Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.mft
File:                     qM-s4RTYzeptxeekmUPzIjRss10.mft (raw, json)
Hash identifier:          NUT4jRxzVtReJU9SKNUV+5OQoneldhv0W2rNKTzH0+U=
Subject key identifier:   8C:12:6E:92:A4:85:14:62:AB:28:9B:6D:20:01:77:C8:0B:45:70:94
Authority key identifier: A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
Certificate issuer:       /CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Certificate serial:       01914E9E27E0FE428304C6AEF915AA45245E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.mft
Manifest number:          126D
Signing time:             Wed 14 Aug 2024 02:01:13 +0000
Manifest this update:     Wed 14 Aug 2024 02:01:13 +0000
Manifest next update:     Thu 15 Aug 2024 02:01:13 +0000
Files and hashes:         1: PEUa4fkURnkMVSHNA-FBQGb2mbw.roa (hash: axqvWVcR7uLuWw6lmXO72kHQb675NpX+qUqsUX6y9rM=)
                          2: W4zdSWBDoDgPhiOZ2_vQTaprLzI.roa (hash: EHrI/+qgk9JfAehxcbL+ot05VpiYO4cWHGWnq73uOLA=)
                          3: qM-s4RTYzeptxeekmUPzIjRss10.crl (hash: JJp/1R586jpcUBExIPaiJgQ9fHHBgv/9zbRFXeSnOeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4e:9e:27:e0:fe:42:83:04:c6:ae:f9:15:aa:45:24:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
        Validity
            Not Before: Aug 14 02:01:13 2024 GMT
            Not After : Aug 15 02:01:13 2024 GMT
        Subject: CN=8c126e92a4851462ab289b6d200177c80b457094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:b1:73:d2:86:20:3e:d5:66:83:fb:c5:b8:
                    34:00:ce:9f:9f:7c:33:36:12:1d:2a:7a:01:1f:9c:
                    5f:53:ce:dd:d8:0d:66:a1:62:66:86:ad:f5:47:fe:
                    b3:0d:88:a5:6e:bd:4c:83:c3:51:62:e8:96:69:61:
                    bb:c7:e2:31:e5:3d:e0:dd:0d:40:7f:7d:f5:0b:6c:
                    e9:94:60:04:1d:f4:f0:06:67:d3:c9:62:35:ab:29:
                    45:06:4e:ce:24:00:f5:14:94:50:59:1e:58:b7:3e:
                    c6:17:2b:4d:6d:44:94:c9:1e:9f:b3:0d:c5:a5:02:
                    77:ce:e2:7f:ef:81:10:64:53:9e:c6:05:d8:a7:b2:
                    43:7d:ee:98:f1:1a:8e:41:f7:f2:b8:b5:83:69:5b:
                    94:db:14:59:66:54:59:9a:be:a0:24:fe:dd:0e:46:
                    c6:a6:c8:b9:c7:9a:9b:21:c3:7d:19:cc:c7:a4:d1:
                    e5:ec:39:72:ec:03:1b:de:67:66:c4:ba:58:52:c7:
                    d1:55:7c:2c:e3:07:09:2e:f4:de:df:e7:99:87:41:
                    4a:56:4d:d8:f1:c5:57:95:25:44:e1:df:2c:da:17:
                    57:71:d5:86:ad:f2:b5:9d:c2:c5:ef:96:52:5d:c0:
                    ca:20:5a:22:7c:a0:60:59:77:e9:08:0e:5a:54:98:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:6E:92:A4:85:14:62:AB:28:9B:6D:20:01:77:C8:0B:45:70:94
            X509v3 Authority Key Identifier:
                keyid:A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:ae:bd:de:eb:89:48:cf:b3:d7:16:06:73:5d:a3:ef:27:
         85:9f:16:e6:37:d9:5e:8c:0a:f9:1e:2c:f7:de:25:1e:75:b3:
         63:ab:ba:80:b8:4c:6c:08:a8:8a:d1:91:e7:a7:bf:e5:f2:40:
         e0:9b:9d:d3:5f:5b:03:51:c9:ac:3a:1b:f4:52:9c:c6:88:21:
         38:39:fd:fb:1e:a4:9c:ec:72:49:96:61:5e:b7:eb:ff:3c:4f:
         f9:19:c2:dd:31:80:a3:d6:4f:21:01:0e:02:21:a9:bc:9b:86:
         9d:06:48:c0:15:58:67:70:77:7d:c9:55:0a:09:08:fc:3f:a3:
         a8:ab:86:70:1f:a1:28:0a:fd:de:2f:8d:6f:93:e2:21:67:82:
         7d:73:dd:f6:a6:41:bd:6d:f1:8c:0f:2a:fc:fd:6c:25:85:6c:
         24:e0:65:15:31:c1:ed:95:a1:ac:b9:55:aa:26:ad:c9:f6:4b:
         ac:66:1e:80:8f:be:92:b3:07:a9:43:c0:a4:cd:e7:04:32:4e:
         79:fa:ac:8e:60:e4:f2:43:f6:99:61:e3:5c:d1:f3:58:50:d6:
         ec:c8:f3:4f:23:85:2b:35:1f:fa:ac:99:77:57:35:58:37:9f:
         d6:65:41:86:4b:b4:78:ec:81:7e:9e:80:d8:1c:0f:d0:3e:23:
         9f:b0:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----