Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.mft
File:                     GIpGAYnuFKvO2nWZcZTMv-PFi2s.mft (raw, json)
Hash identifier:          EuN9XUOqPEYyURjcTcOMsl8SGPeDPeQ3lcN9XNddQpk=
Subject key identifier:   08:DD:04:E7:92:3F:66:59:ED:9E:BB:5B:9E:37:A1:F6:11:7B:E1:06
Authority key identifier: 18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
Certificate issuer:       /CN=188a460189ee14abceda75997194ccbfe3c58b6b
Certificate serial:       01914B307FF14431E5D031CF0A6491CA229F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.mft
Manifest number:          10A8
Signing time:             Tue 13 Aug 2024 10:02:35 +0000
Manifest this update:     Tue 13 Aug 2024 10:02:35 +0000
Manifest next update:     Wed 14 Aug 2024 10:02:35 +0000
Files and hashes:         1: GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl (hash: 9Eu+kT33YLCCGt7i2u3TbiXtIQT2gQUwp24jnXFoM9E=)
                          2: dGHvdq4GQ4sl4l98Bo5y5-clt0Q.roa (hash: /PgE3g4jZbQkEY1ayt/wklbnCOyED3fEnr6XZMTqKuM=)
                          3: qYm5_ZBkIHvjeiR2QXkd7kq4ygE.roa (hash: QdenYZejz+wUF3Z5BIryE97g1utt6QI4jTIq/LyfB/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4b:30:7f:f1:44:31:e5:d0:31:cf:0a:64:91:ca:22:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a460189ee14abceda75997194ccbfe3c58b6b
        Validity
            Not Before: Aug 13 10:02:35 2024 GMT
            Not After : Aug 14 10:02:35 2024 GMT
        Subject: CN=08dd04e7923f6659ed9ebb5b9e37a1f6117be106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:17:26:b3:d6:b9:95:8c:86:ae:10:2b:18:
                    bc:5e:04:2f:ef:51:13:48:60:46:28:37:df:b1:da:
                    04:fe:45:be:f0:d7:c7:18:92:26:27:52:81:04:c0:
                    8b:46:68:76:f7:e1:e3:52:9d:8b:e5:c1:ad:48:60:
                    57:3f:6c:4e:b8:29:63:c6:16:a6:46:cf:1d:8f:49:
                    f5:a7:23:75:6b:a5:f7:be:23:1b:09:66:ed:43:e6:
                    49:10:83:a0:38:e9:d7:bf:16:37:bd:51:97:11:aa:
                    c9:ab:52:37:c9:95:37:40:21:d5:f5:5a:23:1c:a6:
                    a6:0c:90:53:02:15:2e:36:b9:d3:3c:fe:7c:18:34:
                    88:f8:ff:13:fa:1d:84:50:74:38:b7:05:17:1a:ae:
                    77:8d:00:54:d6:9d:1f:07:25:77:dd:7a:d2:4e:5e:
                    94:b3:7e:1e:e2:ef:25:e0:14:a9:99:aa:be:5f:fc:
                    19:61:86:e6:45:41:2b:3c:ef:b0:a8:2e:70:52:74:
                    48:3c:ca:4b:b3:7a:5b:69:51:60:da:06:92:8b:18:
                    8e:a5:e9:7c:e6:71:bd:87:c6:ed:06:97:e9:15:ee:
                    ff:6b:24:b4:bd:91:32:07:5f:54:d2:ff:b7:b9:1a:
                    7c:4d:dd:f7:d1:7b:2c:55:94:c4:8b:e9:53:a9:a3:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:04:E7:92:3F:66:59:ED:9E:BB:5B:9E:37:A1:F6:11:7B:E1:06
            X509v3 Authority Key Identifier:
                keyid:18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:8f:ab:ce:a3:90:21:f1:24:ae:9c:19:39:48:01:bb:cd:
         b8:7f:f4:ef:8c:46:5f:c4:7e:a2:c0:d5:e3:cf:7e:b5:2c:14:
         dd:57:c3:4d:27:66:b3:e2:6c:7d:7c:44:72:f0:c8:45:5e:a2:
         5b:12:72:94:fe:2a:be:b5:8e:df:4a:88:15:26:56:65:cd:4e:
         9e:1d:01:06:db:80:34:f8:a3:ff:08:25:cb:a6:32:a7:15:04:
         bb:f7:f5:66:01:65:c7:b8:d0:2b:6d:c4:25:c8:11:41:84:c2:
         17:76:07:ba:f9:0a:78:2d:e3:49:e9:15:2e:8c:03:7d:9f:7a:
         97:d6:22:d5:ee:00:0c:00:d2:2f:79:b8:a5:73:62:74:1d:cf:
         52:ab:b6:41:f4:df:11:e2:a0:f8:fd:ac:a3:30:02:ae:48:88:
         57:fd:d5:64:19:c2:b4:12:92:f9:ea:04:41:22:6b:2a:2f:0d:
         62:36:03:62:4e:cb:37:5b:5c:0c:51:9b:b8:cc:4b:4a:83:fe:
         32:67:14:5f:0e:4c:e5:13:9e:62:bf:32:47:9d:ca:f9:21:53:
         af:6a:cd:73:5d:14:6e:00:95:e6:48:e9:05:9e:7c:9d:47:f0:
         ee:9a:c8:47:4a:95:49:7a:d9:84:30:28:1e:fe:55:09:ad:6a:
         4b:b4:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----