Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/8nU1ip_8mmnk8bFEO6SB70G63Kw.mft
File:                     8nU1ip_8mmnk8bFEO6SB70G63Kw.mft (raw, json)
Hash identifier:          p4cBGX5qIeYh2ZdCUI0kMetFN96S8vbtcvHh+Wjogyc=
Subject key identifier:   FE:30:8C:45:05:87:CC:88:F2:08:E2:CB:33:83:D8:94:9D:DB:01:5C
Authority key identifier: F2:75:35:8A:9F:FC:9A:69:E4:F1:B1:44:3B:A4:81:EF:41:BA:DC:AC
Certificate issuer:       /CN=f275358a9ffc9a69e4f1b1443ba481ef41badcac
Certificate serial:       019324C1328B46D464978F323D5556C10A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nU1ip_8mmnk8bFEO6SB70G63Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/8nU1ip_8mmnk8bFEO6SB70G63Kw.mft
Manifest number:          1357
Signing time:             Wed 13 Nov 2024 09:01:01 +0000
Manifest this update:     Wed 13 Nov 2024 09:01:01 +0000
Manifest next update:     Thu 14 Nov 2024 09:01:01 +0000
Files and hashes:         1: 8nU1ip_8mmnk8bFEO6SB70G63Kw.crl (hash: 2L26+srarv2j6rylmwB3fCBRp5ip43a1vG5fsW7/0Fs=)
                          2: U8i2X6Xf0XWbcFfecQlooLfB5Uk.roa (hash: Hp58KRyJ04HUq/D1YdSWln2rnSk8ZnLyGrepALP1iSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:24:c1:32:8b:46:d4:64:97:8f:32:3d:55:56:c1:0a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f275358a9ffc9a69e4f1b1443ba481ef41badcac
        Validity
            Not Before: Nov 13 09:01:01 2024 GMT
            Not After : Nov 14 09:01:01 2024 GMT
        Subject: CN=fe308c450587cc88f208e2cb3383d8949ddb015c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:47:6e:b3:60:80:90:bd:8b:cb:97:ba:17:
                    48:bb:f6:e3:6b:2b:65:35:e0:a9:b4:d7:01:d0:d8:
                    90:c7:b5:f8:00:94:10:cd:b9:f0:7d:dd:89:a7:56:
                    aa:37:21:8f:63:52:7f:ec:57:05:1b:b6:68:fd:b5:
                    76:5a:39:94:9d:03:21:64:f7:e5:d9:e7:68:45:69:
                    71:2c:48:9f:6e:5f:29:23:2f:c1:db:52:11:e6:05:
                    5c:40:9b:1e:60:ca:e0:9d:2a:b7:11:05:67:b2:6a:
                    d7:c2:ad:62:d2:41:b3:d9:b9:2a:ac:ed:9e:1c:f5:
                    09:ac:91:b1:13:bb:ba:34:c8:ce:92:21:e5:22:02:
                    f2:21:ff:1f:84:0f:3c:e0:d6:8a:f9:bd:3f:1b:95:
                    95:ad:4f:33:85:6c:92:fd:33:b1:00:d9:c5:d6:3e:
                    cd:05:7d:1e:2a:c9:62:ea:8c:93:89:1f:b1:7a:74:
                    94:02:4c:6e:e2:e8:ef:7f:21:e2:2b:be:dd:f8:b4:
                    c9:50:72:18:8e:bd:56:9c:28:c3:81:56:2e:a3:8b:
                    f7:25:a3:7e:f7:6c:e7:f9:1d:a2:46:9c:67:b4:d2:
                    42:d3:dd:98:37:fd:22:0c:71:f8:e2:2c:70:61:78:
                    b2:a9:79:25:51:9d:4e:8f:df:22:44:e9:01:c2:0e:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:8C:45:05:87:CC:88:F2:08:E2:CB:33:83:D8:94:9D:DB:01:5C
            X509v3 Authority Key Identifier:
                keyid:F2:75:35:8A:9F:FC:9A:69:E4:F1:B1:44:3B:A4:81:EF:41:BA:DC:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nU1ip_8mmnk8bFEO6SB70G63Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/8nU1ip_8mmnk8bFEO6SB70G63Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/8nU1ip_8mmnk8bFEO6SB70G63Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:61:d5:cc:2a:e7:27:2d:20:bd:46:f5:ad:e9:39:5a:ce:
         f5:e0:a0:f5:27:f6:52:4e:d8:80:9b:ca:fa:14:28:67:5d:7e:
         5b:17:26:fc:f2:6e:8c:de:0c:5d:27:b1:50:af:84:d7:d6:af:
         eb:22:f9:7f:1e:cf:b7:7f:78:34:0f:92:73:c4:dd:ee:3b:02:
         19:93:aa:71:de:b7:ea:34:b0:ee:b6:3d:38:34:1c:f1:b3:c7:
         48:47:9b:59:dd:82:5b:d7:11:92:8d:c0:45:84:f8:2c:f7:6b:
         d3:00:6a:c3:f1:a1:10:20:42:c8:b9:3a:46:4b:ab:4a:34:a9:
         67:2c:2e:1f:31:47:bf:93:49:3e:dd:1e:84:2e:88:be:2d:2f:
         75:b8:b7:58:d4:25:c4:d5:bc:86:c9:c9:fb:50:f6:11:56:f6:
         a0:ad:c9:25:6b:51:fe:b4:d2:52:62:34:08:58:75:03:92:e8:
         46:c9:76:9b:ff:9c:7f:93:7d:d5:de:d0:83:65:5c:36:65:95:
         e9:9d:bb:b8:6f:06:62:d7:66:d9:82:3d:28:51:6a:b4:27:70:
         43:44:c1:a5:66:b1:b8:93:1b:f6:12:83:a1:82:75:54:52:ac:
         31:05:26:42:3d:d2:2e:fe:80:8d:f4:30:84:db:c3:23:a9:8d:
         e1:50:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----