Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
File:                     TK8PdjWpbv9bc_IW2P53zE4qCo4.mft (raw, json)
Hash identifier:          lUU9SmAVYMVAlqOvX+wqIcZ7LkSMzGPa7+vmz4/BWAE=
Subject key identifier:   CC:5E:3C:6C:39:11:54:D2:01:1A:72:32:E7:4B:0E:EF:84:82:04:E2
Authority key identifier: 4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
Certificate issuer:       /CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Certificate serial:       0191D63D2E3084C09BE684DD76CDA09BA45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
Manifest number:          12A9
Signing time:             Mon 09 Sep 2024 10:03:39 +0000
Manifest this update:     Mon 09 Sep 2024 10:03:39 +0000
Manifest next update:     Tue 10 Sep 2024 10:03:39 +0000
Files and hashes:         1: TK8PdjWpbv9bc_IW2P53zE4qCo4.crl (hash: TVeTlTbGXQafzZEhV+rDBXgCvKNox9jJ7o/Zpbu1ksU=)
                          2: uajxMGGWx4MGmHew-WmC7J6FOj8.roa (hash: HNTeR/DKXB6ff19WPa5OESRqXraW7+ds1xJeftGClJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:3d:2e:30:84:c0:9b:e6:84:dd:76:cd:a0:9b:a4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
        Validity
            Not Before: Sep  9 10:03:39 2024 GMT
            Not After : Sep 10 10:03:39 2024 GMT
        Subject: CN=cc5e3c6c391154d2011a7232e74b0eef848204e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:74:26:59:e9:15:a4:6f:c8:23:28:d4:f4:
                    4a:9e:56:38:7f:dc:58:bf:b9:34:21:85:cb:10:19:
                    ca:90:52:7c:6c:d8:1d:9a:49:3f:fd:23:73:e8:30:
                    90:86:f0:ff:96:82:9a:eb:74:dd:7d:c5:43:8e:df:
                    f2:c2:7b:e4:0d:18:c6:87:a3:f4:ed:c7:50:74:d9:
                    8d:06:a3:37:8b:05:cc:8b:20:b2:67:9f:09:e9:f9:
                    d8:8a:79:f9:28:8c:4d:3c:3f:ab:89:bd:66:7f:1a:
                    ba:1d:1f:09:88:b6:dc:5d:cd:6a:1f:c7:5b:06:71:
                    eb:52:6a:4f:e3:e2:d2:96:aa:54:e9:e2:e1:5e:67:
                    80:6d:d9:a0:48:18:fd:b3:06:16:eb:cb:ee:f5:71:
                    cd:6a:fc:00:b9:78:fb:be:10:90:aa:41:57:b3:ee:
                    e9:f2:28:66:87:91:d6:d5:ba:1a:05:04:6e:eb:81:
                    b4:28:85:02:7e:a2:f2:9c:99:be:a0:04:19:85:00:
                    31:e5:55:38:eb:ec:1a:05:c6:5b:9b:61:e3:a6:ec:
                    88:0f:c5:cb:c8:e6:55:4c:d5:7b:32:38:44:01:a6:
                    21:24:59:41:bb:66:e3:67:b6:15:b7:f5:ec:7f:13:
                    33:bd:d3:6f:3a:97:3b:45:14:ac:5a:45:62:d6:98:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:3C:6C:39:11:54:D2:01:1A:72:32:E7:4B:0E:EF:84:82:04:E2
            X509v3 Authority Key Identifier:
                keyid:4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:8a:3c:2b:de:f5:56:2b:78:5e:0c:b3:5c:ca:a1:e2:b1:
         56:7c:c2:a3:ba:4f:45:8a:b5:ab:d1:cd:56:66:ad:78:f4:45:
         6c:da:7d:9c:d7:26:23:15:56:69:a5:a7:fa:b6:24:f8:0f:c2:
         48:92:75:a8:32:25:29:c6:ee:37:35:31:05:cf:62:b1:54:d2:
         91:8e:26:58:55:86:4a:27:2d:72:3d:90:36:46:dd:28:f0:91:
         7b:76:11:87:d4:df:cd:b0:f2:28:c3:bf:4e:bf:0e:af:a7:89:
         2b:9f:6c:12:2e:9e:eb:cd:bc:80:b8:4f:36:f3:0d:9a:51:32:
         d0:46:7c:36:43:8e:1c:87:6d:a6:4d:85:99:5f:56:bb:0e:f5:
         c0:39:e1:44:55:c4:df:77:a3:84:45:7f:f7:1f:09:f9:95:1e:
         73:f0:de:5f:bf:07:f3:3a:f6:4e:be:c5:8e:d6:62:70:9d:f8:
         51:ed:10:3a:a8:40:a5:8f:b6:35:67:4f:2c:aa:ce:75:56:b9:
         7e:ef:c0:3b:9d:07:d8:f9:8b:eb:dd:a1:71:92:c9:f0:fe:9d:
         ec:d4:40:ac:90:88:91:c0:9e:29:54:b4:c3:57:44:11:f6:01:
         6c:4d:a4:42:44:6a:09:5c:49:70:ac:21:1a:b4:b2:fa:bb:9b:
         f4:1a:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----