Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.mft
File:                     3uEtjAkpJFLGazo1IQlTM6ns_pU.mft (raw, json)
Hash identifier:          m/TV/PAybYni3G79XjJLRqQsZQhterB0edCedEOMg+Y=
Subject key identifier:   6B:07:A6:80:42:EA:BD:E2:32:F4:98:E5:40:C7:2A:B7:74:48:E6:4E
Authority key identifier: DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95
Certificate issuer:       /CN=dee12d8c09292452c66b3a3521095333a9ecfe95
Certificate serial:       0192E0BBA180C31E0FF06AD6A0E57606FD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.mft
Manifest number:          0E08
Signing time:             Thu 31 Oct 2024 04:00:45 +0000
Manifest this update:     Thu 31 Oct 2024 04:00:45 +0000
Manifest next update:     Fri 01 Nov 2024 04:00:45 +0000
Files and hashes:         1: 3uEtjAkpJFLGazo1IQlTM6ns_pU.crl (hash: 2/Xb3tawIZcBAlDuBgMactCw7oQR6bJ/woR0aJe8EZ4=)
                          2: pj9abcrRkx7CC_rZ8pv2oH7tGMI.roa (hash: ivsBJoL5AkYIOoqMrgUn1Ntk3LEwZLie0DaBuOK32OM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e0:bb:a1:80:c3:1e:0f:f0:6a:d6:a0:e5:76:06:fd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee12d8c09292452c66b3a3521095333a9ecfe95
        Validity
            Not Before: Oct 31 04:00:45 2024 GMT
            Not After : Nov  1 04:00:45 2024 GMT
        Subject: CN=6b07a68042eabde232f498e540c72ab77448e64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:02:2b:5b:4d:72:07:4e:5a:45:36:2e:c4:
                    16:7c:24:d7:f9:6a:de:8d:8b:85:86:cf:5b:e3:a0:
                    b1:b4:c6:3d:22:e8:90:4a:a7:d2:b8:b3:f3:d0:4a:
                    e3:54:b0:52:b9:7f:0a:26:8e:a8:b9:7a:f8:ff:e6:
                    4d:7a:ff:66:7c:f9:0f:da:1a:e9:f7:2c:36:34:d2:
                    7f:4f:f4:3d:3f:6e:77:33:0d:32:8a:ad:d2:69:db:
                    31:10:b5:38:c7:6d:55:8a:f9:2e:95:66:8b:9c:7e:
                    e1:d5:8a:c3:85:8a:8f:7b:23:4a:78:94:d2:76:77:
                    fe:5d:49:f0:1d:5e:5c:32:60:9a:f5:2f:ce:40:84:
                    38:f6:35:0c:18:47:b7:4d:9e:31:d6:3f:24:2d:f8:
                    39:03:5b:e3:06:2a:b4:a1:2e:8e:2e:ea:df:cc:f0:
                    c7:36:57:2e:7d:fd:14:6b:a4:ed:0b:f2:af:25:af:
                    91:94:33:9f:6a:b3:b9:50:23:c4:62:0c:28:68:0a:
                    86:9f:d3:e5:2f:fb:56:c4:28:9f:99:c9:f7:f8:26:
                    19:c2:34:3c:3e:58:9d:2a:af:91:4f:fd:3e:bf:07:
                    c6:9b:ee:bd:d2:f3:fb:5b:11:5b:26:26:49:aa:55:
                    6d:1f:28:31:cd:84:11:3a:89:d0:3c:a3:25:44:ea:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:A6:80:42:EA:BD:E2:32:F4:98:E5:40:C7:2A:B7:74:48:E6:4E
            X509v3 Authority Key Identifier:
                keyid:DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:87:b1:f7:e2:14:4b:22:77:48:5b:a7:bc:c3:b4:bb:2e:
         79:af:b3:22:36:23:d5:03:36:04:59:e4:92:0b:ab:f6:55:90:
         4e:94:dc:68:8c:46:3d:c2:91:ea:3b:04:83:67:4e:33:cf:a4:
         73:c6:ed:a1:4e:a9:33:32:67:2d:9d:1c:1b:12:4d:26:1e:23:
         5e:1b:04:20:02:05:7b:bf:a6:87:52:4d:f4:7f:be:1b:55:d0:
         96:b4:88:c0:a9:60:fd:a9:69:46:a1:88:07:8d:ef:96:58:ea:
         a8:27:37:76:87:d5:29:6e:2c:71:06:9c:60:6f:bb:54:0d:c7:
         4b:4b:01:52:2f:c9:18:8f:39:37:eb:37:f2:99:fb:0a:62:64:
         43:93:0e:11:34:8c:74:80:6f:65:f6:7c:22:2b:6f:2f:94:67:
         96:5b:f2:a3:99:8d:3c:19:29:8f:a2:e8:f3:49:e8:69:45:cf:
         e0:09:7c:29:76:ed:a2:21:ae:e2:34:fa:b0:fd:56:fe:7c:95:
         e5:c5:24:0d:d9:bd:13:49:73:56:be:17:35:a2:99:2c:4d:6c:
         7a:85:64:b1:a6:20:0b:71:e5:d4:9a:dc:09:72:2a:95:bc:f1:
         ea:5f:7c:5c:54:17:b7:7c:fa:ce:aa:ca:ba:cd:f7:f9:3a:a5:
         d5:de:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----