:0e:50:c8:cc:9e:1f:05:8e:c9:0f:78:0c:44:7c:
                    a9:38:cb:2b:3c:d6:d4:be:e0:7e:22:3f:b3:b8:0f:
                    ed:03:ef:01:77:98:28:53:10:80:67:56:37:60:ab:
                    1f:29:15:04:ba:75:ef:90:4a:50:d7:1a:23:ff:18:
                    e4:25:87:6d:8f:94:61:30:05:37:2d:6f:bc:c4:97:
                    d2:51:68:0f:af:ac:7d:85:41:83:0d:60:ec:32:61:
                    fb:34:71:88:67:d4:90:e7:07:ef:a2:c4:fd:1c:56:
                    7b:b5:ea:c8:77:1f:ff:a7:9a:93:73:de:9e:34:e1:
                    ea:55:8a:29:9c:d6:db:f1:b1:93:e4:e4:3f:76:2e:
                    47:7d:d6:55:58:89:54:e2:ed:90:6d:94:68:f3:3b:
                    ff:d2:f2:1c:10:46:34:37:52:f7:3f:67:71:a0:66:
                    17:27:92:66:5d:d6:39:71:c8:cc:53:1f:58:28:31:
                    0f:f5:31:e0:85:a0:b0:f3:1b:c0:28:43:32:42:3f:
                    0b:1e:42:ec:4f:36:2b:db:31:6a:ea:68:b9:3d:5e:
                    ee:ed:5c:6f:7f:f6:9a:7d:d0:dc:24:40:d6:da:38:
                    93:60:7c:59:6f:c3:41:56:43:dd:8a:7f:cc:24:b0:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:7C:98:98:18:98:9E:8E:DD:3F:79:99:EC:6A:D6:D9:72:67:01
            X509v3 Authority Key Identifier:
                keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:b7:2f:cc:71:64:03:2d:be:fe:65:bc:ca:c5:3e:55:18:
         4e:bc:d5:5b:4e:9b:fe:b5:e9:b0:28:58:4c:17:ac:85:b8:50:
         91:52:e9:23:b4:2b:f6:ef:32:4a:b6:03:5d:1e:18:59:57:b0:
         3a:c5:14:78:32:97:02:7d:9e:9a:3e:1b:f4:68:c1:c2:70:c5:
         b2:db:21:77:14:46:fb:b7:d3:fa:16:3d:ee:3b:fd:8f:7c:08:
         6c:2b:5c:27:d9:6b:0c:a3:06:a1:94:a5:10:47:79:33:94:0d:
         dc:15:9b:4a:4c:54:3e:2b:d9:9b:37:28:24:48:c3:2e:d5:4c:
         f1:f9:f2:ad:26:cf:8d:ed:0f:ca:ae:88:a2:c1:69:7c:46:0f:
         40:6f:10:a6:d1:d7:e2:ae:4c:1f:a2:38:70:39:73:6e:c5:8c:
         9a:99:d7:ad:9f:53:16:44:3e:58:9e:71:9e:91:8e:98:e3:4f:
         4d:50:4c:bc:e8:3f:c7:0d:af:9f:bd:5b:49:f1:ec:b3:fa:26:
         e2:55:5e:20:ed:d1:40:6f:d5:03:1c:d4:94:00:66:46:1c:a4:
         67:46:71:21:9c:60:09:2b:8e:e6:97:ec:43:ce:00:27:d8:e1:
         82:21:a3:f8:84:0f:91:19:0d:63:b5:97:fa:46:08:e4:b4:03:
         c9:43:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----