Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
File:                     H5UQYGrZTE98emPlwewmxA-0qog.mft (raw, json)
Hash identifier:          d5UDJfIT53VeSGi2WN9VDWYeLThP1Bt9lr9/+lMGrkk=
Subject key identifier:   6A:68:DE:1E:81:FC:42:B0:B5:FA:08:CC:F4:69:2E:0A:B3:CF:40:62
Authority key identifier: 1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88
Certificate issuer:       /CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
Certificate serial:       01922ED96EFB732BB6D2E3F3C07D772074A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
Manifest number:          0106
Signing time:             Thu 26 Sep 2024 15:00:54 +0000
Manifest this update:     Thu 26 Sep 2024 15:00:54 +0000
Manifest next update:     Fri 27 Sep 2024 15:00:54 +0000
Files and hashes:         1: H5UQYGrZTE98emPlwewmxA-0qog.crl (hash: mvZkmW9imiT8Y+w4+JoPEAcZiUl2nOIgQlNfzLmliQ0=)
                          2: dDGfxJgQDEhWRqruzToq6X8nEuU.roa (hash: JnU1eCYRmKhegJDAs13ooRBV55pedHqUqA7hj/wwMwM=)
                          3: j5MNdfuNQQMbOsQgGZ33Y_QQ1yc.roa (hash: LccVt7voulS6je2wPUOnuLmm4sAJTWJKDhvfQsLRdc4=)
                          4: yaPKdn8WHVdLbesMuDAkH_fxy50.roa (hash: jcOeVos1WxY9QyFu0f/q9CwSDmvmiCv/vo5FiDzKfuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2e:d9:6e:fb:73:2b:b6:d2:e3:f3:c0:7d:77:20:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
        Validity
            Not Before: Sep 26 15:00:54 2024 GMT
            Not After : Sep 27 15:00:54 2024 GMT
        Subject: CN=6a68de1e81fc42b0b5fa08ccf4692e0ab3cf4062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:6c:ca:db:12:d3:40:c6:28:c2:40:d7:06:
                    07:da:1c:49:40:ad:83:58:39:28:af:c1:17:5a:60:
                    c7:2e:44:03:fc:f0:5e:7a:78:8d:9a:7e:10:56:cb:
                    af:61:e7:68:40:38:45:b5:3a:4a:07:61:ae:aa:9a:
                    b5:67:8f:12:2b:3d:48:88:56:3a:d8:6a:cf:36:e3:
                    9c:dc:32:cb:30:5b:54:a8:46:21:f1:86:91:c3:ad:
                    70:f1:56:2f:5a:ee:35:8c:8f:23:31:52:7f:be:de:
                    b0:a4:0f:eb:68:1d:3e:e8:5c:13:db:67:24:47:7a:
                    ed:76:1b:a4:fb:8d:5a:b0:66:39:1a:54:68:1d:0c:
                    fc:20:a7:4d:b1:3d:34:ee:3c:61:0f:22:26:ac:7e:
                    9f:06:27:f3:2c:e4:f0:7e:76:fc:87:cc:1f:72:ee:
                    f5:bb:43:89:07:04:fc:c5:b3:21:c0:da:50:7f:18:
                    f8:b5:10:de:a2:55:41:de:97:8a:82:b8:30:6d:09:
                    d2:ce:5d:c4:b1:64:68:bf:35:13:ba:52:aa:25:4c:
                    b9:06:cb:63:e4:9c:0d:55:ca:1b:e3:ec:44:a9:48:
                    fc:57:7b:6b:0d:36:ab:d3:1a:2a:3a:6b:62:49:70:
                    70:fa:c1:03:4d:8b:86:73:b6:d1:e5:d0:d5:1a:66:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:DE:1E:81:FC:42:B0:B5:FA:08:CC:F4:69:2E:0A:B3:CF:40:62
            X509v3 Authority Key Identifier:
                keyid:1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:73:41:e4:ac:af:c4:da:f3:34:bb:2c:26:2d:b2:bb:47:
         e5:31:fd:a1:45:d6:61:52:fd:32:e4:76:06:ad:0b:16:a6:03:
         8f:95:fd:0f:3a:7d:42:d3:90:36:25:6a:a4:b7:77:e9:1b:c5:
         b3:9e:f2:86:78:c9:83:0c:3f:0e:db:38:65:14:24:81:19:6f:
         df:37:eb:68:e4:40:8d:02:fb:ec:c3:4f:1c:6d:2b:b9:56:79:
         fb:00:36:3a:ff:2a:e5:9e:b8:e9:d0:40:89:1b:b2:56:3e:9e:
         9d:c5:e0:66:dd:a9:7c:c5:bc:08:67:2e:ee:c8:5b:4b:d7:9a:
         3a:99:d4:a7:e7:12:07:82:e3:eb:d3:43:c2:ae:b2:70:bb:d2:
         29:76:5b:7a:fb:0f:35:0e:5e:77:37:7c:a9:26:28:23:20:f6:
         8d:c5:c9:c7:32:5c:23:19:49:a3:66:68:d7:fa:c0:09:c8:84:
         52:b6:b5:5d:b4:45:55:de:b3:2d:05:9a:e2:09:f0:8d:28:f6:
         f2:db:78:ba:ca:68:bf:92:bc:23:1c:50:81:0b:6c:4c:7a:a1:
         97:3d:92:f5:39:df:d2:60:3e:62:b0:18:58:fb:86:ad:1b:7e:
         4d:13:36:b0:1c:5e:df:ce:b6:f8:46:36:6e:97:c0:c0:e0:46:
         c8:36:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----