Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft
File:                     7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft (raw, json)
Hash identifier:          r8fNRoJ0zNh9gkDp+wTPA8FYZnD8xp8VZdsJe/TizSc=
Subject key identifier:   42:4D:DF:33:11:04:D5:FB:3F:4E:95:1A:D3:EC:65:BE:4F:71:2C:AB
Authority key identifier: ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6
Certificate issuer:       /CN=ed77ba4f32f2426170afc9e25914c13490ff5db6
Certificate serial:       018F2538DD5C757C328C2CB26965BB2338A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft
Manifest number:          08B2
Signing time:             Sun 28 Apr 2024 15:00:34 +0000
Manifest this update:     Sun 28 Apr 2024 15:00:34 +0000
Manifest next update:     Mon 29 Apr 2024 15:00:34 +0000
Files and hashes:         1: 0FQ4nhXCO6FrC8xorIDM3ZQ43Jc.roa (hash: +2CfTUWCshQVdZeMHyz/lCejPq05lTk7woT9R85f05Y=)
                          2: 7Xe6TzLyQmFwr8niWRTBNJD_XbY.crl (hash: t2MdHuwULKEG1pmTIyJ2dK/QiaDbhjU9NnS13LpJTpI=)
                          3: TMi91_TT4N9Du_EN3cIhrUTxerU.roa (hash: dsOQzlKfWSvpkq7fXI0xfYG35/bX7lWUROXQ0vqIcFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:25:38:dd:5c:75:7c:32:8c:2c:b2:69:65:bb:23:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77ba4f32f2426170afc9e25914c13490ff5db6
        Validity
            Not Before: Apr 28 15:00:34 2024 GMT
            Not After : Apr 29 15:00:34 2024 GMT
        Subject: CN=424ddf331104d5fb3f4e951ad3ec65be4f712cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:14:63:7c:8b:74:a4:5f:da:91:a2:7f:02:
                    43:e3:09:b4:7b:99:ba:aa:e2:40:d7:cc:f9:06:3e:
                    2a:93:dd:da:3f:5e:11:71:b2:bc:08:93:99:2a:6a:
                    4a:83:55:f7:46:80:2c:86:4e:40:29:e5:2c:88:c6:
                    b5:b4:b1:86:f1:9f:47:ec:c4:b6:6b:03:e1:b3:10:
                    4f:d1:94:3d:54:01:0c:5d:74:2a:9f:53:43:a3:ae:
                    74:10:5f:ed:33:33:61:6a:87:aa:fb:3a:29:bb:1a:
                    78:0a:18:72:09:3c:bf:58:47:5f:1a:76:41:56:dd:
                    32:6e:e9:d9:7a:91:bb:6c:5f:8e:f6:15:9c:59:d0:
                    16:59:cd:0b:91:dd:55:c6:ae:40:d0:8b:aa:c4:8a:
                    e6:19:d4:ca:50:42:0c:75:9d:4f:8b:e8:bc:ad:14:
                    7a:72:0a:83:7c:89:8a:ef:3c:b5:5e:58:d3:e3:be:
                    4d:f6:48:d4:0d:94:cf:44:b0:86:d2:6f:9f:d9:43:
                    c2:b4:e0:3a:8f:02:d5:16:ac:ea:c2:34:fb:fe:52:
                    64:cb:61:ef:45:12:f6:26:23:32:11:15:5c:ae:fd:
                    11:b7:d2:b9:db:8d:1e:da:e1:21:a4:0c:c1:8d:ff:
                    3a:69:d3:30:9e:07:70:62:c4:c0:a3:0b:3d:0e:ee:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4D:DF:33:11:04:D5:FB:3F:4E:95:1A:D3:EC:65:BE:4F:71:2C:AB
            X509v3 Authority Key Identifier:
                keyid:ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:08:fa:7d:82:1c:cb:2b:d2:e0:d1:84:92:10:67:d0:5f:f3:
         1e:c8:66:2d:1c:8b:26:55:2b:ee:9f:d6:d4:8b:e9:e4:00:09:
         cd:ca:41:70:92:b5:ea:ea:ff:12:dd:9c:44:fd:14:ec:ac:65:
         5d:86:87:14:5c:39:a6:f8:20:62:d3:64:4a:73:2d:97:e7:58:
         61:86:25:52:b2:ea:64:79:18:8b:38:71:c5:95:1f:41:cc:85:
         05:17:0b:1a:e8:62:82:c1:0f:43:03:56:a3:31:39:14:f8:40:
         c5:95:1b:63:65:45:c3:f2:31:4a:17:be:da:28:bd:a6:ec:97:
         42:63:ec:66:97:88:fa:27:d9:31:21:43:c2:73:19:4f:72:5f:
         9e:a7:03:7e:bb:44:e3:97:bc:61:af:eb:94:d5:66:18:9b:20:
         f2:93:2f:37:e9:15:90:8d:54:06:9a:d6:46:55:61:e9:bf:d9:
         f3:b0:c8:fe:ba:da:10:b9:e2:54:16:2f:6a:db:59:b3:7d:c7:
         40:ee:29:1f:67:01:ea:98:eb:94:71:e1:bb:32:d1:6e:a4:b7:
         fe:9e:c6:23:cb:1f:fd:37:c0:c4:75:20:a7:ed:02:6b:e8:0a:
         d3:6e:92:89:89:9f:0c:c2:bf:ac:98:d2:0c:75:85:99:0d:6e:
         78:0b:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----