Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
File:                     IPDErRxLDFNu0YcjyKlaNI0ov2U.mft (raw, json)
Hash identifier:          O8Bq2BrMCujRBMVN7PrN9DLitM1LaA7pvL4WJ4MlXoU=
Subject key identifier:   1D:D1:67:F3:7C:06:DB:2E:F8:C2:CB:3D:80:6A:0F:88:87:5A:3E:AA
Authority key identifier: 20:F0:C4:AD:1C:4B:0C:53:6E:D1:87:23:C8:A9:5A:34:8D:28:BF:65
Certificate issuer:       /CN=20f0c4ad1c4b0c536ed18723c8a95a348d28bf65
Certificate serial:       0192C2B0EA4DD23851FAF83D3A36DEA3C828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPDErRxLDFNu0YcjyKlaNI0ov2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
Manifest number:          1327
Signing time:             Fri 25 Oct 2024 08:00:27 +0000
Manifest this update:     Fri 25 Oct 2024 08:00:27 +0000
Manifest next update:     Sat 26 Oct 2024 08:00:27 +0000
Files and hashes:         1: IPDErRxLDFNu0YcjyKlaNI0ov2U.crl (hash: jF14fAb9t0SLLrGysi6i9cZrcuDDqjRhyR4lIouRlHk=)
                          2: YkDO4VY326alPeMc144EFpzEF_g.roa (hash: VrhrRQcNNswVX3V3TCkzS+Bf6K+WCyRfnmqzCenS0tk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:c2:b0:ea:4d:d2:38:51:fa:f8:3d:3a:36:de:a3:c8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f0c4ad1c4b0c536ed18723c8a95a348d28bf65
        Validity
            Not Before: Oct 25 08:00:27 2024 GMT
            Not After : Oct 26 08:00:27 2024 GMT
        Subject: CN=1dd167f37c06db2ef8c2cb3d806a0f88875a3eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:60:0b:fa:5b:6d:53:10:7d:f3:32:60:e9:
                    05:26:ae:9b:a1:76:47:ff:86:91:27:52:ff:57:42:
                    89:8d:46:e3:6d:c0:56:9d:cd:8c:9a:aa:0b:48:c0:
                    f5:2f:95:52:75:ad:63:7b:9a:a0:94:bd:ac:08:8c:
                    58:ac:18:57:fb:31:47:9f:5c:66:7f:1e:e9:e0:14:
                    37:aa:b8:34:4e:6d:c0:46:36:e8:4e:c4:f9:dd:72:
                    f3:9c:2f:21:45:9d:29:60:1f:7e:f7:29:ca:3d:86:
                    02:4e:71:8b:53:ce:fe:b0:9a:b0:0a:02:e1:37:f5:
                    6d:c8:60:01:a3:44:fb:6f:db:60:c1:4c:b4:18:bd:
                    dd:7f:ca:c3:b9:f2:15:7c:c3:bb:f8:12:bc:96:cb:
                    cf:ef:5c:c8:b4:45:eb:53:05:b6:08:e6:0e:72:5e:
                    68:be:9b:fd:37:6d:99:60:e2:e8:c9:3c:aa:01:dc:
                    1b:4a:6a:9d:f4:ad:b3:14:2b:16:94:b2:0e:82:48:
                    85:5b:65:33:30:ae:63:02:b2:b6:11:5a:8b:a4:a9:
                    72:1a:20:7d:25:f7:78:32:27:c6:c2:25:a8:8d:c1:
                    74:3e:af:29:cd:f9:b5:dc:95:b9:b4:b6:68:a4:29:
                    27:b5:f2:70:4a:20:a4:01:67:75:53:f3:b3:ba:b8:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:67:F3:7C:06:DB:2E:F8:C2:CB:3D:80:6A:0F:88:87:5A:3E:AA
            X509v3 Authority Key Identifier:
                keyid:20:F0:C4:AD:1C:4B:0C:53:6E:D1:87:23:C8:A9:5A:34:8D:28:BF:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPDErRxLDFNu0YcjyKlaNI0ov2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:55:4b:77:10:61:21:4a:b2:fa:73:a1:58:c3:4f:f6:f8:
         ce:cc:b4:ce:27:21:ad:9f:57:c8:63:10:eb:b6:47:c9:54:cb:
         9d:8d:a0:f2:41:08:16:c4:7b:80:f8:4c:1d:cc:2a:5e:50:65:
         b2:a2:45:1b:ed:09:18:b4:f9:aa:85:b0:f3:0a:47:55:c8:00:
         b4:9c:e9:aa:bb:da:c3:a9:cd:5f:b1:ac:3f:f2:5a:c9:fd:4d:
         a3:da:1b:57:c8:8c:55:db:40:c0:56:05:05:03:03:26:06:df:
         bd:f3:91:0f:9f:b5:47:18:48:31:6d:7c:50:10:74:ef:75:19:
         6b:3d:0d:d4:0a:19:b5:75:d7:2b:c3:7f:10:a1:dc:67:48:22:
         e1:51:14:ac:d2:1c:1b:82:6a:c9:92:f2:39:ea:4d:19:0a:b3:
         d8:11:b8:f5:a7:82:31:59:e7:ac:02:c1:8f:c0:90:26:32:dd:
         6d:8e:4e:43:85:ae:8d:48:ba:2f:26:f8:c6:4b:59:3a:ce:6a:
         80:6a:28:ba:e1:2a:45:ef:c8:cc:c2:06:f1:4e:3a:dc:06:c4:
         36:3b:c4:67:f3:30:55:00:28:03:0b:14:c8:2b:88:ae:e6:6e:
         3b:3b:2d:6b:d7:15:41:4f:2b:5f:0f:12:db:4a:9d:17:98:84:
         b7:5d:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----