Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
File:                     0YxJxtcTIiRYPq80iuQcUOYdn0U.mft (raw, json)
Hash identifier:          LTF6QVQOWdtxbO5004oT3jgtVA7GNHJCo0rEgwshdxg=
Subject key identifier:   5E:1D:D6:52:97:E1:73:4C:30:CC:24:67:04:33:27:5F:9F:A3:DE:8F
Authority key identifier: D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
Certificate issuer:       /CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
Certificate serial:       0192AF982003F7411A645FE49BD60D3AEA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
Manifest number:          09C0
Signing time:             Mon 21 Oct 2024 15:00:35 +0000
Manifest this update:     Mon 21 Oct 2024 15:00:35 +0000
Manifest next update:     Tue 22 Oct 2024 15:00:35 +0000
Files and hashes:         1: 0YxJxtcTIiRYPq80iuQcUOYdn0U.crl (hash: WbTCCuM5sGH4F/z7PB+827louHm+FSrq+uw7f9mP38g=)
                          2: G-iZEjdoir1-LBaeaKNIkXaoMHc.roa (hash: Fmj2luS6w4oJEIQFa3pKFPFSmCPOJ2EenjisQKOEVyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:98:20:03:f7:41:1a:64:5f:e4:9b:d6:0d:3a:ea:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
        Validity
            Not Before: Oct 21 15:00:35 2024 GMT
            Not After : Oct 22 15:00:35 2024 GMT
        Subject: CN=5e1dd65297e1734c30cc24670433275f9fa3de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:36:5e:1f:69:b8:5a:ed:21:02:58:67:3b:
                    2b:18:e6:bc:42:67:2b:94:4a:8d:5c:b1:21:12:c0:
                    b6:8c:11:8c:73:40:25:d3:51:03:92:6a:6b:2f:d0:
                    91:20:85:93:6a:7c:2f:97:5e:00:71:b3:3e:8b:31:
                    a0:89:a0:42:6a:40:74:81:66:8e:37:9f:4a:e0:e7:
                    3b:f7:0c:b2:09:a0:b5:94:6e:1d:6f:da:15:4f:2a:
                    47:20:2b:6d:ff:81:f0:87:29:79:c7:22:46:33:16:
                    c0:91:cc:b1:60:da:36:57:f4:6a:d0:59:84:40:40:
                    e7:51:ad:89:c4:b1:83:59:3a:07:f4:82:91:45:75:
                    ab:e2:7a:80:d4:aa:33:6e:69:62:05:7f:fc:ae:36:
                    06:19:c0:7c:c0:15:2f:f6:4d:c8:0a:c4:db:e6:64:
                    3a:26:42:34:c0:29:8e:ce:8a:9b:59:1c:33:0c:54:
                    9a:dd:68:04:99:28:bc:81:03:9d:f6:35:cb:cd:f7:
                    ed:fa:01:9a:eb:f7:56:3e:fd:dc:c5:50:b3:0d:d1:
                    f7:c8:bc:49:49:4e:0a:d6:74:3a:f4:24:50:74:cf:
                    b9:08:26:22:3c:57:bc:75:9d:8c:4a:c4:f7:78:4c:
                    21:a3:bc:87:54:73:0f:15:42:f2:c8:2b:3c:21:c2:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1D:D6:52:97:E1:73:4C:30:CC:24:67:04:33:27:5F:9F:A3:DE:8F
            X509v3 Authority Key Identifier:
                keyid:D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:63:77:3f:11:b6:6a:cf:aa:56:80:f4:74:89:1b:ed:b8:
         c2:08:69:50:c1:01:c6:df:4d:0e:ea:69:4e:3f:38:e4:09:72:
         53:9c:d2:81:13:00:65:c6:d3:56:f8:05:26:42:f3:f1:42:27:
         0f:64:29:3a:d2:23:22:5d:a6:73:ce:11:8b:f7:2b:1a:3c:bd:
         00:d2:16:7c:9a:0d:8d:17:c1:51:88:85:7e:ce:9e:c7:15:d5:
         c1:46:f5:ae:c6:af:be:b8:e9:89:61:1f:0b:ed:ae:a0:c2:39:
         83:2f:ea:c2:a9:e4:7d:74:23:2e:07:53:0a:e2:f1:7f:5e:0c:
         22:18:73:80:dd:7c:d4:92:32:c6:bb:65:5d:f1:53:73:0d:e4:
         bc:ac:df:9a:2e:16:21:ec:f2:99:68:97:f1:66:28:c1:bc:d3:
         8d:0a:ee:d9:55:6e:da:f5:df:c7:62:ca:a5:0b:82:ec:22:5f:
         c0:30:e9:c8:f4:38:24:d6:a8:e9:e0:e1:84:03:c5:84:e4:7b:
         b4:7f:da:3e:82:a8:f6:f4:09:86:00:10:5c:75:ef:1d:35:a8:
         80:09:2d:56:23:8a:07:5b:ee:ee:87:b2:f3:3b:67:8f:d1:1b:
         98:67:1e:d3:91:9e:7f:ed:a4:cd:76:97:f0:3d:f5:46:5f:68:
         2b:4e:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----