Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
File:                     UyTe-6rek-mY4TqUICndWTuLLqM.mft (raw, json)
Hash identifier:          YNSji/oX5hHOW85CfAmWRiFW8Cug9ELxVCh8eGzSPRM=
Subject key identifier:   81:AD:94:22:C9:65:3F:14:8C:77:82:12:18:B1:29:F5:D1:2E:B7:53
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Certificate issuer:       /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial:       0190C993FC7EF41936F76A295C3AA6C24689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
Manifest number:          123D
Signing time:             Fri 19 Jul 2024 06:00:37 +0000
Manifest this update:     Fri 19 Jul 2024 06:00:37 +0000
Manifest next update:     Sat 20 Jul 2024 06:00:37 +0000
Files and hashes:         1: 3OU7DEPCcwq8mtXf9odnmmtJKuo.roa (hash: 49XqWQXAdMLlc85avLVcVxibJgVgfWuozGKN14gEp9c=)
                          2: Ai5dkUXCzgcPoO95JogZnbilz_I.roa (hash: WtthV4dxJTvmg4/4IyCeneRzhnq3X0FKu8AwWAiuN7E=)
                          3: HWV031eaF9PJCfOXn4pEJMzmtk0.roa (hash: y7EwDITsW7FWX2xwaL8l1Icvzusr5+5vDrVayd5AfXE=)
                          4: UyTe-6rek-mY4TqUICndWTuLLqM.crl (hash: cudjIUWWhg8UUQzDiBF4faL2qreYt/bL+9BeRUQKh44=)
                          5: ooOrmpeEEQExrr2LTbsglpEh6Xg.roa (hash: q2aOxjW3X2OoXVplPwjr7Ot/mVS/NK1GCAYngTAsXYo=)
                          6: pdHUsPLd0RbXLZSO3lT30Pa4zLU.roa (hash: wrwZby8sKoZ2ieDJiIxs8e1YCnIL6T8MXgsDBaVl19c=)
                          7: qhacopoCxb0GvWmi6Dsew4WUrlU.roa (hash: gchh6VEGyHxRmGHOXDkK8QXuI0ViMdcTXzGGElb3hNA=)
                          8: yLmRnoL2sChpiQ0XahrEWXKJj_E.roa (hash: QqPqOb97aZXJkyP5XfZzkIsAlta9ACWnkmhNFRHwIIk=)
                          9: zpliDRPd2Zt6-0MSmjY_bRgWIbU.roa (hash: usHJBFbsXeoP486b8Nyb59ECP/5NVUlc4zXXzAEpC0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c9:93:fc:7e:f4:19:36:f7:6a:29:5c:3a:a6:c2:46:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
        Validity
            Not Before: Jul 19 06:00:37 2024 GMT
            Not After : Jul 20 06:00:37 2024 GMT
        Subject: CN=81ad9422c9653f148c77821218b129f5d12eb753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:57:80:1a:c9:29:cb:dc:80:a1:f2:29:00:
                    8e:97:de:fb:66:65:19:d3:c5:e7:bd:1a:d8:c3:6b:
                    c0:90:a1:ab:dc:b7:00:6f:02:3e:0b:d6:fa:65:b3:
                    8a:41:04:05:b8:a8:ed:c5:e9:5e:b3:2e:45:9f:4c:
                    99:09:68:c5:05:87:a7:dc:b8:b5:b7:98:11:51:ff:
                    81:1f:d2:20:ac:ab:5a:e2:eb:3a:b4:c5:a6:7e:d5:
                    1a:44:33:98:21:8e:ed:e1:30:0d:6f:fe:66:2f:0c:
                    bb:26:be:29:fb:55:c9:e9:8f:2a:62:bd:4a:77:51:
                    67:f0:fe:dc:a5:df:24:17:9a:8f:fd:99:aa:62:2e:
                    1f:26:94:55:a4:93:f8:b9:76:a6:7a:30:a3:3d:65:
                    dd:df:2c:76:3c:06:fd:80:a3:7e:71:2d:af:da:aa:
                    0a:a0:91:6c:11:45:f7:e7:47:ec:75:81:16:98:23:
                    e9:f8:df:38:45:70:21:79:26:7a:10:31:ae:90:50:
                    2f:0b:55:2a:fb:8b:c1:f9:24:a7:33:01:37:49:dd:
                    eb:d7:d7:32:d9:86:2e:c0:d3:22:82:e4:de:2c:a9:
                    98:d6:36:09:e9:17:d8:e4:5b:ba:8b:a0:c4:fc:87:
                    c1:19:0c:40:eb:9c:f7:6f:22:07:60:17:17:5e:bf:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:94:22:C9:65:3F:14:8C:77:82:12:18:B1:29:F5:D1:2E:B7:53
            X509v3 Authority Key Identifier:
                keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:63:4a:8c:5e:45:41:5e:9c:01:bc:46:c3:f8:58:9c:87:
         48:cf:44:a5:3b:e2:f5:c2:b6:9e:1a:ae:f7:18:04:aa:b8:95:
         4c:22:0a:a4:a6:35:91:a6:92:fd:bb:3f:d3:9e:a3:15:d6:64:
         63:3c:d9:3e:ca:55:bd:15:69:8f:80:00:fa:e9:04:6a:92:e0:
         25:e8:b3:22:f4:bd:76:2c:b6:9a:13:44:3a:56:29:75:fa:01:
         74:45:f0:c1:51:a9:fc:c1:b3:72:43:93:23:d0:ab:75:9a:7f:
         e7:8a:89:6f:eb:1d:cf:3d:91:fa:0a:31:c9:ef:45:18:90:47:
         bc:8b:a1:24:4c:6b:f8:c0:73:91:fc:cb:81:d1:24:9f:77:bd:
         8c:ab:54:82:c8:83:e8:1b:8f:4c:40:79:69:b9:f9:ea:8c:aa:
         75:89:38:8b:10:69:99:36:0c:03:0d:89:e2:c0:51:18:87:59:
         d3:86:ec:ea:1a:c7:03:41:bf:bf:a7:a5:c0:ab:71:ef:01:98:
         2d:eb:56:90:b0:62:ce:37:53:e6:ca:02:34:33:ea:1a:46:d5:
         6a:7e:7e:8f:63:28:20:f6:51:18:2a:52:0d:ac:c5:58:1f:09:
         c3:f4:76:8d:54:7f:06:d7:2d:9b:dd:47:69:9b:2f:f9:b6:39:
         44:a6:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----