Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.mft
File:                     x0636jUjjQKZfELrV0o4ow5dAOc.mft (raw, json)
Hash identifier:          RlrcOO+bif9SevBVjzPGg3eTrMYmqnxpoKTp3qXqgC4=
Subject key identifier:   30:10:24:97:6D:ED:DE:E6:E9:AB:AB:4C:37:40:7A:67:41:37:8B:04
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Certificate issuer:       /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial:       018F720B2ADB0995156538D678CD18DF9A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.mft
Manifest number:          0BFF
Signing time:             Mon 13 May 2024 13:01:25 +0000
Manifest this update:     Mon 13 May 2024 13:01:25 +0000
Manifest next update:     Tue 14 May 2024 13:01:25 +0000
Files and hashes:         1: SpkX7uCa6vlWdj6zr-wQ78Oes4s.roa (hash: TKNnCX9wJ6m28aRWDlbyarL6UZDCG4AYvfYCldjh3pw=)
                          2: YKpIbjQjCCsZqiHpkBH41dInsLA.roa (hash: 90qNzwVdGwumShzZjUAaacAO5oHJIP5507f9Mtcj1Lg=)
                          3: gRGtwC6wQkqSwZdfgIJJyc_T9vQ.roa (hash: pR773tohe1zLoB1TDXOvywtcglMP3QvT0b3m6G7/FKM=)
                          4: iLKBUPqJy6ZtVLEvmymXKZgp-SA.roa (hash: uznOSMabPfq0UdlLe0acHN/aZuOeu2Scr9fEjakuVUA=)
                          5: x0636jUjjQKZfELrV0o4ow5dAOc.crl (hash: M60tNb7edoDkF+BFDp5BU1WnoEevQXkfmTBS8Hfh1Bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:72:0b:2a:db:09:95:15:65:38:d6:78:cd:18:df:9a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
        Validity
            Not Before: May 13 13:01:25 2024 GMT
            Not After : May 14 13:01:25 2024 GMT
        Subject: CN=301024976deddee6e9abab4c37407a6741378b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:71:2a:19:00:4f:1a:6e:3a:72:ee:ff:b4:
                    07:1e:ae:74:69:43:c0:27:f9:af:b3:9b:06:24:f3:
                    f7:22:79:d1:5b:f7:6a:36:95:bb:96:d3:69:79:2a:
                    13:29:fe:58:c0:45:ee:47:b5:91:32:0a:2d:db:c9:
                    8a:82:8b:37:cf:99:fd:5f:5c:d2:1f:5a:e4:dd:79:
                    3f:37:e9:66:68:25:a8:5a:a1:0c:92:83:2a:f4:ad:
                    c0:64:7e:38:6d:e3:14:c0:92:12:dc:91:7e:3b:c9:
                    5d:f7:66:0b:15:34:d8:07:33:68:3e:cc:42:86:52:
                    f9:95:31:30:4e:bf:d4:db:d6:7c:33:bb:d8:de:e0:
                    1a:7c:74:86:63:98:b6:2c:17:7d:6c:f0:67:12:d2:
                    44:09:d5:4e:e0:b2:4a:55:da:2a:0b:69:65:e2:3c:
                    22:cf:d6:37:f0:1b:07:e4:aa:d4:eb:15:7f:39:58:
                    8f:e5:f9:6e:14:7b:20:de:a2:61:37:41:bb:f2:a4:
                    9e:1c:d5:52:87:12:2d:fc:8d:d5:c1:96:10:6f:f2:
                    c5:a9:36:56:59:7d:6d:22:1c:f7:dc:1b:ba:2e:48:
                    09:5d:bb:83:21:44:ca:28:04:dd:da:fe:2f:d1:66:
                    eb:6c:66:2b:00:61:8e:9b:b3:a1:2a:49:55:4b:1e:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:10:24:97:6D:ED:DE:E6:E9:AB:AB:4C:37:40:7A:67:41:37:8B:04
            X509v3 Authority Key Identifier:
                keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:49:b4:0e:0e:66:13:ad:ae:10:39:bd:73:73:60:48:7c:
         0e:49:8e:2b:16:b0:69:8b:8d:84:d1:99:3e:8e:b9:82:8d:96:
         27:cf:7c:39:f4:a9:d2:d0:1a:ac:3b:7c:6a:bc:e5:ce:a1:3b:
         66:63:02:97:b2:f3:e1:7c:b8:bd:f6:5b:3e:18:2a:9b:a3:5c:
         21:04:a8:cf:ae:d4:02:d8:9e:0c:29:70:0a:9c:25:c5:8b:ff:
         18:2c:f7:3f:34:44:bf:ab:c5:77:e5:e7:80:7f:7d:b0:6f:50:
         ed:d1:92:3c:82:5c:0a:53:ea:6f:1f:92:3d:0d:30:9e:10:88:
         42:75:f2:63:e9:da:b7:56:cf:3e:68:02:40:aa:09:b6:be:e0:
         2e:53:03:2d:36:a2:21:ea:2a:f0:65:2f:56:c0:3e:5a:1a:aa:
         0e:be:2a:ff:41:90:54:5f:23:dc:ce:48:69:e7:82:f7:ff:08:
         49:74:ef:ed:0f:ac:7a:2b:cc:b4:de:e0:8b:bf:e6:2e:01:7d:
         93:e2:48:af:ca:ea:ba:79:7a:2b:86:38:e8:45:2a:5a:8a:80:
         f6:e2:65:48:64:96:9f:ce:1a:0a:ac:a1:25:e6:06:f7:1d:5f:
         66:73:f8:39:91:f1:98:a3:cd:c0:47:fd:70:a0:cf:a7:f4:92:
         eb:7d:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----