Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.mft
File:                     IQ95SPXn3Mu2K6j1PDW6VSVjG3A.mft (raw, json)
Hash identifier:          /wzrGe9giHYiU3kfuQU59QkyLXdRa1zetsdr43yYLHs=
Subject key identifier:   2D:32:52:33:E7:00:89:CA:8B:C6:47:35:60:1C:4F:FC:7D:1E:7B:E4
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Certificate issuer:       /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial:       018F24CC7942B4A6527D1061B97EC8109B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.mft
Manifest number:          0D2D
Signing time:             Sun 28 Apr 2024 13:02:11 +0000
Manifest this update:     Sun 28 Apr 2024 13:02:11 +0000
Manifest next update:     Mon 29 Apr 2024 13:02:11 +0000
Files and hashes:         1: IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl (hash: JYRyMC9YYdHZPSkv/rS7clM6GYSXL3/L9zxbjQku5og=)
                          2: Wy43NPx46KrtXJ-OU3g6bUk6-GY.roa (hash: d5kZg7V2DVPr6ev9j9q/KxQkffayo1llxtA3rrFh9RQ=)
                          3: Z1i07bzmd77SdCJmTgg7zbOg3b4.roa (hash: E9EJjES5WtiWFCDexLNwPr6HJ9Z6E1jJFk5I79s8pzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cc:79:42:b4:a6:52:7d:10:61:b9:7e:c8:10:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
        Validity
            Not Before: Apr 28 13:02:11 2024 GMT
            Not After : Apr 29 13:02:11 2024 GMT
        Subject: CN=2d325233e70089ca8bc64735601c4ffc7d1e7be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:d9:49:bf:74:33:2f:08:03:08:5d:2b:55:
                    b3:f0:6f:bf:ae:96:e2:ca:09:5c:5c:1f:a2:ee:b6:
                    27:04:ed:e0:40:bb:cc:a7:0d:2d:91:c1:0b:eb:64:
                    ae:e6:ea:6b:31:3a:12:d1:54:7b:fd:a0:c1:3f:af:
                    cf:73:bc:5e:ce:68:55:19:f8:50:48:d4:6d:0f:58:
                    86:73:13:36:a1:aa:9c:c4:82:5d:19:12:f3:21:6f:
                    c9:01:09:2c:11:e8:1e:70:1f:ac:b3:1f:a0:1f:06:
                    50:0e:fd:97:b0:97:20:b5:dc:ac:19:e5:0f:a7:b7:
                    03:e7:d5:8f:09:95:36:f3:23:7b:6b:ae:a5:ec:ab:
                    d8:9c:84:2d:51:37:47:4e:34:5d:6f:9e:d1:60:28:
                    2c:40:71:26:25:10:fd:af:5d:13:54:e6:94:70:0e:
                    af:9a:c5:c5:f4:71:13:de:c0:a1:b4:5a:60:d9:b7:
                    1c:86:b2:be:71:bf:59:67:4d:12:13:64:58:2a:c2:
                    93:ee:2d:11:4f:9a:fa:e2:a1:9c:6c:43:b3:b5:5e:
                    1a:85:06:16:7f:7f:9a:77:d2:de:3f:12:21:bf:cf:
                    41:a2:3c:ac:bd:51:8c:3c:21:e1:d9:bd:47:2d:f8:
                    fe:5a:fa:27:84:55:fb:e3:37:a6:74:40:6e:54:bb:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:52:33:E7:00:89:CA:8B:C6:47:35:60:1C:4F:FC:7D:1E:7B:E4
            X509v3 Authority Key Identifier:
                keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:54:15:64:04:b9:aa:d0:59:ce:b4:08:87:f1:ee:e4:9f:
         db:f1:5d:22:b9:76:03:3b:0b:22:0a:54:1d:c7:8a:01:95:6c:
         c2:c9:d7:c8:d5:5b:2c:d4:ee:78:6c:95:88:62:67:e5:a0:fb:
         2a:b9:a6:93:c5:a1:f2:f0:67:52:1e:47:f9:ee:1b:d3:ef:9a:
         57:db:55:f2:14:47:f1:d6:52:83:ff:65:06:a3:97:d3:18:5d:
         fd:01:41:e8:9f:43:a4:77:db:86:a0:1a:ff:47:15:31:e1:a0:
         a8:3a:12:4b:14:62:25:e1:68:22:c5:96:de:35:b2:a7:98:38:
         63:8a:7f:e8:07:20:91:5e:2a:f4:e4:11:8e:00:de:3e:51:60:
         a6:05:66:2c:c0:f1:34:bd:e6:ff:9c:2c:42:51:4d:06:49:1f:
         44:cc:cc:6a:7f:1a:aa:eb:0d:6b:33:d7:f1:40:fc:d2:fb:fe:
         50:fb:0d:94:1b:27:f7:b6:1a:46:bb:67:a8:f0:a7:ff:b9:5f:
         e2:86:e2:ad:87:56:b3:05:49:8f:22:1e:28:94:6d:75:0a:c5:
         e4:1f:29:71:65:b3:55:c0:cc:b6:db:5e:66:4b:d1:f2:0e:3a:
         d7:38:2e:ec:95:6a:9b:6c:52:e6:c5:96:94:ba:12:7e:a1:64:
         3f:0b:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----