Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
File:                     OxO_giWSvRtUt3zCwcxCsozPFmk.mft (raw, json)
Hash identifier:          GUebIS0OgIoYO/NMez/UZ7tOmLeBE7HCFk+Rp9vOObM=
Subject key identifier:   03:BE:E1:08:FA:B4:73:11:FC:D4:43:F6:78:0A:18:C6:D6:00:F9:1A
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Certificate issuer:       /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial:       018F3FD624390C06174192C13CD28012CE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
Manifest number:          0C69
Signing time:             Fri 03 May 2024 19:02:29 +0000
Manifest this update:     Fri 03 May 2024 19:02:29 +0000
Manifest next update:     Sat 04 May 2024 19:02:29 +0000
Files and hashes:         1: 4eleNmX005n7wlXVlehMTBHp9tw.roa (hash: 5tRtBlf42R6PXZYfZGr+HDlBaIQdiVh4BjlyfhjnVHE=)
                          2: GOIB72ezfSlZwKpvCUux5Lmo21I.roa (hash: 39JJa0QSA9d/0vjDQmceQV/VLaieey+iN0iJ2bE/SBc=)
                          3: OxO_giWSvRtUt3zCwcxCsozPFmk.crl (hash: GuLDOvUf9MOIOcbHOp0Qb2TqErV+VCJsgYhmeJMYCU8=)
                          4: dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa (hash: E/5YJ+LBiC5osugGpetht8RXbDCTNLmcabUCRGWp2Ec=)
                          5: gNpvThMgL6xEAvEpyTKcV-Ozrh4.roa (hash: jjcLUmUpKFM1bHOItpI9x815JZiM1yE8LjuR0Ezk8Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d6:24:39:0c:06:17:41:92:c1:3c:d2:80:12:ce:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
        Validity
            Not Before: May  3 19:02:29 2024 GMT
            Not After : May  4 19:02:29 2024 GMT
        Subject: CN=03bee108fab47311fcd443f6780a18c6d600f91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:aa:41:7a:94:dd:a6:ec:ca:42:66:ba:9c:
                    74:5e:e0:48:c0:c2:03:b1:74:cf:3c:d9:fd:79:63:
                    bf:06:38:87:0b:86:5f:ce:31:ab:61:6a:e6:9a:d5:
                    41:12:21:ce:b5:bb:2e:c6:46:ab:c4:55:19:4c:e1:
                    38:d1:c0:a9:46:cc:6d:71:e3:fe:1d:6c:28:d6:98:
                    af:4b:53:88:14:e6:e2:4c:45:dd:bc:9b:e6:9a:25:
                    e9:e3:e1:0f:7d:b7:e5:50:cf:92:e3:8b:20:f5:d4:
                    91:05:ae:e3:cf:b2:a7:88:0f:5a:1f:84:21:26:c0:
                    50:84:66:e2:fb:11:34:24:69:91:66:62:a4:1e:64:
                    19:25:94:2e:b4:f8:57:94:b4:26:14:08:38:e2:2c:
                    b7:c0:68:aa:e3:a6:07:ae:4b:92:f0:53:82:c1:d2:
                    27:51:b3:74:ae:d4:0c:49:d4:d7:09:d1:0c:57:bd:
                    f7:c7:e5:93:98:3c:4a:c5:b5:0b:ab:47:a6:c5:95:
                    90:bb:1d:57:7a:63:9b:51:6f:63:1d:09:d1:66:d2:
                    71:62:ec:ad:a3:87:d0:18:82:19:c1:8a:d7:0e:e4:
                    fc:96:22:d8:ca:da:0a:74:84:1b:d4:ac:f4:de:90:
                    c8:f3:28:57:04:6a:62:72:cb:2f:d6:e1:5b:4c:ae:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:E1:08:FA:B4:73:11:FC:D4:43:F6:78:0A:18:C6:D6:00:F9:1A
            X509v3 Authority Key Identifier:
                keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:88:af:b2:fb:42:a5:0b:34:ed:d1:9e:4b:2a:f8:d8:3b:cd:
         d3:45:fb:9f:09:f6:49:67:1b:06:e3:1d:98:d4:d7:64:c5:3c:
         c1:b6:a4:cf:02:1b:e3:ab:58:7e:db:ce:fa:68:aa:2f:d8:82:
         a1:e2:8c:da:17:62:be:73:a9:65:d5:6a:4e:b3:13:97:54:29:
         a2:b1:2d:f3:ce:09:4e:1d:db:db:24:ac:5b:fa:e7:f1:7a:2c:
         42:1d:9a:1c:4d:df:86:aa:b1:51:c2:4f:b3:cd:a0:f6:54:af:
         60:26:2d:37:c2:fe:0c:b8:13:c9:72:10:b0:52:a1:cb:50:48:
         18:56:b7:6c:49:a8:4f:a1:ea:72:61:d0:dc:08:8c:1f:35:57:
         b0:3d:a6:dd:ac:14:fe:96:b8:e2:69:b8:76:b3:c9:99:5b:35:
         c8:cc:fd:64:e4:25:d4:0b:7b:b8:8c:39:36:1d:07:77:c1:ff:
         94:fe:d2:ab:fd:a9:84:85:54:8f:ac:b4:d0:66:f8:8d:df:0a:
         58:71:a2:ee:4d:a6:2b:d7:46:8b:79:45:e6:9b:c3:4b:61:86:
         c7:3b:2e:ee:04:c0:69:fb:4d:bd:d4:f5:c1:d4:e0:dc:08:65:
         a4:43:2e:46:2d:dc:a0:c7:2f:cc:d5:23:9f:b9:a3:8b:15:ed:
         b7:32:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----