Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft
File:                     Rv-nlEDFF-3brO06pg5fvL3GUC4.mft (raw, json)
Hash identifier:          pdtaOseO2B0hkMMJa/yWea0JZ+X56AHs+jArvAlzX0s=
Subject key identifier:   6E:EC:17:09:97:7F:E6:5A:D9:37:90:31:71:1A:72:F0:C2:2F:23:7E
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Certificate issuer:       /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial:       019000F4E6685C3361C2D5EF9BFCCD31A403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft
Manifest number:          11BB
Signing time:             Mon 10 Jun 2024 07:02:48 +0000
Manifest this update:     Mon 10 Jun 2024 07:02:48 +0000
Manifest next update:     Tue 11 Jun 2024 07:02:48 +0000
Files and hashes:         1: FTocBAKR9rZ8eGvJRXnUQniKyzg.roa (hash: 4YM4aETz9NdlD+M0h7DzkMhTN0X7MVJY7wPySoWXxRA=)
                          2: Rv-nlEDFF-3brO06pg5fvL3GUC4.crl (hash: P7wn4xNGxn78MNML4E2E4DIlGng+UWBOMIbhWGMQviM=)
                          3: VbKwOcc__FSMY3LhU1V4CmN-SFA.roa (hash: Teavwop/B+r6P4hh6hf4aRceqi+hc8bCtw0OcZmFFaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:00:f4:e6:68:5c:33:61:c2:d5:ef:9b:fc:cd:31:a4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
        Validity
            Not Before: Jun 10 07:02:48 2024 GMT
            Not After : Jun 11 07:02:48 2024 GMT
        Subject: CN=6eec1709977fe65ad9379031711a72f0c22f237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:f9:e6:e6:17:c8:ef:03:a4:14:2a:03:0b:
                    1a:69:3c:ad:b0:f6:59:9c:6d:d7:f9:c3:55:84:ef:
                    37:97:f6:67:aa:81:8b:fc:e5:21:60:8a:b3:20:9f:
                    9f:d2:77:61:31:a5:cb:66:ab:b0:d5:3e:4c:af:e8:
                    61:f6:05:6c:2d:08:f4:8b:70:bb:d2:c8:4b:59:43:
                    12:a9:d7:5c:a3:8f:b8:9d:f2:e2:17:66:5d:38:c0:
                    40:f3:15:98:f1:26:06:c1:92:4d:56:a2:db:fe:f1:
                    a9:6e:d0:86:1b:8b:c7:0d:d3:49:ea:db:37:c5:24:
                    04:6a:c5:a4:e8:06:90:31:f3:6d:eb:48:9d:68:61:
                    19:7c:97:cc:13:d1:6b:57:77:a9:6f:d7:71:23:51:
                    74:28:2e:9c:25:07:c0:b6:4b:fb:75:16:54:47:32:
                    52:f1:0c:e5:67:29:0c:3d:2d:14:f6:b2:19:c1:06:
                    a6:56:f6:37:0e:9a:23:26:9f:04:ec:03:b6:f2:c5:
                    68:ea:41:bc:5c:4b:b7:39:84:cf:37:39:25:60:fe:
                    6b:3c:08:42:33:2f:02:33:45:88:52:58:78:9f:0b:
                    cc:61:6a:9a:fb:40:58:c9:40:31:35:5c:d5:2b:22:
                    4f:95:1a:b4:cb:1c:a5:a7:b9:5a:4e:9d:8a:1f:75:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:17:09:97:7F:E6:5A:D9:37:90:31:71:1A:72:F0:C2:2F:23:7E
            X509v3 Authority Key Identifier:
                keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:98:03:b5:f8:5a:93:25:88:7b:b1:2b:01:50:f4:20:eb:
         1b:81:ba:a1:14:e4:0e:1b:0d:f1:38:db:56:77:7d:6f:02:db:
         b0:ed:0d:86:92:da:34:b8:3a:cb:8c:0a:b4:24:0a:c9:6d:39:
         72:53:69:d4:25:dd:4c:b7:c8:c2:c3:09:63:62:2a:99:9b:93:
         63:d7:28:13:70:d2:71:99:9e:b5:40:34:f8:88:89:a6:58:ea:
         b4:98:74:55:13:c5:18:ad:10:e9:5d:6d:f7:0b:fe:af:12:95:
         84:77:fc:aa:0e:a0:dd:e4:39:b6:9a:0a:57:79:84:23:d2:c8:
         e1:ae:af:2b:b4:27:b5:e2:4b:f4:dc:d6:b7:55:ff:51:94:b9:
         d3:8c:e9:74:0d:69:45:01:27:dc:da:4e:47:16:b9:31:d8:89:
         25:14:16:f0:4f:0d:19:47:9b:6e:97:f8:69:01:ad:dd:ca:53:
         f9:79:ff:b4:93:69:f3:2f:4b:b2:57:c3:b1:4a:68:00:93:a6:
         6b:ba:bf:1e:93:67:97:6f:aa:40:40:81:7c:06:8b:b1:30:59:
         bd:c2:cf:e7:f0:09:10:fc:41:f5:81:be:15:3b:5e:17:9a:87:
         9b:c5:9c:ea:67:55:ef:6f:fa:6c:4c:85:11:40:d1:be:27:5d:
         bb:bc:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----