Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
File:                     qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft (raw, json)
Hash identifier:          /XWQoRstaNmNUxIueVL6RjTLPF76WlVL8ZxbqTxryzA=
Subject key identifier:   8A:E2:A5:EE:74:2B:93:9C:7C:40:71:05:12:03:10:D8:06:F4:D3:52
Authority key identifier: A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
Certificate issuer:       /CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Certificate serial:       01932E9FA2204F11E5A1EB11E0DF65F1CA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
Manifest number:          135D
Signing time:             Fri 15 Nov 2024 07:00:33 +0000
Manifest this update:     Fri 15 Nov 2024 07:00:33 +0000
Manifest next update:     Sat 16 Nov 2024 07:00:33 +0000
Files and hashes:         1: VdpU78xCQixOZA3Tl4FO-ihowDU.roa (hash: F8j2v4LG0IelIqBfrQKiflCNRrK83JTdtSceIedHB+c=)
                          2: qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl (hash: +BvtUjMEFOAyMo308DpaQgOSi2Y6eQcBJUTybYikP1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2e:9f:a2:20:4f:11:e5:a1:eb:11:e0:df:65:f1:ca:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
        Validity
            Not Before: Nov 15 07:00:33 2024 GMT
            Not After : Nov 16 07:00:33 2024 GMT
        Subject: CN=8ae2a5ee742b939c7c407105120310d806f4d352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:63:0b:20:06:75:a3:83:e3:e9:2e:b0:f2:
                    34:d0:ac:d3:a1:b8:9a:00:20:ba:ec:67:f9:e3:2e:
                    68:43:8f:bc:ed:d6:1a:65:af:5c:c8:a3:f1:96:56:
                    8f:1f:1e:c6:55:64:24:9c:fd:de:70:c6:f1:99:2a:
                    b6:37:65:c1:fa:52:e5:f0:34:92:26:f7:37:81:18:
                    62:fa:7d:ee:14:34:e6:9b:a6:12:6b:b8:83:63:a1:
                    b6:36:9c:45:6d:f1:d6:70:c8:8d:22:71:3e:2c:3c:
                    62:ff:e7:d1:8e:11:3f:fd:c8:1c:e5:65:8c:45:d4:
                    99:0f:32:94:a7:f2:a5:33:09:f8:37:c7:d5:03:65:
                    5d:7f:48:10:3b:ea:f2:5a:a3:43:23:fd:d3:ae:0f:
                    99:48:de:79:66:4c:ed:b8:82:9f:bd:fd:2a:ad:96:
                    14:2f:cb:94:4e:3d:c6:c1:1d:d4:1a:69:4e:ee:c5:
                    2a:24:d4:4c:e0:2f:46:d0:69:f2:bf:68:cd:d2:0c:
                    26:6a:b2:c0:ee:1c:20:83:f8:56:9d:04:8e:75:f4:
                    53:2a:37:7d:35:5b:06:e9:d7:ba:7a:25:18:ad:d1:
                    cc:3c:01:ac:b6:52:4e:28:17:7e:94:82:74:45:a9:
                    02:3a:44:b6:0e:a0:cd:20:f3:54:31:59:c1:61:25:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:A5:EE:74:2B:93:9C:7C:40:71:05:12:03:10:D8:06:F4:D3:52
            X509v3 Authority Key Identifier:
                keyid:A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:ab:db:35:08:e6:f3:7a:27:fc:97:95:7d:9c:b4:9f:c7:
         d4:0e:19:b4:db:56:46:48:65:f1:f9:5b:a3:d4:28:ef:f3:35:
         b4:e5:de:b1:5f:7b:13:0c:dd:87:6a:21:88:ba:9f:4e:ad:7d:
         45:ed:7a:21:d1:b8:46:c2:57:00:66:16:2f:7a:50:2d:e6:7e:
         ff:39:5e:43:e8:0d:f1:3c:28:a9:6d:d2:9a:e9:42:32:e1:0a:
         dd:ba:4f:1b:71:3e:71:91:41:62:0c:e3:b9:ee:fd:e2:40:09:
         97:21:9b:6a:18:a4:0f:81:90:7c:13:5d:79:03:f1:e4:23:0e:
         f3:c5:75:cb:cc:da:d5:58:15:32:1f:4d:a4:ab:0c:7b:f3:45:
         7e:f6:8f:0f:5a:59:fb:03:4e:4a:84:4f:3c:2f:f1:03:c5:8a:
         cd:bc:80:e8:b4:62:5d:25:92:35:cc:39:df:04:28:e2:d1:b5:
         3c:b9:e5:2c:c6:ad:fa:55:b4:eb:fe:da:aa:ac:a5:c1:70:8d:
         49:a3:f2:3f:7d:90:e3:d7:13:4e:ca:55:5f:bd:e7:c4:0e:20:
         e4:d0:5b:31:3a:c1:c9:00:98:ce:7e:ab:94:41:7c:58:f3:02:
         9c:4f:ac:2e:7c:85:86:8d:92:ee:ca:92:e5:c0:8c:09:0c:93:
         0d:7a:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----