Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/00TgE0u_0uTGgdWZXv5CdIxEWPc.mft
File:                     00TgE0u_0uTGgdWZXv5CdIxEWPc.mft (raw, json)
Hash identifier:          hotrMtZPE5lrhlLtc6jrRWLTSc6jMwM1cRw//gZo7+I=
Subject key identifier:   72:A9:38:36:0E:EF:AC:57:89:D7:17:9F:78:32:C8:51:40:8B:5E:D8
Authority key identifier: D3:44:E0:13:4B:BF:D2:E4:C6:81:D5:99:5E:FE:42:74:8C:44:58:F7
Certificate issuer:       /CN=d344e0134bbfd2e4c681d5995efe42748c4458f7
Certificate serial:       0190C7DF1D8CA804FAB5CE9C5E343019D520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00TgE0u_0uTGgdWZXv5CdIxEWPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/00TgE0u_0uTGgdWZXv5CdIxEWPc.mft
Manifest number:          0E6A
Signing time:             Thu 18 Jul 2024 22:03:26 +0000
Manifest this update:     Thu 18 Jul 2024 22:03:26 +0000
Manifest next update:     Fri 19 Jul 2024 22:03:26 +0000
Files and hashes:         1: 00TgE0u_0uTGgdWZXv5CdIxEWPc.crl (hash: OQwbhlUxumQsjcDdfDA/mwa3amqegNAMU9IukUUU/tc=)
                          2: Ir0UcI2D37pWamNeC2zCredwKG4.roa (hash: sVS4U7vXPUWA0muhVbMpnZOoEoC7zpcz6/qC+0oivEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:df:1d:8c:a8:04:fa:b5:ce:9c:5e:34:30:19:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d344e0134bbfd2e4c681d5995efe42748c4458f7
        Validity
            Not Before: Jul 18 22:03:26 2024 GMT
            Not After : Jul 19 22:03:26 2024 GMT
        Subject: CN=72a938360eefac5789d7179f7832c851408b5ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:b8:d4:3b:8d:18:7a:9f:fd:3a:1a:5d:31:
                    7e:4b:e4:7c:64:cc:9e:83:f1:c1:e0:ed:ae:fc:b3:
                    bf:23:99:2f:1b:e0:7e:30:f7:7a:a9:73:57:ab:9c:
                    55:90:2b:1d:b8:f0:62:92:1c:d8:63:d4:77:39:34:
                    70:67:be:de:51:cd:8e:90:97:2d:0f:43:3b:8b:60:
                    ea:94:d0:88:fc:42:49:b2:6d:6d:d8:af:f4:ec:26:
                    c1:6d:98:76:a7:37:cb:d2:71:ae:84:eb:fc:8b:1c:
                    65:d1:3e:0c:bf:3d:9f:73:2b:39:e3:16:84:54:e0:
                    40:32:ed:83:26:fc:9e:43:03:03:e5:27:0c:c6:8d:
                    c8:fb:cb:6a:0c:c2:bb:31:86:52:06:ed:33:11:2f:
                    cb:25:62:ad:23:4f:f5:da:d3:1e:58:b1:e6:b6:4a:
                    0b:d9:cd:86:e9:a7:3d:ed:b4:18:66:f7:6b:11:40:
                    ff:03:26:ec:4e:e0:2d:f0:d9:1c:dd:aa:84:2a:66:
                    98:4b:db:78:71:34:d5:bd:3a:77:dc:a9:9b:ee:f8:
                    2b:fc:91:47:e4:b1:23:dc:6f:2a:91:68:3d:40:1e:
                    23:eb:bf:c3:4d:d1:d5:a4:65:b4:41:6c:e9:b8:31:
                    32:c8:88:b0:18:e9:ac:67:d7:29:d9:42:d1:fd:8a:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:38:36:0E:EF:AC:57:89:D7:17:9F:78:32:C8:51:40:8B:5E:D8
            X509v3 Authority Key Identifier:
                keyid:D3:44:E0:13:4B:BF:D2:E4:C6:81:D5:99:5E:FE:42:74:8C:44:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00TgE0u_0uTGgdWZXv5CdIxEWPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/00TgE0u_0uTGgdWZXv5CdIxEWPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/20b85b-98b1-4169-b71a-61a1bdf24b13/1/00TgE0u_0uTGgdWZXv5CdIxEWPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:87:ab:d1:6e:a7:aa:f0:89:3b:f2:9f:ab:49:24:3f:79:ae:
         23:65:45:8e:ad:b1:97:2b:c3:ca:fb:ca:10:8d:5b:ec:6a:2d:
         df:33:a0:31:fa:4c:38:8a:42:28:8f:d9:cb:5a:55:c3:47:78:
         00:e8:57:cf:54:b2:13:7d:d3:c6:4b:3f:e9:7b:01:ff:62:d8:
         88:73:a9:f9:f1:ed:32:9d:61:2c:43:f2:a4:b7:11:f9:cf:13:
         10:72:91:76:62:29:af:35:dc:e5:18:08:9d:42:60:f6:7a:7b:
         75:0e:05:8f:6c:77:e0:e3:c6:bf:dd:db:cc:0b:24:56:d3:93:
         e4:a3:ca:69:d0:47:58:4f:e3:69:0f:09:11:6f:af:54:d2:3d:
         3c:6b:ea:fc:18:76:b7:0e:44:22:1b:d4:7a:9a:7e:c1:67:27:
         ba:3b:7c:cc:44:17:99:6d:ea:ac:2a:f3:a6:76:55:7a:ff:45:
         0a:48:0a:db:fe:7d:27:86:02:06:66:66:06:7d:1d:87:6f:cf:
         1b:57:4d:de:f0:60:d3:65:b9:ac:9b:19:ae:72:72:6c:ac:0c:
         43:cf:bd:7a:cc:05:c2:40:b9:ec:5d:1a:cb:bb:5a:c5:e7:d4:
         b5:7e:1b:11:5d:4b:b2:fd:05:68:63:cf:7c:fd:1a:6b:57:c3:
         df:f4:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----