Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.mft
File:                     busQ8KS5GWRUGl4ZqcuDy3JolQ4.mft (raw, json)
Hash identifier:          OF14Eb1IromAv4nkHj12f9AyNU44MIxGl41fDmXdq2Y=
Subject key identifier:   B8:8F:87:09:36:C7:F1:80:13:D2:64:C1:D5:F0:8C:B1:09:C2:86:8B
Authority key identifier: 6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
Certificate issuer:       /CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Certificate serial:       019347174FB9B51AA61CCC328C62CCC44EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.mft
Manifest number:          0FC7
Signing time:             Wed 20 Nov 2024 01:02:09 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:09 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:09 +0000
Files and hashes:         1: busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl (hash: +QoBrhQnUkUg8RcxbtuT/UPlaE5JaUPLgAMTml+Haco=)
                          2: gQD5lCitRA_VQMb78EAAXVzhRM8.roa (hash: q6O73L2pghXBxxuNxZpmXwtV1zGGi9+QxDcjtz/7Itw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:4f:b9:b5:1a:a6:1c:cc:32:8c:62:cc:c4:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
        Validity
            Not Before: Nov 20 01:02:09 2024 GMT
            Not After : Nov 21 01:02:09 2024 GMT
        Subject: CN=b88f870936c7f18013d264c1d5f08cb109c2868b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:41:c2:c1:a2:b1:3f:67:8b:d4:ed:3e:71:
                    dc:9d:a4:9f:b6:4c:f2:e9:65:3c:5d:3c:fc:b3:e6:
                    be:60:d4:6c:55:b5:b8:ec:45:81:36:b9:f8:38:63:
                    2a:45:42:6d:88:e9:88:8f:19:b2:42:66:62:ea:a6:
                    8d:9f:ca:e6:98:b5:30:f5:65:89:ab:64:45:13:a3:
                    8a:ab:aa:a7:cc:1c:be:2a:55:d4:66:3c:19:e9:76:
                    a4:dd:5f:57:09:e2:7a:b5:a1:6b:08:6c:6d:fb:50:
                    67:39:c3:5b:8f:de:ec:5e:bc:82:43:11:ac:0e:f9:
                    81:26:60:36:ea:4b:3b:86:92:0f:96:c0:70:57:99:
                    3c:1f:49:42:2d:a5:e1:c0:97:0a:e8:e8:0f:bc:51:
                    77:19:a8:6e:02:f1:2a:68:f7:26:cb:45:b0:5b:60:
                    71:2d:fc:39:0b:15:7a:c1:06:f6:43:18:44:88:86:
                    c3:58:ad:5e:86:27:95:fd:e1:a5:e8:a3:08:3e:0d:
                    b0:2c:7c:61:05:0a:5d:12:34:04:7e:b7:7d:ea:c5:
                    45:59:5d:ac:00:ad:9d:23:9d:f2:3a:65:63:d2:ce:
                    ab:de:b2:f8:c6:4f:b6:fa:d1:60:55:93:85:d8:b1:
                    dd:b1:bd:ee:70:cc:c0:28:22:81:ee:74:e3:16:4a:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8F:87:09:36:C7:F1:80:13:D2:64:C1:D5:F0:8C:B1:09:C2:86:8B
            X509v3 Authority Key Identifier:
                keyid:6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:60:27:da:26:92:e5:78:82:7d:b3:cd:79:67:b1:21:da:
         c1:11:9a:3a:d1:df:9b:1e:fd:1c:93:e8:01:c3:8d:f7:4f:11:
         cc:68:20:bd:7e:c3:e6:bd:d6:64:72:b0:44:a2:5e:e6:1b:e1:
         de:66:52:02:35:07:5f:de:b1:82:c2:b7:15:38:c8:2b:e2:a2:
         97:68:e2:53:6c:fc:02:12:23:cc:aa:60:e6:90:b4:6d:e1:03:
         8e:aa:de:3e:7d:6a:94:66:3e:51:e8:00:ff:36:e8:dd:6c:7f:
         15:4f:0a:24:08:67:c3:fd:aa:8c:40:1b:54:ef:16:97:84:55:
         a2:8b:9f:00:91:d7:6a:cc:1e:0c:5f:c2:cc:b8:9d:51:15:ce:
         a9:83:b0:cf:19:56:c5:58:b4:1e:7e:55:4b:73:2d:89:42:23:
         15:09:87:e3:8c:c0:ae:85:e2:25:d5:6d:8e:21:da:b0:8c:1c:
         9e:4e:f6:61:90:30:57:ff:d9:c0:44:b3:13:02:91:3d:6c:eb:
         b3:10:de:8a:d1:c9:f4:c0:a1:4e:b2:c1:ae:fc:d8:65:02:34:
         d5:ae:b4:d4:57:a5:b1:82:9c:3c:20:b0:6a:6a:a4:f1:86:4e:
         46:62:5c:46:56:e6:59:cd:8e:b0:ff:f3:85:8d:56:d6:17:0b:
         18:ca:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----