Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.mft
File:                     qbgpjZsVbAla0UYELIOLm5Lr6dw.mft (raw, json)
Hash identifier:          6NkV1mjfRM7ZhXSMsIeOqzY4KfZTvVqBQbVGU/VB98Q=
Subject key identifier:   69:98:33:8B:1D:6D:D3:E2:B8:27:3B:69:46:F2:AD:70:3E:5C:43:FB
Authority key identifier: A9:B8:29:8D:9B:15:6C:09:5A:D1:46:04:2C:83:8B:9B:92:EB:E9:DC
Certificate issuer:       /CN=a9b8298d9b156c095ad146042c838b9b92ebe9dc
Certificate serial:       0190C9267A1C399C01EE920B19C345E1CD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbgpjZsVbAla0UYELIOLm5Lr6dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.mft
Manifest number:          119E
Signing time:             Fri 19 Jul 2024 04:01:00 +0000
Manifest this update:     Fri 19 Jul 2024 04:01:00 +0000
Manifest next update:     Sat 20 Jul 2024 04:01:00 +0000
Files and hashes:         1: qbgpjZsVbAla0UYELIOLm5Lr6dw.crl (hash: kN+dYD1l+6lnWv9Odsr96mwvCkSlXYFbGZWRKXVlzz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c9:26:7a:1c:39:9c:01:ee:92:0b:19:c3:45:e1:cd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b8298d9b156c095ad146042c838b9b92ebe9dc
        Validity
            Not Before: Jul 19 04:01:00 2024 GMT
            Not After : Jul 20 04:01:00 2024 GMT
        Subject: CN=6998338b1d6dd3e2b8273b6946f2ad703e5c43fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:e9:ae:d3:73:fa:b5:6a:b9:08:62:a6:51:
                    c6:fb:7d:b5:44:78:f7:c3:3a:15:2d:b2:17:6c:c9:
                    25:fb:ec:ef:70:ef:a0:2e:a1:59:d9:6a:c9:de:76:
                    2a:07:78:54:09:c2:55:fe:04:27:b9:fd:fb:cb:d5:
                    70:76:2b:13:4f:d3:24:9c:ee:e2:ed:4e:bd:b5:ed:
                    5b:54:82:db:9b:02:03:26:9a:19:c5:11:5c:51:f6:
                    ed:2c:5d:0c:24:5b:39:34:27:b6:30:b9:68:fc:3e:
                    fa:c9:2c:d3:2a:5e:7a:e1:5a:2a:56:46:16:fc:ff:
                    fd:03:7a:3a:c1:c7:be:c6:30:f6:3f:37:fa:ee:61:
                    8d:32:06:ce:41:0b:cd:93:6f:3d:2a:79:71:be:7d:
                    9b:1f:e4:41:58:18:06:cd:3f:a0:b7:15:88:4d:51:
                    c8:53:0f:97:c4:a3:26:36:47:28:b7:55:9b:14:cc:
                    4c:d9:5e:da:92:86:b1:5c:83:0e:30:1e:80:c6:5a:
                    ad:9b:39:d6:6a:be:f2:c8:60:a5:52:4b:d2:4b:e5:
                    ba:c9:ce:1c:6f:4f:68:43:22:e0:26:06:dd:d8:e9:
                    ec:83:fe:95:6d:45:0b:b0:e8:b0:17:d6:f5:fb:ee:
                    b5:28:3e:e5:a4:66:3b:76:f7:03:a5:5d:17:dc:e2:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:33:8B:1D:6D:D3:E2:B8:27:3B:69:46:F2:AD:70:3E:5C:43:FB
            X509v3 Authority Key Identifier:
                keyid:A9:B8:29:8D:9B:15:6C:09:5A:D1:46:04:2C:83:8B:9B:92:EB:E9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbgpjZsVbAla0UYELIOLm5Lr6dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:cf:83:ba:25:03:26:dc:95:90:6e:f0:c4:c9:b2:f6:3d:
         28:ab:6e:9a:98:53:d9:80:74:a2:9e:e7:33:c5:32:75:35:7b:
         66:c6:36:51:fb:28:7c:14:ad:0c:94:22:f8:9b:de:49:46:58:
         8c:ab:75:9b:04:e5:ea:85:bb:ab:58:9d:15:11:52:99:cc:37:
         d7:4a:fb:93:42:92:d0:93:e6:c1:3c:29:38:50:d7:b1:5c:83:
         d7:cd:57:79:ce:0f:25:9f:e7:01:4a:9f:bc:e1:fd:47:f7:73:
         7b:05:c4:87:02:87:b4:99:af:78:7c:6f:26:3b:00:dd:33:99:
         15:7b:0b:b1:cb:bd:9b:c8:ab:02:1c:64:02:e8:df:77:57:fb:
         65:ff:33:d3:fa:4a:8a:f6:ad:d8:57:33:22:89:1f:0b:0a:f6:
         5d:cc:8d:10:15:1b:c4:6a:cf:7f:ed:a2:e0:2c:10:4d:80:d8:
         c3:3e:80:d3:a1:a6:b4:a9:2f:f7:6e:7e:66:e3:e1:91:9b:ef:
         74:e9:ea:ac:56:53:27:61:85:52:00:fe:26:df:03:45:cf:97:
         a8:26:a9:37:ba:0a:0a:bc:a0:8b:5b:c8:60:2c:31:d8:a7:c2:
         c4:a6:53:4a:8c:19:ef:96:43:d9:c1:16:96:48:2f:0a:05:bb:
         07:e3:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----