Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
File:                     sy8BX2ojRTRcs9ryMMJcj64CMFo.mft (raw, json)
Hash identifier:          dFC3qrSkiWrsf1E7CoiW4CrB+vghhjf27hTP5IZ2wCQ=
Subject key identifier:   2F:F2:A8:BC:B9:18:7E:9C:D3:34:9A:4A:EE:96:01:EF:35:04:3D:0A
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Certificate issuer:       /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial:       018F720C77F7F632E04166F18F91FF0B76A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
Manifest number:          05FA
Signing time:             Mon 13 May 2024 13:02:50 +0000
Manifest this update:     Mon 13 May 2024 13:02:50 +0000
Manifest next update:     Tue 14 May 2024 13:02:50 +0000
Files and hashes:         1: pNqxvbroZA2J5m889e6zD6q1HMk.roa (hash: UOBsP2Z+PEe2lfA8Hw8URe671/YrdGbjkWpM/X47UIY=)
                          2: sy8BX2ojRTRcs9ryMMJcj64CMFo.crl (hash: rh6dSr8/122MpX+8GtpdrYSzlS/whWEjU5ZLLGR43Q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:72:0c:77:f7:f6:32:e0:41:66:f1:8f:91:ff:0b:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
        Validity
            Not Before: May 13 13:02:50 2024 GMT
            Not After : May 14 13:02:50 2024 GMT
        Subject: CN=2ff2a8bcb9187e9cd3349a4aee9601ef35043d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:12:8d:e9:eb:ea:a8:14:51:61:f9:84:3c:
                    64:7a:82:0c:34:2f:22:8d:12:fe:64:3d:bc:32:51:
                    85:4f:71:d4:f1:80:3f:46:99:ea:74:54:62:dd:1c:
                    93:01:fc:cf:b3:a3:ea:88:5d:2e:56:37:ee:c9:97:
                    0d:f2:1b:98:49:df:c1:e5:20:bf:9e:5c:3a:39:fd:
                    4e:7e:21:60:81:d9:e7:b0:57:34:e2:13:f1:01:6a:
                    20:23:1b:33:e4:c6:32:4d:10:d3:f5:ee:a6:b5:9f:
                    e6:dc:4b:3d:ac:e9:9b:1f:dc:ef:89:25:5c:f7:d2:
                    34:92:38:db:c3:5a:77:72:23:3c:e3:34:41:c9:d7:
                    0e:0a:9b:cd:95:15:4e:84:79:23:40:ae:64:b9:10:
                    3d:0a:75:00:a4:b0:93:ad:9f:d8:24:43:1c:1a:cc:
                    58:ba:7f:dc:91:3f:ec:47:90:9c:f2:cf:67:b9:57:
                    b6:57:31:58:33:79:af:8d:32:45:84:60:a5:73:f2:
                    c7:16:69:f3:a0:ef:da:e2:6d:58:5c:c4:f6:44:d1:
                    93:43:bb:8a:d8:24:74:5e:bd:cf:f4:51:18:2b:63:
                    bc:63:ce:de:43:2f:71:3e:fe:7e:15:9d:a2:c8:2e:
                    83:f2:b4:88:b7:ee:f3:37:96:9b:81:c6:d9:b8:7b:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:A8:BC:B9:18:7E:9C:D3:34:9A:4A:EE:96:01:EF:35:04:3D:0A
            X509v3 Authority Key Identifier:
                keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:45:40:47:d1:a9:18:3a:f8:ee:d6:3e:67:8b:0c:e2:40:
         df:7e:ed:96:3e:c6:07:49:2f:8d:44:65:c1:9a:d4:56:ab:30:
         73:9b:50:32:42:06:ee:00:d2:5f:ed:3c:99:e5:bc:73:97:37:
         7e:45:8c:cc:c7:1d:0e:56:cc:a2:51:6e:7c:a0:a1:40:d8:52:
         23:a2:ea:84:5e:10:57:fb:fc:a1:3a:b5:0e:f7:31:bb:b1:20:
         d7:f5:5e:91:61:09:e9:5c:0a:32:e6:d0:1c:7f:56:80:12:00:
         60:e2:c7:a2:48:91:7b:e4:4b:77:d7:52:56:ed:87:1a:7c:01:
         b7:5a:b2:e6:2d:27:71:91:d3:7d:3a:b7:c3:9c:c9:fa:ba:ea:
         64:47:f3:08:2f:9b:69:36:44:39:c0:5b:f7:f2:84:3b:bd:5a:
         00:65:fc:52:31:46:a6:90:4e:cb:af:41:d6:e1:a3:2f:45:c9:
         54:ea:ab:49:17:3e:45:60:78:34:de:e1:73:4a:56:c8:84:87:
         df:13:eb:62:32:76:9e:5b:95:5f:ae:8b:f0:4e:b6:f3:4f:d7:
         80:60:1c:33:a1:f6:4b:31:62:0c:d7:32:b9:13:44:d2:f7:b6:
         16:b5:dd:10:f4:44:06:5e:52:68:68:93:9f:de:48:61:7e:5c:
         e3:34:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----