Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.mft
File:                     _OL9jfGiZs4TRX--D5OLmr46p2E.mft (raw, json)
Hash identifier:          qtDgVXYwSGN1AxPgQvkNGxgVAUyxMBEw+kMyAYc0f/8=
Subject key identifier:   A5:07:B0:1E:8E:6C:0A:7C:BB:F6:F2:15:FC:F3:0C:31:49:80:9C:42
Authority key identifier: FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61
Certificate issuer:       /CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
Certificate serial:       01924598483EE46F5B73227CC48B9F48F7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.mft
Manifest number:          0ADB
Signing time:             Tue 01 Oct 2024 01:01:00 +0000
Manifest this update:     Tue 01 Oct 2024 01:01:00 +0000
Manifest next update:     Wed 02 Oct 2024 01:01:00 +0000
Files and hashes:         1: _OL9jfGiZs4TRX--D5OLmr46p2E.crl (hash: QhARe7fYMcrJ3wprOMwbTl8mM65KvhUwm4GjcxvQbBA=)
                          2: eazYePfL3_jfqDk6TKN_wiHnhTU.roa (hash: jgupbX4hbOfoZMyCTRMV/RYNtV1nQTMF4iNFrNHzZK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:45:98:48:3e:e4:6f:5b:73:22:7c:c4:8b:9f:48:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
        Validity
            Not Before: Oct  1 01:01:00 2024 GMT
            Not After : Oct  2 01:01:00 2024 GMT
        Subject: CN=a507b01e8e6c0a7cbbf6f215fcf30c3149809c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:c4:c3:27:f0:74:82:d9:2a:e6:e2:d5:be:
                    21:14:d8:f8:55:4c:93:6f:48:a1:71:21:cf:0f:cf:
                    5e:3a:4d:ce:41:96:72:26:18:d1:26:d3:b3:eb:49:
                    34:5a:37:2d:68:e1:da:54:b6:21:0d:74:17:85:3b:
                    e5:91:f0:bb:36:a1:74:e1:30:9f:fc:da:88:a2:e0:
                    78:25:a2:63:c7:25:9a:c7:98:91:89:2c:93:de:a8:
                    73:20:8e:8a:6c:ce:ae:38:17:5d:2e:8d:94:98:b3:
                    c9:54:a9:a1:12:48:55:9c:c0:f0:5e:f3:46:42:84:
                    34:98:22:88:95:bc:cb:fc:f3:e9:3b:95:4d:fd:99:
                    62:d9:aa:ff:47:49:3b:62:1d:10:5e:9d:26:63:88:
                    27:d1:bc:71:0c:be:ee:e5:89:36:47:ee:f3:d4:e7:
                    4c:d6:ba:e4:41:ca:a8:eb:62:64:65:ec:8b:f4:ca:
                    a7:9d:57:35:95:b1:79:c3:d1:52:f7:77:d6:d8:e7:
                    31:50:aa:33:da:83:27:b9:0b:84:e9:ab:39:fb:49:
                    84:dd:b3:62:7d:03:55:44:a1:0a:24:96:32:68:f1:
                    88:03:5e:38:1e:5c:03:20:9e:86:8c:7b:73:d7:bc:
                    3a:cf:34:4a:d3:6e:53:7c:0a:e0:5d:a7:5a:bf:5d:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:B0:1E:8E:6C:0A:7C:BB:F6:F2:15:FC:F3:0C:31:49:80:9C:42
            X509v3 Authority Key Identifier:
                keyid:FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:a6:3e:d5:03:5b:b2:42:14:43:f3:25:4f:cf:4c:0b:2c:
         00:5f:28:79:73:d7:7f:be:ea:e2:21:0f:f0:29:ab:d5:16:56:
         60:b4:69:a9:95:a9:0a:07:9a:75:8f:bd:dc:00:90:52:bb:c0:
         15:bb:9f:62:54:c6:92:a4:ca:a7:54:58:1d:9a:a8:e1:57:b7:
         02:58:df:61:63:1c:dd:34:66:62:89:a5:ec:31:75:4a:2a:ba:
         23:6a:c2:a0:4d:db:81:1c:b1:fd:6f:c4:3d:6c:2f:06:67:94:
         55:6b:b2:a7:3b:c6:e8:b1:05:50:35:f3:7e:2f:ac:f7:2f:c2:
         c1:e6:9f:c3:c8:be:5c:54:fb:76:a4:6d:22:b6:eb:3a:66:7c:
         da:58:51:31:3f:26:03:95:e6:e4:fd:71:f5:1b:86:97:e9:dc:
         00:37:4b:1d:f1:a0:38:47:df:5c:65:e4:ad:ff:9f:ad:cd:b9:
         4a:29:1c:56:47:29:2e:23:89:0a:33:cf:36:e8:41:c7:9d:c4:
         0e:98:ac:15:86:07:49:c9:47:ea:a9:9c:6b:45:8e:65:52:b4:
         30:5b:21:6e:5d:33:02:90:ff:ba:2c:1d:ee:a6:ea:85:86:ef:
         07:ed:21:aa:23:39:2d:0f:67:ec:53:13:00:50:80:56:e9:57:
         2e:63:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----