Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
File:                     oo62nPsiMlz3UP9WMVDb0ESRvrs.mft (raw, json)
Hash identifier:          nv7ntajm2/3LaJc8G0F7OOUY/LqCJ5vy/+UHNgPJk14=
Subject key identifier:   73:88:A5:73:4F:75:59:E1:53:81:3C:28:FE:52:85:EA:FB:1D:82:FC
Authority key identifier: A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
Certificate issuer:       /CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Certificate serial:       01932DFC10477F1E2C4812E1218E8260FCC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
Manifest number:          0DAC
Signing time:             Fri 15 Nov 2024 04:01:54 +0000
Manifest this update:     Fri 15 Nov 2024 04:01:54 +0000
Manifest next update:     Sat 16 Nov 2024 04:01:54 +0000
Files and hashes:         1: GYwQH8gjoMI87zuAzZJbPyJBkvg.roa (hash: MQ+h84dTZ07ozAgAiwYXkM81XMS9MtMWB6DFmMxn6Ic=)
                          2: oo62nPsiMlz3UP9WMVDb0ESRvrs.crl (hash: 2YHg8qgEjZcVrE4KcrRGgEoz1l+2nGhCMKKRslFoOGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2d:fc:10:47:7f:1e:2c:48:12:e1:21:8e:82:60:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a28eb69cfb22325cf750ff563150dbd04491bebb
        Validity
            Not Before: Nov 15 04:01:54 2024 GMT
            Not After : Nov 16 04:01:54 2024 GMT
        Subject: CN=7388a5734f7559e153813c28fe5285eafb1d82fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:54:5d:72:33:9d:f5:cd:bb:af:02:d1:0f:
                    e7:e6:e8:6f:0a:f2:df:48:18:f4:d6:8a:b3:50:23:
                    bd:3d:d2:60:f9:dd:16:dc:d2:eb:b2:7b:3f:48:09:
                    b5:a0:ec:17:9b:4f:04:cb:3a:36:14:a5:a5:cc:6e:
                    bd:9f:82:33:84:d0:56:22:cb:3f:73:1b:e6:18:17:
                    5c:43:af:f8:fa:13:0e:47:10:12:51:66:c8:9c:8a:
                    27:29:23:b5:88:0b:08:43:08:8f:7b:e4:55:01:5e:
                    52:80:aa:4b:0e:89:f7:ca:4f:93:b1:36:d4:23:66:
                    de:96:22:fa:3d:ca:4b:f3:12:0e:c9:d3:7d:1a:02:
                    f2:95:80:86:3e:c3:87:23:3e:41:b7:15:ea:08:80:
                    91:e3:0a:3d:65:be:ce:8f:36:c9:22:42:ab:b0:ea:
                    88:5e:28:36:ed:00:0f:98:a0:89:6a:cc:a7:39:1d:
                    37:05:9f:aa:11:e5:0b:d1:2c:6c:74:57:54:40:07:
                    93:92:e4:34:31:ac:db:0c:45:98:a4:93:f7:ef:1b:
                    d9:dd:93:52:8c:76:f9:95:b6:44:b1:74:46:ca:bf:
                    dc:2c:44:8a:2e:f8:a8:97:34:8e:7b:04:7e:90:55:
                    74:f8:c3:1b:06:f9:20:1d:f0:9c:b7:9f:88:c9:27:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:A5:73:4F:75:59:E1:53:81:3C:28:FE:52:85:EA:FB:1D:82:FC
            X509v3 Authority Key Identifier:
                keyid:A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:60:a1:5c:15:a1:65:2d:b2:02:37:5e:a7:76:1e:3d:7b:07:
         39:9f:6e:e9:33:97:30:06:51:13:de:49:2e:f1:06:e5:37:24:
         0f:52:da:cc:e1:da:4e:60:1f:40:35:18:76:7f:8b:53:bd:59:
         c4:0a:1a:43:a6:97:5b:ac:45:7c:34:c2:9c:1e:4f:0a:bf:2a:
         04:bc:3c:4c:cd:6d:9b:58:56:eb:c5:ea:90:79:1b:be:37:85:
         19:bb:55:7b:6f:2a:4e:0b:4f:17:ff:40:86:eb:26:01:2e:01:
         43:88:ef:55:70:ad:1d:a0:75:19:fd:65:06:34:27:e8:22:ed:
         f8:63:77:bd:90:dc:fd:4e:ba:07:aa:35:a2:93:5c:9b:60:84:
         88:ed:8a:b9:dd:1e:4c:41:a5:00:cf:24:02:3c:a3:e5:c3:0f:
         3c:08:89:b6:9f:45:55:54:a1:10:e6:0a:28:8d:4f:e3:a9:67:
         c0:90:8e:d4:59:2f:5c:ee:81:6b:ff:f4:e2:9a:15:d3:7c:51:
         cf:11:bf:29:41:3f:18:b4:a6:8d:df:6b:b8:a4:fc:4d:7f:db:
         f5:32:13:2f:0f:cf:c6:dd:5f:73:9e:9f:56:f8:4c:18:84:6c:
         a8:f8:9a:d8:ff:09:4c:36:bf:97:17:41:f9:cb:fb:94:63:ce:
         64:14:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----