Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.mft
File:                     voEPs86DxiPHyYlPrbWVMQ1BgY8.mft (raw, json)
Hash identifier:          /MjI4buzE9HdWXYGxXAvulk3/6+xs4e1YKPwX0VoKJ4=
Subject key identifier:   C2:27:6F:38:37:8F:21:C4:0F:AC:60:1D:4D:52:35:BD:B4:6F:F5:CB
Authority key identifier: BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
Certificate issuer:       /CN=be810fb3ce83c623c7c9894fadb595310d41818f
Certificate serial:       0192C3C42A79C48143734DAAC235A46D737E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.mft
Manifest number:          1326
Signing time:             Fri 25 Oct 2024 13:01:05 +0000
Manifest this update:     Fri 25 Oct 2024 13:01:05 +0000
Manifest next update:     Sat 26 Oct 2024 13:01:05 +0000
Files and hashes:         1: 1taIIIiLKZJDhn0uGtc1frf-PS0.roa (hash: vduNRGfB0WA9by0AtRPJ6fodNUxU6+ztzR0mynL5dgw=)
                          2: voEPs86DxiPHyYlPrbWVMQ1BgY8.crl (hash: ZWu8Bn7h/0KpxtdD6o1pQVRmRuvbUIfVAG3npxr0ftg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:c3:c4:2a:79:c4:81:43:73:4d:aa:c2:35:a4:6d:73:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be810fb3ce83c623c7c9894fadb595310d41818f
        Validity
            Not Before: Oct 25 13:01:05 2024 GMT
            Not After : Oct 26 13:01:05 2024 GMT
        Subject: CN=c2276f38378f21c40fac601d4d5235bdb46ff5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:91:46:f4:b2:33:69:3f:49:26:44:80:ba:
                    e0:0b:b6:f7:54:dd:29:2e:92:e5:13:ee:42:cd:f2:
                    25:b5:8d:f6:18:dc:02:a1:f1:76:fe:93:8b:0d:21:
                    e2:fb:15:77:f6:89:95:82:30:e3:77:f0:6e:a7:d1:
                    15:be:36:99:8f:45:bc:da:c8:6f:37:d3:eb:07:cf:
                    ee:37:92:bb:45:ca:6f:79:7e:b0:7f:1d:01:0e:ba:
                    e7:64:9c:9e:bf:94:6c:c0:6c:1e:8a:07:53:4d:89:
                    25:66:7c:ed:45:9d:47:af:f2:9c:11:ac:4c:e7:fd:
                    55:57:3d:ea:f4:e9:f8:e1:53:76:91:cf:fd:12:36:
                    3d:2b:20:62:51:f9:ff:94:93:8d:ed:11:19:af:55:
                    14:6c:b3:4f:d5:28:2a:61:34:8c:24:70:4c:8e:90:
                    67:cc:38:24:ef:7f:fd:e7:ef:a1:b9:38:b6:c6:c3:
                    c1:6a:20:eb:7f:7d:83:33:66:2b:2d:64:ce:15:8d:
                    94:f2:cc:14:e1:e0:c7:51:f2:e9:5b:c4:a7:6e:46:
                    4a:03:ff:ab:ad:5c:a4:d2:22:cc:aa:29:ec:59:35:
                    44:76:8a:1c:d9:c9:08:23:56:4c:05:07:57:6e:df:
                    83:e5:b3:c9:a7:d2:88:33:4a:76:8a:ff:1b:42:39:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:27:6F:38:37:8F:21:C4:0F:AC:60:1D:4D:52:35:BD:B4:6F:F5:CB
            X509v3 Authority Key Identifier:
                keyid:BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:ae:26:49:36:13:00:26:c0:58:6f:95:0a:28:91:d7:90:
         df:a0:b1:84:40:04:5b:b3:44:12:53:cf:a5:5e:f6:f2:71:d8:
         27:b5:65:92:b7:c3:d2:cb:4e:bc:b1:b5:ae:15:a3:a3:40:54:
         f7:c9:24:a2:93:21:3d:e8:1c:0f:e1:4c:54:93:d6:42:f6:18:
         39:09:00:61:f7:2e:30:ed:d5:42:93:fe:b5:2a:7e:de:59:54:
         f3:2f:58:5f:d7:93:0e:60:4b:ba:cd:14:fd:7f:d1:23:8e:30:
         76:24:e2:20:0d:bb:96:a4:9d:f0:77:3d:49:21:39:a8:65:12:
         21:0f:f4:40:ee:e3:84:f6:5b:c6:f5:aa:38:87:ff:2c:35:0d:
         fe:00:fe:7d:dd:82:58:54:43:19:c6:18:4a:d9:dd:4d:f8:da:
         a2:29:00:42:3a:d0:b1:55:81:8f:2a:e1:d4:74:5e:02:bb:e4:
         44:86:22:c2:65:72:af:5a:dc:78:4d:3c:b8:be:e9:e9:da:40:
         99:e1:31:ef:b8:08:98:05:52:2f:49:da:66:c1:14:db:c3:1e:
         84:f5:a2:7a:06:8d:82:c7:55:31:03:39:3d:11:2b:00:89:33:
         1a:d4:56:1a:63:ba:b6:c2:08:f5:9a:1f:39:1a:ab:61:9a:87:
         f6:07:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----