Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5aa39-f513-4c88-b477-a19f143ebb89/1/_UDkdvclNNhlsuJnZpHvxys2xYc.mft
File:                     _UDkdvclNNhlsuJnZpHvxys2xYc.mft (raw, json)
Hash identifier:          re10KzTynBGFc5GW+bq5xOGKE2xsZNdycIMtQbcGMcQ=
Subject key identifier:   A8:DA:DA:9F:66:3F:7B:96:B5:44:D5:97:A4:3E:E2:5B:69:AE:49:9F
Authority key identifier: FD:40:E4:76:F7:25:34:D8:65:B2:E2:67:66:91:EF:C7:2B:36:C5:87
Certificate issuer:       /CN=fd40e476f72534d865b2e2676691efc72b36c587
Certificate serial:       01909B745D072E8A72D67FBFD1D8607ADA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_UDkdvclNNhlsuJnZpHvxys2xYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a5aa39-f513-4c88-b477-a19f143ebb89/1/_UDkdvclNNhlsuJnZpHvxys2xYc.mft
Manifest number:          08D5
Signing time:             Wed 10 Jul 2024 07:03:32 +0000
Manifest this update:     Wed 10 Jul 2024 07:03:32 +0000
Manifest next update:     Thu 11 Jul 2024 07:03:32 +0000
Files and hashes:         1: D1V3eqfCi_gBjQrEfM2Vu5Y6g1Y.roa (hash: GSVUO1UiPoHFczsn7GU9AZVRDGND4CmgVKnMFmB7xZU=)
                          2: _UDkdvclNNhlsuJnZpHvxys2xYc.crl (hash: CDA0If7n7VJAzOktFdZqIOjGMLjZd+JPmVNWUgZJjUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9b:74:5d:07:2e:8a:72:d6:7f:bf:d1:d8:60:7a:da:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd40e476f72534d865b2e2676691efc72b36c587
        Validity
            Not Before: Jul 10 07:03:32 2024 GMT
            Not After : Jul 11 07:03:32 2024 GMT
        Subject: CN=a8dada9f663f7b96b544d597a43ee25b69ae499f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:08:24:d6:36:4f:76:76:ea:58:ea:74:5d:
                    39:19:08:ad:23:fd:59:05:96:7d:fd:16:bd:b2:94:
                    ba:8c:e6:a3:a3:df:5d:3b:10:da:7c:82:67:b6:05:
                    3d:af:4b:be:aa:14:fa:ed:65:1a:8b:d5:26:e3:6d:
                    74:9c:6c:69:3d:f4:22:0c:2d:f7:e0:aa:a6:74:9e:
                    d1:26:b4:a6:dc:60:a8:3a:c3:06:f4:fd:b9:a0:5e:
                    36:26:1a:1f:f8:7c:d7:3f:9e:f6:6b:7a:3a:f4:34:
                    5e:92:79:a9:aa:6d:c5:c9:c7:47:3a:b6:59:78:f8:
                    a5:8f:84:f6:55:31:df:bd:43:07:3a:30:b8:05:12:
                    cd:d9:94:41:ba:e9:e3:0f:5f:86:6a:07:f1:c7:e3:
                    95:34:ac:79:16:dc:96:88:a8:95:62:8e:df:7b:91:
                    29:9a:2a:8e:e6:b7:76:76:2a:91:ad:07:4c:e5:98:
                    b0:d4:3e:a0:03:a8:72:0e:03:b0:fb:03:60:c9:08:
                    71:93:3b:06:9f:d6:65:ae:ee:d7:8c:79:a4:05:0e:
                    83:90:b7:44:17:39:e4:0b:e2:cd:16:6d:17:14:91:
                    6f:b1:64:7e:be:69:11:ef:3e:e9:3f:1c:6e:ac:9a:
                    6d:1f:a1:6a:3e:8f:0c:72:83:98:3b:a5:7b:6b:f4:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DA:DA:9F:66:3F:7B:96:B5:44:D5:97:A4:3E:E2:5B:69:AE:49:9F
            X509v3 Authority Key Identifier:
                keyid:FD:40:E4:76:F7:25:34:D8:65:B2:E2:67:66:91:EF:C7:2B:36:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UDkdvclNNhlsuJnZpHvxys2xYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5aa39-f513-4c88-b477-a19f143ebb89/1/_UDkdvclNNhlsuJnZpHvxys2xYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5aa39-f513-4c88-b477-a19f143ebb89/1/_UDkdvclNNhlsuJnZpHvxys2xYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:f0:d4:a5:f4:e4:02:27:9e:41:70:85:f3:80:12:51:c9:
         5d:4a:ad:e7:e6:66:08:5a:20:73:e5:cd:12:00:58:f5:5d:5e:
         46:37:79:3b:cf:f9:2d:d7:6a:61:ea:14:d4:0a:c6:67:06:9a:
         28:26:f1:40:e5:5b:a0:cf:a9:22:0a:0c:f2:77:ca:bc:ba:08:
         a4:1d:42:61:c1:fb:7c:30:a5:5e:99:f5:f4:31:dc:75:50:e4:
         24:72:b7:72:57:8b:28:f5:ee:2f:c2:4d:18:d3:fc:54:e7:ba:
         6b:ae:9c:3a:3b:95:05:3a:ef:c3:16:f4:b0:03:9a:3d:2e:e1:
         30:74:f1:4f:ed:d7:92:d5:b6:83:79:a9:62:e0:b6:56:0f:f2:
         73:db:2e:f2:ce:03:95:89:0f:c8:44:87:8b:3a:46:c0:2e:04:
         ce:25:a8:49:21:a5:06:45:71:8e:79:a5:e3:9b:18:32:5f:2b:
         46:c9:93:6d:2b:38:89:b3:cd:79:85:3c:50:e3:16:a9:26:56:
         82:fd:1b:15:fd:64:90:c6:1e:e7:16:1f:63:80:2c:5a:da:5e:
         05:ac:0a:6d:c1:90:37:28:72:29:d5:87:66:81:3f:15:47:6b:
         65:c1:7c:3d:67:30:f2:f8:7b:0b:bf:11:de:7a:82:39:4d:64:
         cc:aa:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----