Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
File:                     XnF2J_ey_MVvDXvkaaExcWB9JCc.mft (raw, json)
Hash identifier:          yza780JG1WR83fdziLou+Jnus76FxRRXsMAT+529Mak=
Subject key identifier:   7F:00:76:B9:62:7E:D8:74:64:E6:90:46:3B:E0:B2:E6:B6:8E:46:C0
Authority key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Certificate issuer:       /CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Certificate serial:       0192305A60F641EAF6142A6491F516185B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
Manifest number:          0836
Signing time:             Thu 26 Sep 2024 22:01:22 +0000
Manifest this update:     Thu 26 Sep 2024 22:01:22 +0000
Manifest next update:     Fri 27 Sep 2024 22:01:22 +0000
Files and hashes:         1: DeYFRF8SgqWAkexS1A-BHXI9f8k.roa (hash: bNwkEAQRtlZIuFSB/u0r6n11dTYMMes8YeIHkjBbzSM=)
                          2: XnF2J_ey_MVvDXvkaaExcWB9JCc.crl (hash: 2HgYCxzxxFXMRuId9ctsVcy/XV9hxVfLuYKrTDGKl3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:5a:60:f6:41:ea:f6:14:2a:64:91:f5:16:18:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
        Validity
            Not Before: Sep 26 22:01:22 2024 GMT
            Not After : Sep 27 22:01:22 2024 GMT
        Subject: CN=7f0076b9627ed87464e690463be0b2e6b68e46c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:8f:13:48:5a:75:d6:f1:7f:a6:54:47:9b:
                    6b:61:94:0a:1e:23:e0:91:79:68:c5:2d:e1:3a:5d:
                    8e:29:56:5e:54:12:9e:10:ed:16:ed:1b:2f:8d:bd:
                    35:c6:a7:e7:b4:e2:51:f0:92:83:3f:25:e9:26:a8:
                    e4:d9:5c:a3:97:df:c2:27:4c:77:14:b5:c1:0b:8f:
                    98:42:33:ac:0e:65:75:fc:4c:14:8c:32:c3:c5:f5:
                    51:47:e5:3b:67:6d:a3:76:0a:09:7d:f9:a0:ce:8d:
                    ce:46:0a:0d:76:fe:fd:94:55:5f:f1:4b:e6:b3:0c:
                    fe:ba:7b:6a:f2:1e:96:20:f1:66:4b:02:e3:d6:8e:
                    35:ce:d7:4d:f0:33:8b:43:23:51:27:82:f8:b5:c5:
                    37:56:74:0c:1f:1b:ee:e6:6c:4f:c4:5c:29:d4:f0:
                    63:cf:b9:1f:63:c0:07:25:cb:ef:32:5f:77:14:e4:
                    fb:2b:90:d7:9f:23:fb:8a:32:d0:3f:92:0b:0b:18:
                    5c:b1:4c:99:b0:80:dc:bf:0b:a1:fb:5d:23:29:3e:
                    b1:40:10:31:ef:4a:f0:be:64:de:91:a8:1e:d5:be:
                    b7:c9:fa:40:ce:da:32:a2:80:74:69:01:3f:14:40:
                    4e:64:66:ea:97:03:19:96:59:3d:d1:cf:61:05:96:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:00:76:B9:62:7E:D8:74:64:E6:90:46:3B:E0:B2:E6:B6:8E:46:C0
            X509v3 Authority Key Identifier:
                keyid:5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:61:af:00:89:5b:b9:4c:37:dd:51:9e:fd:d9:ee:2a:c0:87:
         a1:c5:12:d3:c3:58:a2:f4:9b:8c:b3:8d:e6:86:3e:6c:14:e7:
         b7:35:11:a0:a3:7f:57:4c:ec:a9:97:13:45:85:20:d9:6b:59:
         d0:bd:94:d7:6b:38:a6:48:30:56:ff:f4:04:f6:45:77:35:0e:
         25:ed:15:eb:53:ba:87:f5:7f:c5:ab:d6:30:02:f4:fe:5b:86:
         88:06:57:ce:7f:2c:cc:35:58:90:18:9d:27:78:bc:92:04:24:
         26:69:6d:10:c3:fa:bc:c8:f1:bc:d1:8d:c8:aa:4a:9d:2b:8d:
         d9:6c:0c:1d:58:1c:a3:35:d2:0a:18:13:00:4b:c8:17:30:53:
         f0:8d:ab:44:1d:c4:da:f7:41:94:b6:64:ae:a1:6d:66:c4:58:
         95:e8:ab:9a:36:d7:3f:be:26:dd:5d:cc:7a:13:cb:f7:8c:b6:
         0c:54:91:d2:d9:59:15:f0:d1:03:12:70:42:93:97:18:ff:8f:
         fb:5d:22:03:83:82:4b:62:ec:56:60:b2:25:68:38:e4:c7:f8:
         ba:54:b1:63:fe:f1:6b:5b:77:b1:ac:03:e4:f4:c8:75:43:92:
         e6:78:6a:3b:fc:37:29:3f:18:20:70:d4:ce:0e:36:7e:b9:c8:
         ae:1f:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----