Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.mft
File:                     RUvvc8WkdoeytcUnaw28Bwu5y1A.mft (raw, json)
Hash identifier:          J5lNJ+JTVc5jbwPs7MP1qTDDOm/XQq/8EDVKpWX7zVU=
Subject key identifier:   04:08:95:C0:51:30:08:39:EA:CE:48:00:C2:D0:E8:4F:9A:B1:1C:25
Authority key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Certificate issuer:       /CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Certificate serial:       018CC94EB50E342F72C6AC3B00836C0F3588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.mft
Manifest number:          094C
Signing time:             Tue 02 Jan 2024 08:33:47 +0000
Manifest this update:     Tue 02 Jan 2024 08:33:47 +0000
Manifest next update:     Wed 03 Jan 2024 08:33:47 +0000
Files and hashes:         1: RUvvc8WkdoeytcUnaw28Bwu5y1A.crl (hash: hJWJiwey4+MvfYYnS/Kfb7QRun0tkDg5uiGAtXBkcEA=)
                          2: xxxxWGJQOFXP14bkISKikgBrCz8.roa (hash: Go/fglYtMrUaXMnReXCKRj4gMjGi3hkRQACC4x5fkOs=)
                          3: yqVuyyRbIP4HzXK_jNChK8XkmNA.roa (hash: GjiUj1onUSJWOq1GzoR9QcOgnY4CfzwKWScIHoXpMhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:b5:0e:34:2f:72:c6:ac:3b:00:83:6c:0f:35:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
        Validity
            Not Before: Jan  2 08:33:47 2024 GMT
            Not After : Jan  3 08:33:47 2024 GMT
        Subject: CN=040895c051300839eace4800c2d0e84f9ab11c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:99:68:01:c3:98:17:79:f3:ab:57:3c:9b:
                    5d:33:1c:ef:d9:bd:04:8e:de:f9:9b:89:ef:f7:bc:
                    75:3b:96:d9:81:ce:21:bb:90:a9:a1:c2:f6:13:f7:
                    62:15:04:f0:c9:e5:18:51:e0:fb:01:fa:41:38:39:
                    74:c8:f4:9a:e8:02:92:56:bc:6e:24:3e:8b:a3:67:
                    84:b7:76:a2:64:dc:e1:1d:74:54:21:e1:c7:fb:42:
                    00:11:13:7e:20:8e:10:4d:43:ab:a6:02:30:29:dc:
                    b2:9e:b1:fd:b4:22:1d:7f:a1:77:76:7c:0a:f8:d7:
                    ba:9a:51:8c:b2:a4:de:0a:f5:80:ea:dc:50:6e:96:
                    44:9d:e7:7e:8b:f0:64:a5:84:74:44:5e:0d:13:c1:
                    cd:05:7a:86:07:13:2c:c4:ac:e6:24:95:99:f5:ac:
                    3c:81:a3:e6:e7:af:0b:03:76:16:af:66:da:cb:ce:
                    18:2c:61:36:ac:21:d3:d6:56:ff:d9:3e:62:c6:9e:
                    f1:1e:00:12:b5:d8:a3:3d:59:b8:f3:88:e0:c2:24:
                    42:9b:65:b2:5a:a7:14:5f:41:84:6d:46:9a:76:89:
                    e5:b9:72:d6:94:57:8f:c1:c6:9c:73:02:48:e6:90:
                    77:bb:53:29:03:93:0b:8b:65:8d:e5:7a:c9:7f:cd:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:08:95:C0:51:30:08:39:EA:CE:48:00:C2:D0:E8:4F:9A:B1:1C:25
            X509v3 Authority Key Identifier:
                keyid:45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:9b:88:77:97:94:aa:04:d9:64:ac:a5:81:f3:42:93:c3:
         36:bb:16:db:b8:fa:e0:8b:56:20:9e:f4:54:bf:75:92:de:29:
         f2:b6:92:d4:0e:af:9e:34:8d:78:4f:b7:89:d5:33:1d:9c:7a:
         c7:3d:7e:ea:2a:16:6f:2d:62:7e:58:72:f6:fa:ef:66:56:77:
         96:ed:91:9f:16:9d:fe:62:22:6c:b8:b5:c8:75:04:84:ea:32:
         b4:ea:3d:76:72:88:3a:29:f3:65:e8:fc:f3:87:b0:c6:b5:a5:
         9b:74:69:2b:e3:9e:98:65:db:ff:7c:65:a8:bb:53:11:3b:7e:
         2f:1a:67:ca:e8:b6:aa:eb:d1:a4:43:fa:3a:75:eb:79:e7:89:
         03:67:3f:3e:49:6f:33:e4:46:f3:3d:a8:32:b5:da:ed:e2:cf:
         0f:17:c7:67:6b:7b:7a:c8:73:af:ea:5b:29:cd:ae:88:eb:3f:
         2f:ad:5a:fd:65:d0:31:fc:e9:9e:e2:b2:07:92:62:d8:84:50:
         44:47:a9:9f:d4:63:16:96:3e:a6:d1:6a:bc:c3:ad:68:13:d1:
         a5:47:c6:9c:2a:3e:33:ab:d2:a6:5a:be:93:0a:cb:d7:4f:e7:
         f5:13:43:89:86:b6:4f:08:48:8d:00:b4:a6:41:83:05:51:ca:
         e3:15:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----