Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
File:                     yKYn5qZ_e2l9j7ryybB158cuqws.mft (raw, json)
Hash identifier:          jinP2oY2ABS+DQK3+xdMTNlygrYwAAMYGodTTQ+HD+A=
Subject key identifier:   12:2E:BD:D6:04:A8:3F:EF:05:C2:1F:58:DC:93:A3:11:1B:C0:86:89
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Certificate issuer:       /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial:       018F0162E6D7560A1F0ABFFDDBC15258D383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
Manifest number:          08F3
Signing time:             Sun 21 Apr 2024 16:00:09 +0000
Manifest this update:     Sun 21 Apr 2024 16:00:09 +0000
Manifest next update:     Mon 22 Apr 2024 16:00:09 +0000
Files and hashes:         1: dXaN8mxXjyc5-mDM_nKc_sIqIWw.roa (hash: +A+nM5jbyH0PyEGq84fweHuOsJi+pxpYJGfjTCax71M=)
                          2: ovq9SHaGHSZtUyimJkIoTGn8INk.roa (hash: CXb3LyRj5VuCMLVlACtqxz/81TDLV0/hwVMMXGdNbNo=)
                          3: yKYn5qZ_e2l9j7ryybB158cuqws.crl (hash: aCEUq3NcgnB0Hjgyp1uAg9RTTux53nHwNdSs1UZk60E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:01:62:e6:d7:56:0a:1f:0a:bf:fd:db:c1:52:58:d3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
        Validity
            Not Before: Apr 21 16:00:09 2024 GMT
            Not After : Apr 22 16:00:09 2024 GMT
        Subject: CN=122ebdd604a83fef05c21f58dc93a3111bc08689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:bc:a3:f4:a0:c5:13:7f:4c:7c:1f:9d:01:
                    17:58:ca:38:9d:b5:44:9a:ad:5b:a7:6d:ed:b1:0c:
                    e6:50:c7:80:21:22:d9:b9:bf:ef:ab:c2:7f:41:94:
                    0c:ee:74:9c:7b:93:80:b6:0a:66:85:00:7d:54:98:
                    18:84:aa:44:c3:d5:b6:fb:03:7e:12:62:b5:2f:86:
                    7b:60:63:78:6e:43:c7:26:19:49:a2:f2:4a:ee:cb:
                    1d:e9:4c:d8:3e:f3:f9:95:05:53:92:ee:9b:85:03:
                    a7:6d:5b:29:15:69:0c:87:86:ff:e6:68:77:f4:b1:
                    63:da:cb:6a:ce:ea:1b:fb:7e:b7:96:d5:29:63:57:
                    e8:32:c3:08:dd:06:55:d3:e8:49:b2:d6:3b:c8:71:
                    e8:41:7f:4f:7f:23:74:7b:7f:b8:6a:5e:bb:71:34:
                    93:8f:30:70:a1:92:e3:63:9e:da:69:5d:23:6b:e3:
                    d0:4e:6a:bd:d6:52:3b:e2:3a:c7:e1:a3:aa:b3:89:
                    a3:c1:8b:be:1d:29:ef:58:60:9c:7d:be:e5:c5:45:
                    86:18:29:06:43:3b:0e:bd:21:cb:19:d7:83:88:ef:
                    1e:65:9c:2b:23:3a:03:e6:8c:57:dc:b2:66:67:08:
                    ee:57:de:4d:38:6f:be:43:20:d9:14:85:0e:85:81:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:BD:D6:04:A8:3F:EF:05:C2:1F:58:DC:93:A3:11:1B:C0:86:89
            X509v3 Authority Key Identifier:
                keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:6a:de:34:cf:88:6f:62:9b:e3:80:e7:1f:14:6a:d8:c5:
         f7:39:b3:04:bf:85:0c:be:24:04:86:82:9e:07:df:72:21:75:
         69:73:34:80:70:89:57:6f:1f:06:59:08:f4:0a:8e:23:a1:86:
         d5:2c:09:4a:1f:64:ce:9d:12:c5:f1:70:c0:19:19:b7:d4:6c:
         d2:39:5f:f9:e1:b2:16:2c:8d:97:12:ec:3f:e4:ca:13:ee:fd:
         6f:ce:ed:05:60:de:12:d5:a7:ce:2a:29:bb:3f:60:d4:fc:37:
         99:9d:9d:23:25:eb:58:c9:9b:b1:c5:2b:b1:d5:a9:78:95:d4:
         c8:f9:a7:0b:87:a8:8e:71:61:78:c0:08:36:26:53:89:ac:41:
         a9:68:63:fd:8f:5c:32:d7:8c:3b:2c:2e:f7:0f:e3:9e:05:f3:
         fc:d6:34:5a:1a:07:03:f0:eb:b6:98:b6:f9:73:82:c1:04:c9:
         a8:99:89:c3:36:35:08:f6:df:ad:69:e5:c7:d2:cf:af:33:19:
         89:2f:32:75:dc:54:dc:c0:c1:08:40:80:bd:4f:a0:47:4b:a2:
         c2:bd:de:3d:b7:95:30:a7:7e:f5:af:a7:5a:87:f5:68:ab:01:
         d1:d7:b3:58:df:0f:4b:d0:15:7e:fa:3f:94:eb:bc:97:48:34:
         a1:7a:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----