Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft
File:                     unlm7P2LwtMYM_cK-6T3-KFbJKM.mft (raw, json)
Hash identifier:          NFZ13o+6/d5ULIUiRFZ3ihQGWFzkH8MQyqH26gjGOpM=
Subject key identifier:   1F:CC:01:A6:D7:24:71:90:70:0C:B0:19:19:2D:37:10:51:79:EC:BE
Authority key identifier: BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
Certificate issuer:       /CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Certificate serial:       0192305A8761A09F7F65038DDE57468022EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft
Manifest number:          12E0
Signing time:             Thu 26 Sep 2024 22:01:32 +0000
Manifest this update:     Thu 26 Sep 2024 22:01:32 +0000
Manifest next update:     Fri 27 Sep 2024 22:01:32 +0000
Files and hashes:         1: QKsiq8ZNySBN5ZphIC-SA_YBbpc.roa (hash: ZH0prVfAr9Y+qTMaGI+5QiwUeqC9ryMkLoAhYe5hlQs=)
                          2: unlm7P2LwtMYM_cK-6T3-KFbJKM.crl (hash: svNoX7IgXmMus4dIm80Ljciihh/DvY6F8JAyjCbufV4=)
                          3: yWHl0T05ztA5PjD93be5uRR4HCs.roa (hash: P4svxr/s4QEZooLk1yKK7suKLVxdfTQ1UoAx56+DRPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:5a:87:61:a0:9f:7f:65:03:8d:de:57:46:80:22:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
        Validity
            Not Before: Sep 26 22:01:32 2024 GMT
            Not After : Sep 27 22:01:32 2024 GMT
        Subject: CN=1fcc01a6d7247190700cb019192d37105179ecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:da:cf:34:0b:f2:fa:7c:a2:86:22:f3:51:
                    0e:54:66:f4:66:01:d8:13:0c:62:26:ca:99:29:d3:
                    5b:02:48:40:87:4b:10:b0:0c:69:ab:b3:8e:81:c8:
                    60:df:0f:b4:3c:e6:d6:8a:f8:35:65:12:a9:16:d8:
                    3f:63:d4:d0:46:21:b9:6d:95:6a:5b:46:90:18:fc:
                    45:7a:af:00:d5:2f:a6:3f:71:0b:06:37:16:fe:7b:
                    fb:53:07:cc:75:61:68:c8:08:09:9f:f1:bc:4c:ac:
                    b8:be:42:c1:51:a1:b5:7b:5f:89:93:f0:a1:9c:20:
                    b5:6e:53:1f:18:bd:cb:01:da:ea:bb:86:b0:5e:d5:
                    b6:70:d5:50:19:ab:3f:51:28:26:e9:c2:d8:4e:ce:
                    0b:d7:e0:89:d5:2a:5f:0b:20:28:89:9b:ad:1b:bc:
                    24:02:07:75:f6:b6:c7:e6:b1:09:c7:37:97:b7:0d:
                    0b:dc:66:62:bf:4b:ba:4a:65:53:ca:5e:96:13:8f:
                    0b:31:25:3b:46:68:a1:78:5b:ff:20:2d:88:93:ec:
                    e3:c2:07:69:a0:3c:61:ab:1d:be:9c:c5:b0:bf:df:
                    86:15:51:46:27:5f:4f:b2:ca:b8:66:02:89:9e:09:
                    4c:c1:94:6e:00:79:11:be:a5:f1:15:4b:00:ba:ac:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:01:A6:D7:24:71:90:70:0C:B0:19:19:2D:37:10:51:79:EC:BE
            X509v3 Authority Key Identifier:
                keyid:BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:40:9a:7e:6e:47:c3:9a:b3:c7:d2:72:e3:8f:2a:4c:e3:60:
         e1:7f:d6:27:8b:80:b8:4f:de:a8:9b:16:04:ff:99:05:20:7e:
         be:bc:46:f1:72:3b:ed:3d:c4:95:d4:fe:f3:44:06:e0:74:e2:
         31:f4:97:3c:f8:57:72:01:7b:6d:01:a6:2f:7b:ec:d1:18:c2:
         88:e9:e5:82:bd:85:8f:2d:ff:ca:f3:4c:d3:f1:85:e4:dc:88:
         82:d1:f9:c2:ff:ab:c4:ba:9e:31:c1:f8:35:17:27:58:74:0e:
         fa:3b:51:98:00:c8:7a:99:ab:ad:be:42:79:3f:98:07:a7:f6:
         fa:8a:b7:e7:d4:84:38:31:c6:e6:d6:e7:3f:cb:78:e4:c9:b9:
         5e:18:5c:68:83:42:53:e7:13:40:b7:99:75:88:4b:6a:4c:93:
         c4:6e:37:bf:67:6d:36:d4:8e:ab:10:22:f1:71:57:15:96:d5:
         e7:f7:e8:72:8f:a0:63:fc:da:4f:df:cb:5d:e4:3d:e3:90:02:
         5a:3c:be:7a:62:a3:b9:30:14:9b:6f:9d:78:06:99:f1:12:23:
         26:f1:1f:a0:c7:19:38:ab:e8:44:76:1d:e9:47:3a:3b:77:64:
         e0:d8:81:87:80:ff:a4:29:0f:6a:ee:df:d2:87:9a:21:3b:82:
         c9:64:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----