Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
File:                     3US-a6WvErbxcHhT3NrL2n5CISs.mft (raw, json)
Hash identifier:          4IhxgZLtvDoVb73q5cxl9orcJ8r74+hJwq5Hiijb+QU=
Subject key identifier:   2A:E9:AA:D7:61:9E:84:B2:80:1D:95:17:D7:07:BA:07:E1:86:52:2A
Authority key identifier: DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
Certificate issuer:       /CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
Certificate serial:       01910270CED1BBDD99C2F39661434E9E514B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
Manifest number:          0359
Signing time:             Tue 30 Jul 2024 07:00:33 +0000
Manifest this update:     Tue 30 Jul 2024 07:00:33 +0000
Manifest next update:     Wed 31 Jul 2024 07:00:33 +0000
Files and hashes:         1: 3US-a6WvErbxcHhT3NrL2n5CISs.crl (hash: BBaPv8PuMoCorqujJks/ZsS2pl17Exnt6QcPXIxmrnU=)
                          2: vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa (hash: 96ah2hnF9/msbPNKe26/Uqc4+HOkFux8zriQgiojiIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:02:70:ce:d1:bb:dd:99:c2:f3:96:61:43:4e:9e:51:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
        Validity
            Not Before: Jul 30 07:00:33 2024 GMT
            Not After : Jul 31 07:00:33 2024 GMT
        Subject: CN=2ae9aad7619e84b2801d9517d707ba07e186522a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:53:0d:8f:82:52:bc:74:c0:80:4d:16:f8:
                    2a:4e:a3:99:1a:03:e2:7d:3f:44:07:3c:9f:c5:70:
                    a6:9b:ca:cb:e4:e2:b2:b1:cc:ce:14:e5:27:d9:74:
                    a6:45:61:41:41:a6:75:fc:13:1c:56:ee:cf:f8:48:
                    b8:e0:f6:1c:4a:c7:02:d3:77:ca:4e:77:6b:32:18:
                    aa:e7:46:a5:9d:f4:ec:c9:69:ef:b7:2a:7a:f5:9b:
                    3c:08:d2:bc:df:9f:0d:bd:fe:8b:7e:3f:8f:64:64:
                    0c:11:7e:60:15:0c:f5:a1:81:e9:de:aa:b7:23:ef:
                    25:75:95:1e:1e:49:48:93:30:4c:f3:83:9c:6b:82:
                    19:48:ba:3b:58:ba:ca:c5:4c:48:85:82:35:e3:7e:
                    d9:2f:5a:f1:d2:54:da:05:40:d8:72:71:6e:d6:00:
                    4a:89:ed:30:0c:47:c6:7f:2b:a3:b8:c7:11:68:9d:
                    10:cf:c4:1c:df:a2:7e:42:4b:c3:89:e3:78:5c:74:
                    8d:da:c1:96:30:d8:f6:e4:1e:2a:b9:0d:76:a7:9e:
                    4c:2f:6c:62:61:fa:0e:5b:4b:7c:c1:7a:20:2c:f2:
                    c5:ac:35:7b:90:dd:70:8b:91:35:de:42:e7:b6:2f:
                    0a:4f:18:cb:95:7a:64:16:a8:79:a4:25:79:d9:55:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E9:AA:D7:61:9E:84:B2:80:1D:95:17:D7:07:BA:07:E1:86:52:2A
            X509v3 Authority Key Identifier:
                keyid:DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:53:5c:73:82:a2:3a:16:9e:2c:8b:fa:80:00:ec:75:cf:
         1e:88:81:95:d1:a5:2d:db:78:25:5e:8d:64:72:a6:2f:a0:52:
         1e:85:05:99:09:ca:d2:e7:2b:fb:3e:a3:d8:4d:99:16:31:8c:
         08:d3:df:f6:af:80:56:01:0e:2a:8e:b9:7e:e1:a9:30:c8:f7:
         22:c1:ad:e2:75:7c:84:44:47:2c:2a:71:d5:fe:1d:44:09:2c:
         f2:d9:29:28:91:02:07:34:4a:c2:ac:23:79:ca:7d:22:a5:d9:
         a9:21:7a:29:c2:6e:43:d2:b1:38:93:b2:b6:95:3d:db:26:c8:
         5b:23:df:85:8b:e2:53:45:dc:c9:77:b9:f7:da:c7:2a:67:16:
         6b:b7:96:a7:77:fb:25:07:54:4d:3d:66:2d:d3:6f:30:02:ae:
         22:1a:d1:97:4c:bf:62:b3:b9:3b:78:fe:44:d2:c5:e6:f6:c9:
         0f:55:e3:1f:1d:c2:ca:9a:30:6f:4e:80:36:33:37:80:51:c9:
         0d:06:cf:1c:a9:b6:50:f3:90:38:c1:ef:17:94:89:c2:83:4a:
         ee:f5:fe:df:de:4f:87:93:f9:82:1b:33:bf:0b:68:3e:5e:cf:
         d0:01:84:90:26:6b:a3:56:25:70:ef:cd:c8:90:0a:5c:80:94:
         3f:9e:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----