Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.mft
File:                     3YLeTxMEM5_eUnugYDPKnlERcb0.mft (raw, json)
Hash identifier:          VfZ7BtrvZhq5R9dh+1BKhnOq51RR/cvNGd2AlCMYVwc=
Subject key identifier:   22:C9:2C:06:35:4C:A9:BA:61:D4:73:C3:F0:6D:A1:34:D1:48:12:55
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Certificate issuer:       /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial:       018C1A85FA57892D9C34E71FB90348FE4DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.mft
Manifest number:          0EF3
Signing time:             Wed 29 Nov 2023 10:00:37 +0000
Manifest this update:     Wed 29 Nov 2023 10:00:37 +0000
Manifest next update:     Thu 30 Nov 2023 10:00:37 +0000
Files and hashes:         1: 1gQEKPhOIY-pxZN8pM-8pM9xHm8.roa (hash: 36ZOntChLKLhfDAgcp+htnHM2SGMuXfQkPyM7FoVIVw=)
                          2: 3YLeTxMEM5_eUnugYDPKnlERcb0.crl (hash: XbLVjNYzXRAVrRHQe6M/b4Q4H+6+JopbXOr9VWbeirA=)
                          3: 8eRQtTJ24R9u8vDkJNLgr_S2cJ4.roa (hash: spyHA9o0g0OMsCKT8UNKYMc2i12dwCfVbv1RW4l6DuU=)
                          4: N42keinReJ2FGXvwhZ4eF4Vt1Ew.roa (hash: T3gTbmluD7q6nhsdtjBdIC9izt5XFb8NamqoCwQiOQ8=)
                          5: NRC0Xl5ITlue8e7eebX4ih9RNkE.roa (hash: rUeWelyQwAPycFIvv0Fnr2m6INVl2U8PTO55LpUZyV0=)
                          6: TO-c-gxlCa9li53pwXZjFeiYxgc.roa (hash: KTTc+ZyHhHpndyJmA4qAshj6UXqx8KbQZBMcXAIkEjk=)
                          7: bMNEKoZxbTw3GYG5u7LKSZl2Dzs.roa (hash: iuiZ4xeSGHC2Sh9QS5njdhSYDgRS6Y4Jwsdsrj6QxrQ=)
                          8: cDTD5sRAtZAoFs47OwHwOMvrizI.roa (hash: 8XvFOR18OL3g4R487nZFoalwI0lcWaiQS9/Vwq3WqNo=)
                          9: e44xUvcmVjGV4Ew-m9E_TuL_wg0.roa (hash: u2112CY4xsiBGVeO7vjIwcok8YzZTzQlSY4JYdwb9gY=)
                          10: tUl8P-y5bOzYwqJaDIXUJLGVtRQ.roa (hash: Kubo4xEqQpoXiwJGXVdm0S6bfnbCHgv2XkC42u1QVQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1a:85:fa:57:89:2d:9c:34:e7:1f:b9:03:48:fe:4d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
        Validity
            Not Before: Nov 29 10:00:37 2023 GMT
            Not After : Nov 30 10:00:37 2023 GMT
        Subject: CN=22c92c06354ca9ba61d473c3f06da134d1481255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:c6:74:ca:2d:0e:42:59:80:d4:b5:05:e6:
                    52:dc:86:83:32:e0:0c:e6:45:3c:c3:1a:43:6f:db:
                    23:d6:ad:82:a7:d6:68:e6:fc:78:d2:eb:af:e8:3a:
                    ab:e5:15:74:9a:99:80:d3:b9:3b:75:20:c9:e4:4f:
                    1d:2d:4c:ac:b5:bc:b6:b5:82:25:1d:6e:50:77:e1:
                    3b:9b:42:a1:60:22:2d:50:47:cf:b7:88:33:fe:2b:
                    1a:75:5d:eb:c5:26:82:a4:c1:40:4f:2b:d2:e3:a8:
                    ca:7b:82:c6:5d:6d:03:1a:d6:98:05:63:13:a8:27:
                    fd:54:58:22:9a:22:dc:20:44:ef:32:e0:f7:41:64:
                    66:1b:cb:04:31:94:de:52:8c:ca:81:c3:64:80:d4:
                    a7:bb:be:eb:51:c4:b5:62:46:d2:89:4c:69:d4:09:
                    db:c4:3c:5c:d5:2c:53:92:0a:ce:01:78:40:d3:00:
                    ed:61:c2:f0:93:56:36:bd:f4:45:c8:a7:b5:f9:ff:
                    13:52:d1:e0:61:73:55:35:69:1d:d0:29:0d:ce:ce:
                    db:f4:b6:1b:d7:c6:62:dc:9d:01:e6:f2:5e:f3:fb:
                    1c:c1:72:ea:96:22:56:58:3f:e5:b1:43:ef:91:2f:
                    cb:cd:72:bd:54:7f:f7:ab:4b:0a:3f:f3:b9:ef:74:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C9:2C:06:35:4C:A9:BA:61:D4:73:C3:F0:6D:A1:34:D1:48:12:55
            X509v3 Authority Key Identifier:
                keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:52:81:a9:f7:a8:71:d2:a1:c6:ce:06:aa:6b:38:b4:76:bd:
         01:d3:34:9d:c3:ae:c5:29:36:4e:0f:b7:79:0a:85:5c:ff:45:
         32:92:52:ae:13:6c:9e:9c:66:89:17:95:5a:a8:38:99:f5:c1:
         09:59:d0:97:0b:cf:5b:1e:d5:2c:25:eb:0d:69:71:fd:3c:a0:
         d3:4b:b8:cd:b0:4d:07:44:88:e2:70:ea:89:9e:fd:66:26:14:
         11:05:dc:5e:e8:b6:f8:5e:20:69:ee:74:ca:12:3c:8a:9f:14:
         9d:7e:e1:90:9b:64:8d:4d:7a:92:45:8a:53:1b:56:ca:b8:bf:
         ae:e7:81:ca:d6:74:45:d1:46:0e:3b:e2:5e:e0:fa:df:28:b1:
         11:bf:97:b3:ea:e0:1d:ee:03:59:b2:25:a8:9b:03:6b:8e:78:
         b6:4d:75:31:79:8f:26:bc:c4:cf:02:ba:41:d2:d1:6d:6d:36:
         25:e7:96:74:f6:91:24:ef:4e:86:ab:73:7c:7d:45:76:a6:78:
         cd:00:89:2f:e3:58:9c:56:00:bd:8f:a6:58:c2:a3:37:19:41:
         39:b9:d3:23:49:65:d1:b1:f2:b1:ca:60:4e:2e:5f:d2:b9:7c:
         53:ff:4d:12:20:e6:9c:a4:f5:c7:cd:91:5b:0e:63:1f:9d:12:
         a0:c1:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----