Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
File:                     Bskt8sn6opFfxf61pCcBg0GfrvI.mft (raw, json)
Hash identifier:          GRzMlAT1d3B1DulgfFywEcyq54t07TZd5IKvGA37qNQ=
Subject key identifier:   41:46:9C:9C:70:07:0D:2D:04:7E:13:76:EE:7E:4C:C2:C1:72:6E:78
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Certificate issuer:       /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial:       0193264134335AC3BF94E77AD722BC9ADDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
Manifest number:          111A
Signing time:             Wed 13 Nov 2024 16:00:27 +0000
Manifest this update:     Wed 13 Nov 2024 16:00:27 +0000
Manifest next update:     Thu 14 Nov 2024 16:00:27 +0000
Files and hashes:         1: 9PdQPRnnZyiyxaFI3CXVAqLbtPo.roa (hash: 77bdVRJLI57StmPTeMBaNq7W14GnEAlDVEzircm5EEU=)
                          2: Bskt8sn6opFfxf61pCcBg0GfrvI.crl (hash: etOH1GNsOl1pi0uecmvPpy11UhwpoDVgM0dPRJhH0Hs=)
                          3: Dzjm-dRUCEwIJF7oGvd6oWViXeY.roa (hash: Gs3jTXU8pRchN+b1A0n39SNDur/2UAOqvJ43Yt+2l9Q=)
                          4: KnvhxTL7dpxo_BOyegXjlI3Uf7g.roa (hash: mxPJTf9+JvvTuMo9nE+wQn/cTfpeOOmk+MoHiCrfIbo=)
                          5: L9PRnb3hz2wMPcfyvw8fA7CD1vM.roa (hash: cr15ChGxbAppf+/EW+Zpuy3YgwXknAa2LX/OAQnYurA=)
                          6: ZbE_ouSxhARCro-5cPFYIF61h-0.roa (hash: 67kHqs8lVq+cOtyt3VAlKd8PVh34Eva1hX2lK1P+gzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:41:34:33:5a:c3:bf:94:e7:7a:d7:22:bc:9a:dd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
        Validity
            Not Before: Nov 13 16:00:27 2024 GMT
            Not After : Nov 14 16:00:27 2024 GMT
        Subject: CN=41469c9c70070d2d047e1376ee7e4cc2c1726e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:ec:d0:c7:d5:87:f1:9c:d1:42:1f:8e:a8:
                    2d:e3:c4:43:cf:c5:47:96:0b:46:6a:d9:3c:77:1f:
                    ed:86:36:bc:72:1d:21:4e:43:11:3d:89:3a:96:16:
                    e2:19:52:3d:1f:ce:d3:46:2f:f9:df:8f:6f:70:0a:
                    6a:fc:3b:70:b2:a2:37:b3:45:67:f8:d8:2d:ee:cd:
                    cb:45:77:6d:f4:fd:6f:a7:05:11:3c:c9:f3:fc:b2:
                    79:6f:ab:32:44:ac:04:76:6a:b9:da:a9:ba:9d:7f:
                    67:8d:ca:13:3e:08:47:b7:d8:93:e9:6a:91:c7:2a:
                    b4:41:40:e1:97:9d:cf:d9:1d:f5:bc:4c:c8:c3:8f:
                    fe:00:2d:dc:93:74:f1:9a:51:98:97:8c:98:2a:1a:
                    40:af:3a:e4:52:47:09:a0:dd:b2:92:f8:dd:28:31:
                    c7:02:2a:4a:81:81:d5:9b:1e:0b:fa:53:bd:08:66:
                    e7:73:99:53:90:01:87:7f:ca:32:25:b6:07:af:2c:
                    0c:ad:41:ba:57:ba:8f:1f:20:02:0b:2d:c6:6a:e3:
                    53:0b:a5:0d:f5:77:8e:02:a5:b7:f0:21:bd:58:b6:
                    e8:8c:f3:01:a9:bc:92:2c:3f:47:2b:92:e1:23:da:
                    7c:b5:52:72:81:d1:2a:57:85:9c:82:eb:c2:c4:75:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:46:9C:9C:70:07:0D:2D:04:7E:13:76:EE:7E:4C:C2:C1:72:6E:78
            X509v3 Authority Key Identifier:
                keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:44:4d:2c:5b:c4:68:fd:ec:3a:5f:5a:c6:b8:0c:5e:e6:
         72:b5:a1:1d:d0:e3:58:b7:7b:6a:3f:a8:5e:56:82:01:24:bb:
         49:77:27:6f:df:de:71:36:c0:21:86:73:ad:d0:30:bb:2a:41:
         ea:6a:e6:14:3e:9d:45:5a:2d:68:0a:69:11:32:fe:f2:08:32:
         53:fe:51:12:e3:6f:0d:ae:6e:5e:fd:8c:87:5c:80:d2:09:d6:
         e7:e0:c5:be:54:29:da:ca:15:02:12:eb:aa:9a:8b:e1:b1:9e:
         d1:0d:d4:ea:f0:ef:cd:1c:05:80:43:7c:9e:d2:2b:53:d7:a7:
         31:9f:e0:11:ea:04:c5:4a:d2:a7:02:b0:a5:bc:10:2e:87:a1:
         81:d8:62:0a:45:13:02:6a:03:81:12:9c:7a:aa:6a:d0:a6:80:
         e6:a8:a1:ee:29:e1:32:9c:82:c6:32:d3:e4:3a:04:24:80:c4:
         34:37:33:dd:a8:2a:4f:dc:8e:17:08:fb:1b:69:96:52:d9:11:
         1f:fa:94:29:17:0f:f9:3a:2b:79:f5:62:69:39:0a:00:2e:7d:
         d0:a9:ea:4b:07:58:49:bd:c7:5a:26:af:09:5c:c8:1b:a0:dd:
         d8:7c:bc:db:cf:13:de:c4:8b:17:3e:e9:a6:74:7a:ad:c6:6d:
         c4:bc:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----