Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.mft
File:                     EmCOcYGjA98ESRGrTy1Rwoh-8ng.mft (raw, json)
Hash identifier:          8zUSSQ9yKgMcxylm2k8KgH32cxtTvsacKVOi5c0bfII=
Subject key identifier:   C8:F5:D7:15:D7:AB:5B:7C:58:C0:4B:80:CF:C0:81:8B:01:D7:40:F8
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Certificate issuer:       /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial:       018DBE054CE5D6B5E92131F9FDBF8555A308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.mft
Manifest number:          03D5
Signing time:             Sun 18 Feb 2024 21:00:34 +0000
Manifest this update:     Sun 18 Feb 2024 21:00:34 +0000
Manifest next update:     Mon 19 Feb 2024 21:00:34 +0000
Files and hashes:         1: EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl (hash: 4dttdC4dlMceWpCTPj9lpDTR23HRTbuNQlMeGJypH1M=)
                          2: hgZUFKRCEOtM8VRJs8iuqTcS0RY.roa (hash: qbXWtmvSaTPHc1UdF5oASpVYjtU8LcEIT6YYqulmeZQ=)
                          3: iuZjl9CKMz5AIivGgsTijXXQYdg.roa (hash: Yj/ULH+iJ+RcCmDEq38ZP9pN6bkR/EBEPXb5v+mQUjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:be:05:4c:e5:d6:b5:e9:21:31:f9:fd:bf:85:55:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
        Validity
            Not Before: Feb 18 21:00:34 2024 GMT
            Not After : Feb 19 21:00:34 2024 GMT
        Subject: CN=c8f5d715d7ab5b7c58c04b80cfc0818b01d740f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:13:7c:d2:f7:06:f0:c2:68:53:1f:fd:f7:
                    42:2a:fe:7e:78:90:ce:85:90:bb:80:14:4d:3c:ce:
                    37:4f:e3:13:cd:4b:36:4a:78:e7:11:8e:13:c2:46:
                    fe:f6:f2:fb:9f:76:a4:ac:a1:84:64:cf:6b:6f:c4:
                    ee:c8:36:c3:af:59:4b:d8:e7:fa:de:21:cd:41:1f:
                    b2:a1:53:98:00:d1:64:1d:30:c0:17:b2:9f:32:9d:
                    29:9a:f3:fc:f5:c3:e0:d7:a6:30:bb:e0:58:22:2e:
                    de:2b:e4:e1:0e:66:54:9b:bf:64:a3:2b:eb:76:cb:
                    cb:89:fd:aa:ec:d7:5a:ba:fd:4a:9d:51:7b:54:eb:
                    06:b0:cc:cf:bc:07:65:40:81:b0:e6:84:c7:65:87:
                    d6:79:7e:4f:86:6a:c0:46:43:8d:9a:7c:44:51:96:
                    9c:c9:c8:6e:7c:f4:f9:c4:58:49:3a:af:d8:ea:21:
                    3b:d9:69:07:c9:6e:23:06:c9:4d:f9:39:8d:ed:41:
                    66:dd:1c:4a:e9:4f:ee:a3:1b:dc:2d:b4:fb:7e:0f:
                    e8:ca:54:b2:eb:4f:ff:c1:4b:af:e0:18:7a:e6:18:
                    98:0d:e9:95:09:a4:70:83:67:52:b2:81:39:80:d6:
                    8f:ef:a1:bf:0b:dc:5d:cb:0f:fb:45:29:f5:cd:50:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:D7:15:D7:AB:5B:7C:58:C0:4B:80:CF:C0:81:8B:01:D7:40:F8
            X509v3 Authority Key Identifier:
                keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:22:2a:ca:ab:1d:27:60:9a:1c:0e:f4:d3:d7:18:f1:4a:
         c5:45:f7:62:4d:a2:d5:55:8a:7e:b0:5d:e6:21:34:70:1f:38:
         4d:6e:af:a0:2b:69:1e:de:03:37:fa:11:73:ad:63:9f:8f:35:
         f3:26:10:bd:cb:29:e3:a1:ac:1e:33:ea:97:a0:92:d1:1d:71:
         3d:ab:ad:ae:f3:1d:96:bd:b3:84:c5:f2:6f:af:25:fd:7c:91:
         61:e7:3b:1c:87:2f:b2:2c:fc:7d:b2:43:30:6a:12:e5:bb:00:
         5b:89:3f:fa:22:68:99:b9:8a:d3:43:6f:55:43:e6:95:05:a2:
         df:4e:30:4c:83:32:56:81:d9:db:79:01:e8:ab:db:f6:89:24:
         df:8f:9f:aa:12:2e:3f:8a:3f:22:0a:d0:1b:4b:05:87:53:db:
         cc:e6:2f:9d:a8:33:dc:d4:7f:88:23:62:a0:1a:75:1b:71:f3:
         89:b7:d7:f9:01:26:fd:e0:e0:3f:8e:99:e1:e8:50:08:59:10:
         01:73:0a:07:6f:e3:41:44:1a:b4:64:20:f0:a8:93:6d:2b:93:
         e7:1f:1d:9d:d3:bf:9d:f1:e0:3e:06:39:df:69:47:37:7d:3b:
         20:e1:72:36:f3:f8:1f:f4:fd:6b:6f:f0:66:28:b8:34:e7:bc:
         1e:3f:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----