Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/914977-f887-4a00-9f0a-79edfd2a20f6/1/jJimZnjukyF2pKnd1BU8_UxLB0Y.mft
File:                     jJimZnjukyF2pKnd1BU8_UxLB0Y.mft (raw, json)
Hash identifier:          kmlNDEuBcPwK1xpzx1XErIwPqy/ZWfaTEo79ZE82mIU=
Subject key identifier:   8A:7D:E5:D9:55:14:DF:4A:41:AA:AC:3E:8E:42:A3:3D:F3:BC:9F:3C
Authority key identifier: 8C:98:A6:66:78:EE:93:21:76:A4:A9:DD:D4:15:3C:FD:4C:4B:07:46
Certificate issuer:       /CN=8c98a66678ee932176a4a9ddd4153cfd4c4b0746
Certificate serial:       01927A63305E7D4DEB47BE71F1DC9591DA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJimZnjukyF2pKnd1BU8_UxLB0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/914977-f887-4a00-9f0a-79edfd2a20f6/1/jJimZnjukyF2pKnd1BU8_UxLB0Y.mft
Manifest number:          05FF
Signing time:             Fri 11 Oct 2024 07:02:53 +0000
Manifest this update:     Fri 11 Oct 2024 07:02:53 +0000
Manifest next update:     Sat 12 Oct 2024 07:02:53 +0000
Files and hashes:         1: fc52d5jBzhZbzPE3hRuYm4CxQB8.roa (hash: U46HNomDG9Gp4VhPhw4v5lonamsVzSmLstJQ5RBeBz4=)
                          2: jJimZnjukyF2pKnd1BU8_UxLB0Y.crl (hash: DVHF7mia4qsG0U7WSwjXx9u0wqqx0Ge/1K2b9pExPbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7a:63:30:5e:7d:4d:eb:47:be:71:f1:dc:95:91:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c98a66678ee932176a4a9ddd4153cfd4c4b0746
        Validity
            Not Before: Oct 11 07:02:53 2024 GMT
            Not After : Oct 12 07:02:53 2024 GMT
        Subject: CN=8a7de5d95514df4a41aaac3e8e42a33df3bc9f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:54:cf:08:3d:59:87:45:ff:30:bb:69:47:
                    59:02:ec:fc:92:95:f5:fb:1d:85:5c:ac:2f:eb:32:
                    ce:22:44:d8:b4:8a:de:19:8e:35:d0:2f:92:e5:af:
                    46:37:96:ae:dc:2c:ae:e5:0a:08:7f:29:dd:e3:58:
                    5d:f8:1f:a7:eb:46:50:86:42:8d:cd:f9:17:9b:ff:
                    20:6a:93:6d:0d:48:55:0d:32:3d:6f:88:c8:f7:e2:
                    a1:c4:e4:f4:0b:44:0e:9a:df:b4:24:4f:90:4e:84:
                    b4:eb:77:28:29:19:7e:0b:04:a0:37:c2:ca:fd:25:
                    65:48:4f:60:af:85:6f:e7:d8:94:ca:d2:58:66:d2:
                    bf:8a:fa:23:e9:84:5b:88:fa:3c:5c:86:e4:3a:3a:
                    dd:98:20:bc:17:90:b6:26:81:1f:04:cc:59:5f:58:
                    4b:f1:7c:94:80:87:f2:99:ef:e8:35:3f:89:47:74:
                    bc:47:5c:0e:16:4b:4c:4a:1d:0c:c6:42:72:39:6f:
                    7e:54:9a:bc:e0:71:23:91:6f:17:ac:c8:e6:e6:4d:
                    42:90:08:ac:94:01:e1:a7:47:6f:90:a1:e6:3b:bc:
                    96:3b:3f:8a:d9:a1:f6:f4:c5:9e:46:01:dd:29:c7:
                    9f:45:61:31:08:9b:7a:d9:98:eb:12:45:93:16:33:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:E5:D9:55:14:DF:4A:41:AA:AC:3E:8E:42:A3:3D:F3:BC:9F:3C
            X509v3 Authority Key Identifier:
                keyid:8C:98:A6:66:78:EE:93:21:76:A4:A9:DD:D4:15:3C:FD:4C:4B:07:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJimZnjukyF2pKnd1BU8_UxLB0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/914977-f887-4a00-9f0a-79edfd2a20f6/1/jJimZnjukyF2pKnd1BU8_UxLB0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/914977-f887-4a00-9f0a-79edfd2a20f6/1/jJimZnjukyF2pKnd1BU8_UxLB0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:05:7d:d6:aa:46:5f:e5:ab:27:2b:46:c2:b0:0f:3b:13:51:
         17:23:9b:e9:2d:d9:01:37:81:9b:90:b2:af:e7:cf:b7:a8:5f:
         12:12:2f:34:a9:41:9e:7a:c3:78:db:6b:b0:86:fc:fd:b2:ed:
         ef:b6:34:3a:09:91:a6:6a:95:3e:c2:1e:8b:34:03:7b:74:c0:
         e7:91:24:b5:b1:68:4b:73:ae:e9:38:21:62:18:ba:f4:b0:12:
         d1:db:30:ce:ef:86:bb:11:d0:a6:97:c2:27:de:57:db:cf:a7:
         2a:00:c2:49:6c:e2:7f:c7:66:06:c7:b6:b1:23:bb:4c:95:46:
         bc:94:f2:e8:f7:d4:72:32:cd:f7:1c:1d:67:3a:27:c0:0e:97:
         12:c4:31:34:ab:34:46:1d:3e:b2:a1:ac:d7:b5:fa:c9:73:98:
         0d:4b:56:15:ac:b2:5d:b8:77:39:31:6e:94:4c:3e:7c:13:16:
         b1:4e:b3:31:ae:67:22:46:ff:d0:b3:52:90:c5:43:a4:3a:f5:
         cc:8f:86:12:98:c6:52:cf:d4:01:e3:b9:0c:20:c5:ec:c3:0a:
         69:10:a6:32:3d:e4:d5:c1:cd:31:cd:5f:23:52:58:6a:99:7c:
         28:19:75:ed:26:9c:57:82:25:e3:b4:f7:c8:7b:52:b2:8c:64:
         c5:16:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----