Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft
File:                     bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft (raw, json)
Hash identifier:          DAoJZEW2qdRvVGM6BmPuusX8wtpkCD993sQaVHEqJCA=
Subject key identifier:   4F:A0:E8:76:76:B5:29:89:21:B2:18:DB:37:9F:BD:DB:4E:49:4F:8D
Authority key identifier: 6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8
Certificate issuer:       /CN=6cebe0eff0d425fff2fc43a442905c4dd52bd6a8
Certificate serial:       01934784045F0D0F5D572CA7ADBABAE217E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft
Manifest number:          136A
Signing time:             Wed 20 Nov 2024 03:00:54 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:54 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:54 +0000
Files and hashes:         1: VqIq8cZrHOL84zTtZbKY-Am-7ZY.roa (hash: u0i5x92k7kQnQhUoYk2VDVfRNika6nagCzn5Mi3vwzc=)
                          2: bOvg7_DUJf_y_EOkQpBcTdUr1qg.crl (hash: KWcgyUDq7yBxWvbL/U5U+FPPi60+bHvRi/iHmuyEAE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:84:04:5f:0d:0f:5d:57:2c:a7:ad:ba:ba:e2:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cebe0eff0d425fff2fc43a442905c4dd52bd6a8
        Validity
            Not Before: Nov 20 03:00:54 2024 GMT
            Not After : Nov 21 03:00:54 2024 GMT
        Subject: CN=4fa0e87676b5298921b218db379fbddb4e494f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:4b:8f:c0:44:eb:de:43:39:68:6e:32:2e:
                    fa:0c:07:e2:7c:7d:a4:68:0e:1c:b7:d4:40:89:ce:
                    38:ba:b5:2f:ad:65:2c:28:73:62:8c:c1:f1:fd:43:
                    7e:0a:59:ec:fb:45:99:c3:60:22:98:44:a4:7c:c5:
                    78:67:18:fd:61:e0:a5:13:8b:ef:e0:d1:0f:1e:75:
                    78:b0:2a:ac:30:de:73:01:e2:6b:ca:5b:93:af:26:
                    7e:99:a3:d4:7c:88:94:19:1e:a6:57:47:47:47:99:
                    3a:57:fa:fc:17:06:ac:62:34:61:32:20:c7:a5:88:
                    bc:90:89:e7:29:bc:66:55:b6:25:39:9e:6b:9a:84:
                    02:26:56:5c:c4:e0:7a:3c:3b:d6:04:e0:3b:f2:73:
                    b2:03:10:72:a0:33:b3:8a:f3:93:bd:0c:b9:76:06:
                    17:1b:0c:26:59:61:57:39:70:ef:d9:69:55:35:1b:
                    6b:6e:1b:8c:c0:4a:5d:97:b7:3f:e0:b2:b8:00:8b:
                    e9:e2:fa:ed:d9:a3:17:ef:b4:ae:5d:8b:55:28:5a:
                    ed:10:91:83:5e:85:81:3e:ca:dc:02:d5:84:70:80:
                    1b:d1:bb:cb:5a:d2:a4:62:3d:e1:17:3c:72:d6:b5:
                    7d:6b:aa:af:9a:02:9a:f2:10:37:b1:ec:9b:8a:af:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A0:E8:76:76:B5:29:89:21:B2:18:DB:37:9F:BD:DB:4E:49:4F:8D
            X509v3 Authority Key Identifier:
                keyid:6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:b4:3f:1a:07:c4:9d:f7:22:c4:c9:08:40:45:5a:8e:92:
         e2:84:97:75:30:99:42:c4:65:64:cf:f1:41:9f:99:41:cd:9b:
         d1:b4:9c:39:f8:e6:13:b6:30:78:0c:0f:00:c0:23:7f:e6:ba:
         74:fd:37:df:99:56:8e:e3:28:31:ee:a7:55:db:d4:76:c0:fa:
         9c:57:51:b2:db:f9:9e:d9:cf:9e:96:2e:9d:f1:ee:92:d1:fc:
         57:38:0e:2c:89:51:d5:db:66:8a:4b:8c:69:34:a6:26:fc:d1:
         51:8b:06:0c:3a:33:0f:42:64:aa:2e:5f:d9:73:ce:52:42:0c:
         c3:95:60:31:a6:69:25:aa:f0:a3:a8:0e:68:c5:ba:d1:69:68:
         32:89:27:56:c8:79:8d:8c:e9:67:e0:f8:54:3d:d4:e4:3d:e0:
         e2:eb:ba:b1:0c:e2:a9:66:6e:f5:4d:da:ec:1a:a2:69:95:6a:
         46:28:a4:ad:0e:78:7d:af:c7:1e:02:88:7e:e2:9e:2f:73:4d:
         f1:55:0b:b2:9f:42:98:01:93:3c:e2:ab:e8:36:11:50:80:c7:
         25:ab:18:95:c0:8c:df:e6:25:48:e8:c5:8a:ce:de:87:23:28:
         d5:2b:b5:61:39:08:5a:f6:87:0c:c9:fc:6b:05:6d:45:68:e9:
         d6:ae:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----