Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
File:                     8OcppUzHa4icgy4NE5WJSvfA5f4.mft (raw, json)
Hash identifier:          kSLKZHeIpPExWhbEH/z13U95xLf7L88Vh0BBizAAv8A=
Subject key identifier:   C5:68:53:9F:1B:B2:25:9C:B7:DF:B7:E2:3F:04:94:CA:4B:E5:15:48
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Certificate issuer:       /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial:       019232B6234EB84BAE329C3E56A0ECE8E2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
Manifest number:          08C2
Signing time:             Fri 27 Sep 2024 09:00:50 +0000
Manifest this update:     Fri 27 Sep 2024 09:00:50 +0000
Manifest next update:     Sat 28 Sep 2024 09:00:50 +0000
Files and hashes:         1: 2n-uA3DK4qP028QKZbkLBsXhlJ8.roa (hash: QYCjOkJXzcGnmrGx4yREfLOZJUhoKdoNLjvgnx0gXJ8=)
                          2: 8HBUzKgaYNgbs3J8Job9vljZ9vk.roa (hash: NaqXRPHP9U34qPZEOFRx3JCRqWiZXgAV44O1XgxXEoQ=)
                          3: 8OcppUzHa4icgy4NE5WJSvfA5f4.crl (hash: E4yMP0BIBIx7NfQJE8Z99RsKF8ZpSu/CDLf/U2xXG/k=)
                          4: G3dAEd49H19eqVwMq7kY1NK4YPU.roa (hash: K1I1qP7rEF6jgj/n3FqWtJR4FpibXZFIvuzCrczliPg=)
                          5: TpmGQnMH7JhENm2qG5ur9OMd7B4.roa (hash: qCXgVuMk3zYHXyMgoKp5mYjIpezEXujV2d7rhuRfvLE=)
                          6: Wjq_4qXKFYAsS4mylcmPnSrL1r8.roa (hash: MNdU4J5fI/RQ2VtFXgCXw2IgLZapIkhAKksl6Pauonc=)
                          7: Y0V0PQKDgLLjdZ3yl5FxrzVxKns.roa (hash: nfgzDVKjDk995DcN+NJyOjdgmIJCPhyJEFwi5oCz+DE=)
                          8: tgwEwLbVEXrP-lBEQu6MSttR5KM.roa (hash: u8+165Dy1vc74O/ehwJy0sNsITcspBWp06+xTuCyblQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:32:b6:23:4e:b8:4b:ae:32:9c:3e:56:a0:ec:e8:e2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
        Validity
            Not Before: Sep 27 09:00:50 2024 GMT
            Not After : Sep 28 09:00:50 2024 GMT
        Subject: CN=c568539f1bb2259cb7dfb7e23f0494ca4be51548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:3b:c3:80:ad:e6:7c:6b:10:21:6d:07:78:
                    e4:f3:fd:b2:7c:f0:4e:e2:37:2f:1c:c5:e1:f8:07:
                    af:ac:9c:66:6e:51:1a:7a:c7:e8:e8:7c:3a:11:4c:
                    84:0c:31:72:7e:2d:73:31:34:e8:b9:d5:43:bf:19:
                    d6:94:aa:a7:6e:78:9e:72:b4:b4:70:bb:36:9a:7b:
                    05:15:27:71:1e:39:dc:24:eb:25:d4:da:c1:ed:77:
                    38:f8:ad:15:de:6c:67:04:77:c8:af:2d:fa:aa:67:
                    1c:d5:c7:b6:6d:5a:01:70:0f:45:05:35:07:fa:82:
                    d3:ee:77:0c:cf:53:20:89:33:dd:ba:c2:b0:2e:b6:
                    32:c6:e3:6f:f2:66:f1:cc:48:84:3b:eb:4e:10:86:
                    c5:a4:d9:9a:5c:cc:8c:27:32:be:c0:f5:50:bd:70:
                    70:f8:77:7b:e7:6a:25:80:4b:e5:59:61:33:e7:6c:
                    62:bb:77:47:b3:a7:3a:81:59:7d:a2:01:0d:f8:f4:
                    c9:97:f5:95:a9:29:60:92:02:59:3d:95:2f:1f:26:
                    05:bd:fc:7d:a8:60:e9:d3:c4:c1:dc:bd:d7:8c:4a:
                    9c:c7:84:63:f8:1b:99:49:15:67:73:c7:e4:3f:c7:
                    be:ba:87:e5:85:ea:25:53:69:c0:a2:24:18:27:fb:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:53:9F:1B:B2:25:9C:B7:DF:B7:E2:3F:04:94:CA:4B:E5:15:48
            X509v3 Authority Key Identifier:
                keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:0f:a1:5f:36:19:cf:2a:0a:32:16:8b:fe:57:e8:4f:1b:
         0d:e0:e1:60:67:9e:3c:b0:b3:03:4d:fc:ce:17:1e:21:a4:c0:
         06:a0:5f:02:9e:61:50:41:27:8f:81:36:1e:c4:b3:e4:bf:d8:
         1c:6b:0f:ed:7d:83:e4:f8:e8:fb:71:84:67:b5:30:9d:ad:23:
         d3:02:45:e0:f2:d6:36:82:e5:49:12:8c:7c:10:93:23:df:49:
         bc:64:6b:2a:30:14:4b:33:36:70:7c:a7:42:c6:7d:f2:26:19:
         d6:f7:a6:26:20:54:0a:b1:e6:0f:d9:65:ef:63:4a:57:a3:80:
         10:dd:5d:c2:63:4d:69:a2:8a:f6:b5:10:e9:81:fa:b9:f7:37:
         a1:d4:87:47:8c:fe:26:82:bc:0a:bf:f0:e9:65:fb:a0:62:b5:
         89:b1:c8:33:a6:a2:aa:21:85:c0:df:fb:c9:4c:a9:ad:31:a3:
         cc:b6:9b:3b:33:a4:27:54:e4:fc:1f:c8:5b:cc:56:92:f6:b2:
         2b:b2:a2:90:b1:65:97:5c:ba:54:4d:1b:ac:b3:d4:55:5e:e9:
         b0:7b:38:12:19:a2:bd:08:f9:08:ec:65:bf:eb:1f:af:ad:5a:
         90:fa:2a:f9:87:1a:33:0b:50:f7:33:2b:4c:8d:fd:bd:86:4a:
         09:1f:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----