Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eec97c-8491-476c-9d24-877fc051ecbf/1/rZ2rwIwF8avMqCK7KKmxudoEGPc.mft
File:                     rZ2rwIwF8avMqCK7KKmxudoEGPc.mft (raw, json)
Hash identifier:          huQea+ePo2dLKL46povwKCa1/Wggce1Er6TDQoYKnQM=
Subject key identifier:   E4:39:C2:13:84:3D:0B:C1:A7:95:12:83:B2:12:B0:85:D9:23:4C:11
Authority key identifier: AD:9D:AB:C0:8C:05:F1:AB:CC:A8:22:BB:28:A9:B1:B9:DA:04:18:F7
Certificate issuer:       /CN=ad9dabc08c05f1abcca822bb28a9b1b9da0418f7
Certificate serial:       018EC54EE4BBA5112C99FFD5A192A7CAA335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ2rwIwF8avMqCK7KKmxudoEGPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eec97c-8491-476c-9d24-877fc051ecbf/1/rZ2rwIwF8avMqCK7KKmxudoEGPc.mft
Manifest number:          06DA
Signing time:             Wed 10 Apr 2024 00:01:05 +0000
Manifest this update:     Wed 10 Apr 2024 00:01:05 +0000
Manifest next update:     Thu 11 Apr 2024 00:01:05 +0000
Files and hashes:         1: _VOgii-02j_3rDLVbb6pwMzl1XY.roa (hash: yE4k5sgYYen5HEijYUYpcLmVLLEPJmeKhF5TquIt/98=)
                          2: rZ2rwIwF8avMqCK7KKmxudoEGPc.crl (hash: XAWm0K7pDCPSmWajmn8gPe31IfL8raJzDKVtpYZTFGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c5:4e:e4:bb:a5:11:2c:99:ff:d5:a1:92:a7:ca:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9dabc08c05f1abcca822bb28a9b1b9da0418f7
        Validity
            Not Before: Apr 10 00:01:05 2024 GMT
            Not After : Apr 11 00:01:05 2024 GMT
        Subject: CN=e439c213843d0bc1a7951283b212b085d9234c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:b9:45:db:ba:35:5a:1a:09:02:8f:c4:ab:
                    14:d5:ca:3c:6d:7f:4b:e1:c9:64:b2:64:f2:af:48:
                    75:94:83:6c:91:2a:cb:5c:0e:5f:f0:b5:52:78:27:
                    db:af:57:e3:cb:95:f5:fd:c3:1e:df:27:c4:5d:20:
                    80:e3:32:c7:c0:7c:30:45:cb:69:45:52:01:a2:5f:
                    36:21:d5:68:8b:c5:a3:13:52:cd:75:0b:5e:b1:de:
                    b4:18:20:21:d4:af:90:d8:9f:88:18:39:0d:73:4f:
                    29:3f:e4:46:01:eb:dd:b3:0e:41:63:8a:80:88:8a:
                    f4:93:df:8d:86:f3:02:3f:fc:3c:b8:a7:d8:1e:c8:
                    f3:c3:48:5e:b5:9a:18:c1:5c:e8:14:c1:f1:42:24:
                    28:da:56:bb:b3:a9:9f:43:e1:65:0b:ea:23:a5:e3:
                    c1:92:ce:11:18:15:f1:9b:65:3e:7d:65:d4:4a:78:
                    7e:bb:b5:63:8d:84:b9:93:a1:8f:07:30:21:12:5f:
                    2a:38:a4:eb:ae:41:d2:37:7c:b7:13:9e:0c:ff:7c:
                    9c:a0:64:d1:36:a7:33:0c:dc:b1:d9:4d:c7:21:0a:
                    5f:63:c8:5d:84:62:ab:c9:f3:26:e7:ca:3d:67:72:
                    55:99:9d:15:40:a1:95:2e:a7:ea:c9:08:15:02:63:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:C2:13:84:3D:0B:C1:A7:95:12:83:B2:12:B0:85:D9:23:4C:11
            X509v3 Authority Key Identifier:
                keyid:AD:9D:AB:C0:8C:05:F1:AB:CC:A8:22:BB:28:A9:B1:B9:DA:04:18:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ2rwIwF8avMqCK7KKmxudoEGPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eec97c-8491-476c-9d24-877fc051ecbf/1/rZ2rwIwF8avMqCK7KKmxudoEGPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eec97c-8491-476c-9d24-877fc051ecbf/1/rZ2rwIwF8avMqCK7KKmxudoEGPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:db:39:05:71:7a:09:cc:c8:30:65:46:9d:97:9c:42:14:
         b2:c0:66:78:34:ac:cd:33:ef:51:65:e7:b7:bc:7d:e7:88:65:
         52:11:a2:2f:c9:61:b3:21:25:57:aa:f3:17:bb:d2:4b:d4:37:
         47:0b:15:cb:08:6b:61:b1:a1:8a:6e:94:a2:09:76:79:8d:82:
         92:b7:5e:d4:e6:bc:c3:54:14:15:ec:4a:1a:71:67:1b:06:97:
         9f:92:91:d1:ed:16:e0:e6:5d:b0:b6:2f:df:5e:4a:56:2c:35:
         5e:01:ff:20:7c:c0:a6:18:03:bb:78:b8:c1:6c:79:6f:ad:23:
         c0:a1:98:8e:a1:ed:b1:45:95:89:01:21:1b:73:e8:01:b3:1c:
         3e:51:7b:51:b6:2a:dc:40:14:cd:01:c9:ee:a2:ef:0a:05:0a:
         33:8c:c0:bd:94:02:c2:0d:09:bd:cc:5c:c0:ff:e0:52:e2:db:
         85:29:23:e7:1b:1a:c8:52:2c:09:d6:f8:90:cc:63:b5:5a:de:
         de:a1:a4:ff:0e:fe:98:cd:6a:a4:df:a1:64:44:21:94:c7:be:
         07:35:38:88:30:70:c3:01:ac:8b:64:86:73:40:81:5e:02:b3:
         54:7a:fc:0b:e2:92:f4:9e:f4:a2:90:f2:83:f9:fc:54:20:07:
         45:c5:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----