Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.mft
File:                     mMEf0DTv-RV1VPVe4oNNs7KfzDU.mft (raw, json)
Hash identifier:          frO0Nni/Xah6iRhCmOHqtXxzriVb6o+VEMgnqpRVypk=
Subject key identifier:   9A:C9:B0:3C:78:FC:82:EA:7D:FB:96:D4:5E:4E:CA:87:F3:8B:6C:C2
Authority key identifier: 98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
Certificate issuer:       /CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Certificate serial:       018DA70FBE6357D84602E994EF9B8141E851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.mft
Manifest number:          107D
Signing time:             Wed 14 Feb 2024 10:00:43 +0000
Manifest this update:     Wed 14 Feb 2024 10:00:43 +0000
Manifest next update:     Thu 15 Feb 2024 10:00:43 +0000
Files and hashes:         1: VsN-YecAUCQ2g_ExsM6vd5g2A1Y.roa (hash: g55gbCdsvKLFjGlu1kG1V8IkM9JzQzF1bn05JNWU8tQ=)
                          2: mMEf0DTv-RV1VPVe4oNNs7KfzDU.crl (hash: cg1E9Eb00GFPI9upO9OnXH2NnrYB/EkOS/ob+k/QLC4=)
                          3: qTiWeB9kUb5uEKViq7dUwWFyuiM.roa (hash: 5uUk++sI1D+6/gd9cT1yztnXor1zM349YFu5S9eUdrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a7:0f:be:63:57:d8:46:02:e9:94:ef:9b:81:41:e8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c11fd034eff9157554f55ee2834db3b29fcc35
        Validity
            Not Before: Feb 14 10:00:43 2024 GMT
            Not After : Feb 15 10:00:43 2024 GMT
        Subject: CN=9ac9b03c78fc82ea7dfb96d45e4eca87f38b6cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:3a:ff:c2:d0:f5:42:e2:4a:62:86:5a:c2:
                    21:68:9b:85:76:10:56:50:da:ef:a9:83:3b:8a:d8:
                    c2:03:ad:a5:3c:63:a1:9d:f6:2d:ca:53:67:c4:29:
                    82:5b:39:d3:0b:8f:17:10:b0:6c:6b:79:48:f3:db:
                    0b:1f:9a:c7:fe:f0:48:59:3e:07:4b:5b:9d:dd:64:
                    4f:64:53:da:70:d4:89:64:96:26:ab:ed:cc:d1:2a:
                    fa:4b:f1:29:f5:eb:8b:6e:ce:d7:dc:64:1c:b9:a4:
                    05:3a:d3:16:d2:af:00:d1:2c:03:33:b6:45:37:eb:
                    db:a0:f5:d4:1c:10:01:07:a2:34:cc:5b:b2:dd:48:
                    68:47:43:03:2e:19:81:81:ad:0d:70:90:c0:cf:b2:
                    2d:03:f9:e7:b8:55:39:e0:90:ac:db:6d:62:b4:0c:
                    15:e0:d6:ec:8e:2c:be:d6:04:5c:33:00:94:d4:9d:
                    30:c4:3f:be:a6:6a:29:af:6d:8e:87:3d:53:fc:e2:
                    a4:24:13:a5:10:38:d5:96:06:13:a6:21:ee:7c:8d:
                    cd:42:6c:ea:3f:f3:66:d6:d1:1b:f5:31:7e:57:9c:
                    9d:ad:8b:97:8e:1d:d7:0b:15:ce:be:39:a7:75:0e:
                    5a:d0:7f:9d:e0:3a:84:00:f0:27:c3:12:58:90:fb:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:B0:3C:78:FC:82:EA:7D:FB:96:D4:5E:4E:CA:87:F3:8B:6C:C2
            X509v3 Authority Key Identifier:
                keyid:98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e4:94:09:3f:b5:19:a0:6d:62:93:9a:68:33:42:e6:eb:cb:
         eb:fa:20:4a:50:ed:5f:36:4c:fa:03:f2:f7:c9:8b:85:7d:6b:
         16:ba:f7:19:4c:85:92:f3:03:c8:04:be:66:96:31:8e:43:92:
         e5:06:74:59:29:bd:44:fd:ff:9e:04:fa:55:8b:3e:1b:68:0b:
         7e:fe:2a:d4:13:37:3b:9e:3b:ed:84:45:00:87:56:2e:25:9c:
         9e:9d:3c:8c:4d:28:62:01:48:d9:fc:c4:14:f6:50:f3:b3:8d:
         13:27:49:f7:3c:ba:bf:25:13:b1:ae:8f:d7:e9:28:5b:30:23:
         c9:8e:ff:3e:cb:4f:2d:35:ad:a8:00:36:5f:7b:c2:80:10:c1:
         5a:d9:12:39:12:04:e3:d8:b9:ca:2a:8f:cb:5c:ce:44:38:76:
         25:7c:e4:bc:b2:49:c4:06:8c:4e:8c:58:0d:07:78:e5:63:b1:
         00:49:e8:5b:43:0a:1b:df:af:db:25:a0:c8:dc:fa:a4:f3:57:
         25:2f:19:e8:d2:09:e8:42:9a:c6:99:ee:51:95:47:a1:b5:fe:
         4b:34:9a:41:8e:02:4d:05:88:b4:7f:5f:e8:2e:c0:95:3b:92:
         8f:59:a7:8c:9a:3f:c1:19:81:c9:4d:9d:91:20:88:01:ea:a2:
         8b:75:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----