Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
File:                     j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft (raw, json)
Hash identifier:          qMEaDnXNOu84GFub9dBoT4gZ0OpTUEUZtV5ANq0CDzA=
Subject key identifier:   FD:A4:91:A1:55:BC:F2:21:3F:F3:67:E1:BB:D4:61:FD:76:B5:31:70
Authority key identifier: 8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
Certificate issuer:       /CN=8fad478776df320a8667e75e69e09efb73938b64
Certificate serial:       01934294069EDD1070202FD95797704946FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
Manifest number:          0820
Signing time:             Tue 19 Nov 2024 04:00:17 +0000
Manifest this update:     Tue 19 Nov 2024 04:00:17 +0000
Manifest next update:     Wed 20 Nov 2024 04:00:17 +0000
Files and hashes:         1: j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl (hash: p43K2JhUSEJonFC5H6LXCME2mUgy/imIAK1oIO/dWHg=)
                          2: oYXgundrAO0Q2b5rG68_0833RN8.roa (hash: /JHMdaSb5qI53jhZftTbpu9fAZ4kIfufYKYUXrQeJjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:42:94:06:9e:dd:10:70:20:2f:d9:57:97:70:49:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fad478776df320a8667e75e69e09efb73938b64
        Validity
            Not Before: Nov 19 04:00:17 2024 GMT
            Not After : Nov 20 04:00:17 2024 GMT
        Subject: CN=fda491a155bcf2213ff367e1bbd461fd76b53170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:cf:e3:18:49:4d:00:61:fc:0f:87:5e:51:
                    c8:ed:89:54:01:f1:7c:dc:e2:37:0d:b4:63:d8:59:
                    30:d1:fe:f8:2b:7b:f0:fa:ea:a5:f2:24:06:eb:81:
                    75:d5:46:c8:0a:fc:21:39:f0:b5:a3:f3:15:92:53:
                    33:38:8c:7b:d7:a2:d2:93:31:0b:23:d7:7b:14:91:
                    27:57:86:40:cd:2c:91:10:6c:40:4f:e9:ee:43:c8:
                    64:c9:a8:f7:7e:fb:8b:c8:51:c0:7a:23:6c:a1:76:
                    d1:66:b5:fc:18:b0:34:21:ed:2d:dd:d1:34:fa:55:
                    1e:d4:43:fd:3d:03:e7:4c:ed:d1:79:46:4f:ce:c5:
                    89:f0:fd:e5:b2:ef:c0:01:41:bd:bd:f6:e6:2d:54:
                    13:9a:88:80:88:82:af:2d:bc:e4:e9:11:8e:da:6a:
                    d3:b8:08:56:49:f8:0e:30:5a:89:cf:bc:6c:dd:cd:
                    e2:59:b6:62:fe:98:01:b7:97:7d:55:f6:ff:af:78:
                    ea:2c:63:a0:7d:0c:b5:63:79:89:e3:07:a9:7b:9f:
                    84:0c:27:05:1e:45:be:ca:1c:8d:d0:99:da:0a:f0:
                    e0:bf:62:09:86:f4:38:79:a0:c9:f9:e1:fc:1f:da:
                    13:2a:4e:77:ae:23:e1:7d:13:8c:ed:46:b4:c4:75:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:91:A1:55:BC:F2:21:3F:F3:67:E1:BB:D4:61:FD:76:B5:31:70
            X509v3 Authority Key Identifier:
                keyid:8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:91:ae:55:c8:06:5e:41:14:e6:d0:f4:d6:a9:a7:04:b6:
         dd:95:3d:89:e0:b6:5f:16:0e:00:67:74:35:84:88:72:28:7e:
         c3:bc:18:c8:2c:b0:83:2f:aa:cf:f6:85:4e:94:d0:15:eb:16:
         94:d3:c3:5f:2e:3a:c1:f7:7a:29:ab:f2:5f:c1:2a:b9:40:75:
         f2:4f:12:2a:44:46:bd:e7:33:34:40:2a:97:84:00:94:e9:4d:
         72:8c:81:ba:43:0a:de:0c:2f:46:fb:c8:dc:8f:6d:d8:27:73:
         9a:80:7d:c0:c3:11:df:1d:e9:39:44:8c:5e:76:ee:68:c9:bd:
         2d:46:da:1d:2c:61:7d:9a:c5:30:ac:d1:72:63:ab:c2:14:63:
         3c:45:bf:97:e9:0e:d2:81:d0:ca:86:45:e0:f2:df:5d:c9:d7:
         5d:22:e4:4c:61:c9:74:9b:c8:32:51:99:ab:10:93:ad:eb:92:
         0a:2c:8b:24:bf:af:f3:7f:b9:ed:c8:ce:4f:c5:7a:91:07:14:
         28:6d:ad:61:db:d1:2c:ae:21:a9:1f:49:df:cd:09:9f:85:65:
         5f:9c:a6:1b:43:d4:56:93:d0:47:3c:d7:b6:c2:da:66:0a:a1:
         10:26:3b:0b:c6:0d:76:12:99:97:17:2e:59:6c:56:fc:81:69:
         30:e0:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----