Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.mft
File:                     H-juh4U0Bs2NBLqOOb96Uf-4o7w.mft (raw, json)
Hash identifier:          doWM0Po8h5XjwUGRT40nHN5mOzQfE1QE31+5WurAH2w=
Subject key identifier:   78:C6:F9:DB:79:2A:2F:8A:5F:73:C2:55:AD:5E:CE:34:7A:0C:65:F0
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Certificate issuer:       /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial:       018F731D192CD172886FCD7920420CC91AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.mft
Manifest number:          1170
Signing time:             Mon 13 May 2024 18:00:37 +0000
Manifest this update:     Mon 13 May 2024 18:00:37 +0000
Manifest next update:     Tue 14 May 2024 18:00:37 +0000
Files and hashes:         1: 4VXLHyEV7AZWdYKCc9ym1r5AIT8.roa (hash: v07yiXNQL94Tr2GOt+3mCnvGqcrZa7dItTzCUJul3kk=)
                          2: H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl (hash: Z6wpFJQvCVPiKLC6sSB4L/hi30844BUGBr5krY22Uk4=)
                          3: PMMBSnJoRhCbNKWTkju3WVEtG2k.roa (hash: zy/IB0/VOMtghncIpHK3jpa51Bz899XIEXVygsAg/1I=)
                          4: WZovCE7yIV_yXiYNdBzJBdDh_8A.roa (hash: Y8cxlwB2cHflKTE7nwym8MrTFqUyii0ToNUi63xKIiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:1d:19:2c:d1:72:88:6f:cd:79:20:42:0c:c9:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
        Validity
            Not Before: May 13 18:00:37 2024 GMT
            Not After : May 14 18:00:37 2024 GMT
        Subject: CN=78c6f9db792a2f8a5f73c255ad5ece347a0c65f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:45:d9:1f:aa:09:30:d8:10:df:c6:1d:ff:56:
                    f6:94:0a:14:04:a7:66:d9:e7:8d:58:b1:5d:b6:77:
                    da:c1:0f:11:3d:19:d0:de:c2:b4:92:47:47:6a:20:
                    c0:fc:3b:84:db:57:be:ad:dc:c8:f9:2b:61:20:b3:
                    cb:68:b9:17:c9:f9:35:2a:7d:fd:81:53:c1:0d:d0:
                    48:2a:70:f5:a5:3a:1c:72:c6:d2:a4:db:0e:8c:00:
                    84:89:b2:dc:3f:4a:b7:7a:37:1c:53:54:f5:43:6b:
                    bb:d1:39:42:bc:66:f0:93:ed:b0:11:d3:77:f9:2f:
                    0e:bb:2b:ca:d3:43:40:a4:ea:f7:3e:10:f0:38:fd:
                    b7:95:3f:44:3c:54:7c:d1:1b:a6:f3:81:77:a0:4b:
                    8d:da:e7:30:8d:57:40:06:c2:7b:0e:d9:40:d9:98:
                    c0:a2:81:10:5e:d9:b4:cc:49:36:c7:db:a7:ab:99:
                    a2:a6:53:47:27:22:76:03:fc:58:24:87:73:31:9c:
                    18:1a:aa:43:e8:51:5a:2f:44:96:7d:0a:71:fe:f6:
                    82:19:7d:2c:6e:0b:9d:01:04:eb:d9:f4:76:b0:30:
                    2b:7b:9d:90:4c:af:3c:0b:20:e3:24:97:f7:d2:91:
                    19:99:44:51:28:64:7e:4b:9b:b3:37:98:32:e4:96:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:F9:DB:79:2A:2F:8A:5F:73:C2:55:AD:5E:CE:34:7A:0C:65:F0
            X509v3 Authority Key Identifier:
                keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:a3:df:ee:67:75:82:28:a7:c5:cf:8e:a8:8b:fa:cb:0b:
         42:df:93:0f:b6:f7:b1:45:56:b1:71:3c:7e:77:7c:ab:f5:84:
         88:86:cb:e9:24:b8:fa:00:c5:29:14:a2:0a:8e:42:83:e8:cf:
         87:e7:b3:c9:53:e8:39:25:b2:84:b5:a5:aa:66:27:fb:78:7d:
         0a:c8:d2:08:96:58:6f:f4:42:69:83:60:a1:5b:5d:c2:46:ba:
         fb:9e:bb:78:5d:eb:c7:b9:e7:1d:b1:f8:4e:18:c2:83:8a:c8:
         29:79:99:ec:90:00:a4:65:84:79:e4:7b:8c:32:f0:b7:a1:96:
         55:17:ba:69:a7:62:35:ae:5f:fb:b9:99:1e:3c:ba:30:7f:b8:
         6a:ec:bf:10:ab:64:e8:ba:6b:dc:d4:54:52:f7:66:bc:7b:5a:
         93:4b:56:c8:96:2a:be:48:6f:fc:b0:73:b7:1a:3d:c8:d6:0f:
         1d:fc:71:84:da:4a:fb:f4:e9:4b:27:11:a8:63:c9:65:72:1e:
         05:2f:1f:f7:d2:88:2b:23:88:3b:8d:3d:58:37:05:d7:f9:23:
         14:b1:8c:70:ff:42:b6:a6:01:c2:a2:0c:1a:70:9c:d9:b8:ff:
         bd:04:62:0a:7d:77:be:5a:a7:e0:1c:b2:eb:26:d8:1e:b9:60:
         83:15:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----