Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.mft
File:                     I_h6oY3aal1Ir4A5CygngIz-8oU.mft (raw, json)
Hash identifier:          HeY/dscP6QeuqCEfwycVLIy7f17h84Il2GWdlpS5OLo=
Subject key identifier:   29:E9:CA:77:F9:F5:2A:55:6F:BD:8E:8E:1B:B8:D2:CC:BC:A9:88:D9
Authority key identifier: 23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85
Certificate issuer:       /CN=23f87aa18dda6a5d48af80390b2827808cfef285
Certificate serial:       018F6F0A602069C0FD87656B511D724DAAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.mft
Manifest number:          0939
Signing time:             Sun 12 May 2024 23:01:41 +0000
Manifest this update:     Sun 12 May 2024 23:01:41 +0000
Manifest next update:     Mon 13 May 2024 23:01:41 +0000
Files and hashes:         1: I_h6oY3aal1Ir4A5CygngIz-8oU.crl (hash: UQRLld8Zxntgk6AOYCa8pJ7k+tPHgJzciM6nwc7ecoY=)
                          2: YrjNRV-ZRghURyJogSrJkXbt02A.roa (hash: BSTzv8C7wzBvxDCTMFe1OEsi9taFqBIcVihsQqfWZrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6f:0a:60:20:69:c0:fd:87:65:6b:51:1d:72:4d:aa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f87aa18dda6a5d48af80390b2827808cfef285
        Validity
            Not Before: May 12 23:01:41 2024 GMT
            Not After : May 13 23:01:41 2024 GMT
        Subject: CN=29e9ca77f9f52a556fbd8e8e1bb8d2ccbca988d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:eb:62:86:92:de:a8:2e:a9:68:f9:b0:53:
                    e0:7a:92:ea:87:2c:25:cc:5d:63:3e:80:f8:3d:be:
                    64:13:90:1d:89:49:99:6a:03:e5:cd:42:ea:bf:28:
                    e9:f8:4d:b5:83:c0:ea:9d:3b:3a:01:f5:ae:28:9c:
                    6a:87:89:3d:0c:15:9e:6b:eb:98:2a:82:e5:7c:14:
                    df:84:13:0a:8a:7b:67:3a:82:e4:df:30:5c:33:31:
                    02:eb:8f:e9:e6:92:9f:31:af:40:70:b6:4e:cb:f7:
                    bb:f1:b7:7f:c5:cb:4e:30:25:45:c1:18:91:ff:f6:
                    78:de:a1:f4:51:5d:7a:be:9e:f8:cf:31:f3:d6:3a:
                    d3:9b:7a:6c:7a:d2:05:22:db:f8:86:5f:e2:01:e0:
                    e1:45:5e:7f:82:31:fc:6d:2a:c9:86:28:fe:13:bc:
                    50:ab:04:81:1b:d0:a3:5d:f7:de:66:75:37:d8:2f:
                    27:d2:08:1f:83:9e:3b:a7:a1:ec:a6:99:4d:9e:1e:
                    7e:3d:2d:ea:31:75:66:83:c5:10:8b:c1:0b:cc:71:
                    71:a2:49:57:77:53:ee:ba:12:2a:d5:43:2c:91:ce:
                    be:ab:65:3d:72:55:32:25:f3:b7:32:6a:6c:50:45:
                    15:2e:da:a1:8e:c6:aa:82:dd:c7:cc:77:fc:5c:97:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:CA:77:F9:F5:2A:55:6F:BD:8E:8E:1B:B8:D2:CC:BC:A9:88:D9
            X509v3 Authority Key Identifier:
                keyid:23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:ce:ca:04:62:b7:51:6b:a9:e6:b4:ba:64:79:7a:4d:7a:
         44:4a:37:00:b2:71:81:5c:c0:c5:55:cf:96:58:8a:1f:ae:e9:
         25:6c:88:3d:6b:25:34:e5:e6:89:31:a5:c8:f7:79:8f:9c:a0:
         dc:12:0e:32:8f:c8:1c:f9:7b:65:5a:07:0f:72:66:af:17:34:
         dd:5c:98:ad:ad:e6:62:ab:b4:38:f3:77:19:e6:f7:5b:c7:b8:
         68:53:13:01:ad:86:bc:9c:7e:d8:74:e1:f5:b1:48:2f:7c:e4:
         29:4c:6e:3c:8c:78:5f:f4:58:32:a2:fd:28:78:21:34:12:d0:
         c1:00:f3:07:a4:20:9b:c6:26:0e:bf:94:cc:68:ba:ca:45:f5:
         64:a6:63:16:9a:fc:e7:66:d0:15:42:17:09:4e:48:d1:05:77:
         2d:67:c3:1b:0c:a3:1f:a3:93:31:ea:6c:89:d7:c1:9d:13:98:
         db:65:f9:01:88:54:a7:85:e3:c2:f2:28:12:d4:68:a9:ba:3d:
         a2:9b:64:5f:dd:f1:28:09:86:66:6a:a6:05:14:d5:35:b5:8e:
         6e:01:b0:07:74:20:ba:f2:4b:69:90:6c:fe:ca:5d:91:05:25:
         7c:67:a8:fc:75:c6:e7:5c:07:cf:48:e6:8a:00:81:06:1d:4c:
         8b:67:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----