Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft
File:                     VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft (raw, json)
Hash identifier:          XvSqi1vgN7+xLfqVKVwelLmEmp83/Qx3rlD9W2Et45Y=
Subject key identifier:   C5:F0:5C:14:9E:86:2D:AB:F3:BE:F6:0A:16:AE:48:42:86:36:4F:BB
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Certificate issuer:       /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial:       018F6E9C6E94748A13081AC412D49C101421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft
Manifest number:          098C
Signing time:             Sun 12 May 2024 21:01:36 +0000
Manifest this update:     Sun 12 May 2024 21:01:36 +0000
Manifest next update:     Mon 13 May 2024 21:01:36 +0000
Files and hashes:         1: 2gLRuyxYSXtoQui8qjTmt13v5rI.roa (hash: +HbqJeEssZREVoWbEve6QLL76H2HBf3QnKGXyTwTtYw=)
                          2: Q2TUqBhojjp8V6kz3QwxHrLArvw.roa (hash: ONjpQnVi7QRCZO+QFT9Gb6MGQqBRgxITSSNMeXnOe6Q=)
                          3: VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl (hash: nUcP5oqd3er4uffiCcaE/SzhBSdbTvgyX9bXzyS7BG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6e:9c:6e:94:74:8a:13:08:1a:c4:12:d4:9c:10:14:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
        Validity
            Not Before: May 12 21:01:36 2024 GMT
            Not After : May 13 21:01:36 2024 GMT
        Subject: CN=c5f05c149e862dabf3bef60a16ae484286364fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:0c:88:68:21:03:d7:40:de:c2:54:67:d4:
                    95:92:1a:ce:81:1e:35:90:15:36:8e:1a:eb:8a:24:
                    3c:f0:9f:25:70:c4:f1:ea:b7:dd:83:05:5f:7e:88:
                    fd:81:3a:bb:3e:39:1c:3d:ff:29:65:d5:94:b8:05:
                    65:28:18:aa:bf:1a:07:3e:69:17:22:8e:e3:5f:d7:
                    07:7f:51:5f:26:1a:ba:88:39:52:55:32:67:d2:24:
                    ba:3a:b8:32:73:d5:65:3d:e6:25:ec:28:6f:3f:59:
                    d1:ca:bc:eb:d9:e9:e5:63:61:90:d7:e0:dd:94:a9:
                    51:52:ef:fd:c5:05:8e:c8:e9:85:fe:a7:48:38:ae:
                    b5:77:fd:e7:e6:7e:de:96:fc:9a:0f:9f:9d:3b:26:
                    bc:22:d5:51:82:69:33:10:4a:17:e3:c9:43:2b:5d:
                    79:65:fc:4e:07:70:f6:d7:69:92:01:46:35:9b:9f:
                    b2:83:a7:b5:39:b3:dd:10:60:6b:11:31:9d:b3:d6:
                    32:3f:9a:d4:d4:e3:2f:31:28:67:26:d8:62:0a:c4:
                    1f:ce:b0:c6:e4:52:20:59:6c:dc:f9:fa:a0:34:0d:
                    a4:07:c6:a1:0c:c3:59:cc:73:1d:a7:1f:7a:85:d5:
                    3c:ec:eb:2d:4b:1a:22:44:a3:9c:50:eb:06:c1:0d:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F0:5C:14:9E:86:2D:AB:F3:BE:F6:0A:16:AE:48:42:86:36:4F:BB
            X509v3 Authority Key Identifier:
                keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b7:62:14:fb:98:84:42:e8:fc:e7:93:28:18:3f:d9:c2:73:
         f8:cf:a3:56:b0:89:66:a6:72:27:f9:8d:72:36:d7:b1:c6:0a:
         d8:28:01:dc:76:97:fe:fd:e2:d1:74:c0:02:7b:c4:58:94:30:
         f5:7c:0f:8a:ec:69:c4:df:01:94:20:ee:46:ad:0e:02:e0:26:
         b1:66:40:9d:99:cb:d0:f0:54:95:bf:1c:36:2a:e7:18:e1:91:
         d0:f0:96:7a:9b:dd:d0:94:94:7f:70:d9:06:d7:f3:34:a8:b4:
         2c:fb:be:96:9c:b9:7e:17:a3:8e:91:87:e1:13:d0:c6:f4:6e:
         ed:c7:99:ad:c2:53:10:d0:a5:eb:3a:da:36:f7:0e:fd:91:f7:
         1f:36:64:bd:83:d4:db:b8:0e:b9:7c:bf:2b:c1:46:e1:e0:25:
         45:b1:7a:2a:e6:2a:42:24:0a:db:0d:a5:b7:e1:2f:8d:0e:70:
         1f:26:e3:bd:e8:98:63:db:2d:e6:b5:ba:bd:49:66:5c:72:c5:
         c2:42:04:24:13:63:0d:fa:4d:25:c0:06:16:e6:b7:1a:9f:18:
         9e:7b:ef:11:48:34:c2:c5:53:c2:e5:01:57:a8:25:f6:86:e0:
         a0:ed:68:1a:2e:c0:24:35:2b:3f:32:7d:1a:91:a1:ca:b4:46:
         ca:9e:bc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----