Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
File:                     OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft (raw, json)
Hash identifier:          MpF5i+Ui+mnrYk8Oyrl0wr7cvWlUQ+a3ho8HN4RiHBY=
Subject key identifier:   1F:89:9D:79:69:CE:BE:CA:C9:0A:76:11:D4:2E:2B:2A:EF:D7:C2:BE
Authority key identifier: 39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
Certificate issuer:       /CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Certificate serial:       0192FAB21F530A53ACCC65532E9B5CEC2728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
Manifest number:          1341
Signing time:             Tue 05 Nov 2024 05:00:30 +0000
Manifest this update:     Tue 05 Nov 2024 05:00:30 +0000
Manifest next update:     Wed 06 Nov 2024 05:00:30 +0000
Files and hashes:         1: OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl (hash: hkjK2vLgzYNgDE4NlKUIfzezDkKMAlpRFanFveDQPOw=)
                          2: kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa (hash: MwxoHM3vEk3eb7cvcq7ElEp7kNipwz1Q047cRcbqBUI=)
                          3: lyTCERDgv679X47XBAMqB-8Ezmk.roa (hash: 4S1nWM1QowUDpbMkoufqHf+Vxw6dUug0Jrl3MyzQ4T4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:fa:b2:1f:53:0a:53:ac:cc:65:53:2e:9b:5c:ec:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390d4b34493382383a2096ea9e0f9b7f94f33280
        Validity
            Not Before: Nov  5 05:00:30 2024 GMT
            Not After : Nov  6 05:00:30 2024 GMT
        Subject: CN=1f899d7969cebecac90a7611d42e2b2aefd7c2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:44:91:eb:15:f6:8a:d2:73:60:41:c6:61:
                    49:f5:3e:ad:5b:93:18:6c:0b:16:5b:7f:67:8d:f5:
                    88:e3:ae:96:0b:82:92:8a:f4:c4:66:08:51:e5:5f:
                    79:0c:96:38:5c:4a:93:1b:25:4a:e1:91:43:f8:60:
                    90:fe:6d:c5:a9:e7:21:23:07:9d:a6:7d:39:20:d2:
                    9f:d3:a0:c7:a3:88:b9:25:b3:6c:38:ee:7d:28:0e:
                    7f:53:e4:2c:32:8e:47:e4:45:6e:21:a5:77:fd:9b:
                    ce:e8:8b:a5:b1:77:7b:11:9f:9f:13:59:45:21:e3:
                    63:64:40:58:7e:91:cd:79:85:65:b7:82:35:f9:71:
                    8c:f1:09:7c:7a:8c:81:84:ef:e9:d4:a0:d8:26:09:
                    7b:cb:62:07:16:29:1c:39:c0:40:de:3e:73:53:37:
                    58:1d:d5:36:78:35:68:2e:bf:49:85:07:58:f6:50:
                    4e:8c:de:6f:77:3f:7a:f9:1e:a4:10:6c:48:53:6a:
                    21:30:0b:9f:25:b7:77:d7:2e:4d:d8:08:83:06:8b:
                    96:79:5e:4c:30:5f:5a:ea:8b:05:33:1a:89:68:3a:
                    89:41:fa:d3:e3:fa:e4:b1:b4:3a:8c:33:f6:88:d7:
                    f4:f8:c7:7b:7b:83:66:5a:1a:77:cd:4b:1d:f6:a5:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:9D:79:69:CE:BE:CA:C9:0A:76:11:D4:2E:2B:2A:EF:D7:C2:BE
            X509v3 Authority Key Identifier:
                keyid:39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:78:98:7f:10:ff:fe:4d:ee:6f:78:8d:ed:df:ce:85:e6:c3:
         a8:db:fa:c9:61:fd:70:53:ca:f3:49:c1:ba:61:2c:2b:87:81:
         65:05:c6:f7:4c:67:55:93:57:6b:53:01:23:07:99:b5:2b:c3:
         a4:df:58:d3:52:12:89:71:21:70:d0:b5:6d:6f:e6:84:a9:ab:
         e2:9d:1e:34:e0:57:2b:a2:30:73:b6:5a:a4:01:9a:98:69:bf:
         2a:4a:66:35:5b:35:5b:b6:2b:84:ea:16:21:65:34:51:29:a2:
         bc:6a:65:78:77:af:bc:0b:05:7a:76:a3:de:95:53:5b:2b:9b:
         46:11:30:20:14:82:a5:25:60:84:cf:f7:86:e5:95:b8:66:ec:
         a9:0b:0b:28:8a:37:8f:c5:40:09:60:cb:96:29:1f:cb:2c:79:
         34:ee:ac:4e:e9:e0:1e:21:6e:25:78:61:98:fe:4f:7d:e4:a5:
         81:3c:de:b0:6d:4d:37:5b:b6:cd:cf:6e:22:c3:2b:10:19:3b:
         48:83:70:99:74:59:57:ac:b2:ab:66:26:15:9a:bf:b1:78:30:
         84:0d:e0:44:25:33:54:b3:23:21:6b:54:3b:0d:03:eb:f1:b1:
         6b:b2:67:91:fb:55:ed:68:44:68:7c:a5:69:9b:fb:69:65:b8:
         18:70:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----