Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
File:                     nWz2idSa8woXuBDn8nWHL9kW2Fg.mft (raw, json)
Hash identifier:          6rJT/24AVBV5gZiOJygufq6DxLu/mNEhuhqKRWMG9zg=
Subject key identifier:   C3:30:59:FE:1A:80:9A:3F:F4:9B:AB:8D:B7:4B:B2:16:F1:01:6A:EE
Authority key identifier: 9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58
Certificate issuer:       /CN=9d6cf689d49af30a17b810e7f275872fd916d858
Certificate serial:       0191B03FB632BC7855FA822EB59C2CA1A913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
Manifest number:          0FD9
Signing time:             Mon 02 Sep 2024 01:00:50 +0000
Manifest this update:     Mon 02 Sep 2024 01:00:50 +0000
Manifest next update:     Tue 03 Sep 2024 01:00:50 +0000
Files and hashes:         1: nWz2idSa8woXuBDn8nWHL9kW2Fg.crl (hash: Eewf3i74eC88pBSbymecqOikvKLmFCs/jdQPEl2W+lo=)
                          2: znLYZSL3YAQNdkfHzNbWKOUbkh0.roa (hash: P7CNuC8WCM8tvTHHiMT2A6wFA7wqdSAvJX07I3mTRwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b0:3f:b6:32:bc:78:55:fa:82:2e:b5:9c:2c:a1:a9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6cf689d49af30a17b810e7f275872fd916d858
        Validity
            Not Before: Sep  2 01:00:50 2024 GMT
            Not After : Sep  3 01:00:50 2024 GMT
        Subject: CN=c33059fe1a809a3ff49bab8db74bb216f1016aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:7d:20:33:24:ed:2a:bf:c9:e4:7b:8b:ee:
                    15:83:a6:41:54:df:03:ea:e2:d9:e9:3c:00:ae:e3:
                    83:b5:da:43:e3:18:87:35:b4:93:6b:29:af:67:02:
                    98:c2:5b:48:0e:f9:e6:50:47:c7:b1:74:0e:38:85:
                    fa:ba:fd:b9:b1:3d:a1:23:46:8c:c1:14:b9:09:18:
                    67:2f:a8:f6:1d:ec:2a:93:fa:fc:e3:ca:8c:29:4e:
                    1f:e4:f3:f7:49:54:6f:a7:ad:94:04:5c:b2:d1:35:
                    0a:25:36:a9:bb:38:27:ec:ae:3f:20:00:54:f9:2c:
                    e8:be:85:99:71:90:e0:1b:47:59:c9:68:74:d2:b6:
                    6d:e6:a7:21:c1:e6:98:a5:72:f9:5b:46:4a:31:17:
                    67:2e:bc:45:85:9f:42:f1:36:cb:b9:ae:30:7f:b5:
                    b6:5d:d5:40:01:ff:cb:25:c3:0b:21:be:87:23:e7:
                    8f:43:ba:db:ad:c3:42:18:b8:56:d3:00:9b:f2:f9:
                    15:52:8b:44:fa:19:ff:17:95:d4:30:e9:5c:cf:77:
                    75:c5:ad:4d:b1:9d:56:e8:46:df:b1:17:f5:6f:05:
                    39:c7:28:65:4e:19:bc:cd:f6:68:45:5d:db:d4:53:
                    1b:21:3d:fb:05:96:bb:6a:86:1e:30:88:25:62:68:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:59:FE:1A:80:9A:3F:F4:9B:AB:8D:B7:4B:B2:16:F1:01:6A:EE
            X509v3 Authority Key Identifier:
                keyid:9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:c9:cb:56:a2:bc:8d:d0:7f:e6:ad:77:61:1f:ef:c4:df:
         09:2c:6c:c2:aa:15:87:29:c6:2d:63:50:f9:aa:02:05:b5:39:
         b6:bb:92:63:df:5a:77:5f:97:e9:f4:ae:d1:0c:e3:ec:66:58:
         b4:ec:68:20:26:5d:6a:ae:68:bf:af:aa:33:2c:1f:72:c5:93:
         7a:ad:52:d9:58:a4:c5:7e:41:b4:19:c6:c2:33:62:33:3e:bb:
         0e:fc:24:b7:c5:71:7c:f5:cb:f7:64:1b:47:fc:13:4f:aa:96:
         7f:a6:c0:93:c2:72:28:f8:7d:db:a5:4b:3e:27:65:ad:61:27:
         c6:41:ed:ba:98:c4:7c:00:a5:bd:50:58:e6:bb:8d:a3:12:81:
         bb:71:45:9c:b0:47:2e:f6:94:ce:aa:f2:96:74:1d:66:52:62:
         11:39:72:45:2d:8e:56:9d:0e:e0:d6:e1:28:54:05:29:8e:41:
         e1:af:9d:e2:96:70:40:72:02:af:c6:88:37:ce:2e:7b:ae:96:
         c7:03:4b:37:a9:ef:60:d1:81:ae:02:75:0e:db:e9:4b:03:15:
         7d:02:33:36:89:8a:95:67:02:35:75:4d:64:a3:9c:69:14:15:
         70:8e:9a:a0:20:3b:74:7d:d3:b3:01:6b:10:7d:7b:79:ab:a2:
         30:44:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----