Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
File:                     0YxJxtcTIiRYPq80iuQcUOYdn0U.mft (raw, json)
Hash identifier:          Mio3nbNDwelIi2Cl0/CDiOP+iElz5xBVkzomz4ozU10=
Subject key identifier:   29:35:D1:47:72:B4:57:1E:B5:18:9F:24:87:AB:E9:E6:B4:39:7E:CE
Authority key identifier: D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
Certificate issuer:       /CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
Certificate serial:       01931F9AA4C1B491E98D0CA99514DE0D8E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
Manifest number:          09FA
Signing time:             Tue 12 Nov 2024 09:00:48 +0000
Manifest this update:     Tue 12 Nov 2024 09:00:48 +0000
Manifest next update:     Wed 13 Nov 2024 09:00:48 +0000
Files and hashes:         1: 0YxJxtcTIiRYPq80iuQcUOYdn0U.crl (hash: xTapiVc4zWfi90702W/EZM9vimuKNw3/ZXJXXL+8hCY=)
                          2: G-iZEjdoir1-LBaeaKNIkXaoMHc.roa (hash: Fmj2luS6w4oJEIQFa3pKFPFSmCPOJ2EenjisQKOEVyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1f:9a:a4:c1:b4:91:e9:8d:0c:a9:95:14:de:0d:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
        Validity
            Not Before: Nov 12 09:00:48 2024 GMT
            Not After : Nov 13 09:00:48 2024 GMT
        Subject: CN=2935d14772b4571eb5189f2487abe9e6b4397ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:f9:ed:06:e0:62:cf:ae:3c:aa:a3:ef:f2:
                    4e:aa:e9:3d:e2:0a:56:2d:e0:dc:6a:23:44:20:6d:
                    b2:c9:45:6d:88:a2:5c:e5:db:4a:0f:7a:21:76:c0:
                    dd:7b:7d:9b:3e:72:1a:36:8d:27:41:fb:56:11:1d:
                    19:77:d8:55:6f:20:a1:9a:3c:a4:72:aa:6b:13:31:
                    57:7c:a2:c6:b9:fc:21:9b:49:27:aa:6e:26:1f:2d:
                    9e:94:3f:03:e8:ef:55:c5:a7:90:4d:ef:4c:90:57:
                    00:fe:b7:f9:66:74:7e:80:d5:81:d8:76:90:03:f6:
                    e5:0d:7c:91:9b:42:d9:c2:58:69:9c:b0:5e:15:22:
                    3b:78:f5:14:cf:39:79:06:cd:9e:0e:7c:f0:82:5f:
                    74:d7:dd:89:3d:10:fd:96:bd:a3:02:35:d3:1c:4f:
                    d5:5f:0c:43:db:a5:3c:8f:54:bf:ea:26:2d:20:02:
                    1a:e5:8c:cb:98:55:f1:9c:16:6a:d0:0a:09:27:4e:
                    01:f9:75:13:52:0e:2c:8d:ad:3c:bf:57:59:5a:3f:
                    18:4b:da:b6:fe:65:66:a9:e0:d8:92:0a:f2:08:3b:
                    db:ac:1e:b5:f4:dc:d7:44:9b:89:c0:3d:ef:5c:71:
                    7a:0e:ee:b9:06:53:6d:39:73:06:e4:a1:16:13:94:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:D1:47:72:B4:57:1E:B5:18:9F:24:87:AB:E9:E6:B4:39:7E:CE
            X509v3 Authority Key Identifier:
                keyid:D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:79:1c:68:99:7a:28:e0:c4:bd:5e:76:32:d4:62:2e:48:
         7b:b5:70:91:01:bb:56:e6:c8:e2:6e:cb:6f:64:d6:75:e1:20:
         3e:83:ea:0c:a0:49:37:f4:c8:41:26:5f:02:fc:e7:67:91:4e:
         26:08:62:b0:d7:74:52:71:fd:23:fd:ba:d9:37:bd:d7:f8:8d:
         33:16:2e:56:eb:de:c4:8e:3c:6f:a7:33:bd:d3:22:64:d7:dc:
         71:c8:88:ac:1b:81:1a:63:e2:95:b8:ce:5e:65:b7:1a:e6:e1:
         2e:96:87:0d:3d:be:5a:55:2d:65:5f:c9:cf:11:b1:90:14:b7:
         62:86:5b:b6:38:9d:92:fd:13:d0:92:f9:17:4c:94:5c:1d:f9:
         1b:df:08:c5:5a:41:84:a2:59:6a:b1:bb:50:3c:a5:fb:fa:ba:
         b3:f0:96:2f:0c:47:15:0f:dd:67:4d:5a:ff:80:f6:90:c8:c2:
         61:06:2a:2b:26:45:7b:98:7d:61:69:81:9c:2b:e2:c0:d6:7b:
         13:2d:b4:1f:c3:05:c0:06:63:80:d7:0b:d2:4f:06:b9:0e:4a:
         79:6f:99:4a:98:5e:53:fb:81:53:30:ea:b9:23:47:d2:cb:6d:
         fc:80:17:71:00:d9:19:a1:96:1a:ce:20:84:5f:52:ed:21:49:
         fb:cc:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----