Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
File:                     49ifjyq45URrTJ4SXKywJ0icp_s.mft (raw, json)
Hash identifier:          jqhBjCg/kmOck+/hw1wZXfuLznjuY/lSoHzZI2WZgkk=
Subject key identifier:   E4:F6:91:9F:62:9D:B4:C8:EF:6F:BA:62:A3:F2:3E:03:4E:81:BE:F1
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Certificate issuer:       /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial:       01934671812F81B4C269A98CCD3D16E411DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
Manifest number:          0795
Signing time:             Tue 19 Nov 2024 22:01:03 +0000
Manifest this update:     Tue 19 Nov 2024 22:01:03 +0000
Manifest next update:     Wed 20 Nov 2024 22:01:03 +0000
Files and hashes:         1: 49ifjyq45URrTJ4SXKywJ0icp_s.crl (hash: +CzEgrOBqUKofMq343XAP5zYKj3wLGfkiu9PlczqM34=)
                          2: _T95pb3fSEz9wIRRNrJ3URoDyA0.roa (hash: b9DXDFtYGSmkdIdbmXbJbKOGmfHzZxo/lkWoAYmkF+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:81:2f:81:b4:c2:69:a9:8c:cd:3d:16:e4:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
        Validity
            Not Before: Nov 19 22:01:03 2024 GMT
            Not After : Nov 20 22:01:03 2024 GMT
        Subject: CN=e4f6919f629db4c8ef6fba62a3f23e034e81bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:07:85:42:52:e6:c0:1c:66:97:43:e0:59:
                    56:4c:36:8e:29:3c:85:75:5b:40:22:d0:b4:0b:b8:
                    0c:fb:37:b5:5b:f0:01:60:d3:83:8d:73:af:b2:58:
                    bc:2d:97:27:5a:6a:e1:3d:e5:28:13:5f:b4:5d:c6:
                    5a:a9:e9:0a:2a:d3:21:15:ae:b3:bf:0f:5d:4d:79:
                    b4:aa:cb:3a:51:8f:50:f6:6e:44:55:76:ed:48:9a:
                    b0:98:21:e4:50:9c:6c:b6:df:e7:ff:8a:20:54:45:
                    9c:ff:a7:09:8d:95:e1:0b:91:d6:c9:03:2d:5e:5a:
                    e0:72:74:3f:75:d5:78:91:08:4d:95:26:24:02:fa:
                    3c:83:6c:0c:83:d4:b5:b1:58:bc:7e:84:c1:3a:8d:
                    85:1f:61:aa:a9:6b:b1:4a:71:d9:e0:07:a2:8f:97:
                    18:5e:50:ae:3e:2d:c7:b0:32:7d:bc:92:09:1a:91:
                    ae:59:86:32:a8:e9:76:34:4b:26:12:d8:5a:36:58:
                    8c:9d:9e:f7:6f:d3:31:87:13:da:90:b7:0f:82:1e:
                    52:08:0d:5c:d3:d7:d9:2d:f2:b1:41:e0:cd:0c:f3:
                    80:42:7a:2d:b8:97:fc:c3:e7:1a:87:27:36:2e:5a:
                    9d:ea:2d:91:e4:3d:d1:3f:b3:ea:6a:b9:91:ef:49:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F6:91:9F:62:9D:B4:C8:EF:6F:BA:62:A3:F2:3E:03:4E:81:BE:F1
            X509v3 Authority Key Identifier:
                keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:1e:f7:03:83:90:73:c2:61:35:77:5c:a1:3b:05:51:3b:
         3b:bb:ee:ff:d3:d8:11:09:4b:d1:0f:9d:68:31:6b:b2:88:a2:
         8e:6d:47:89:df:05:0e:ff:aa:6e:ce:a5:81:1a:ab:23:42:c7:
         03:56:e8:ce:ea:5a:b4:85:20:7e:6f:cf:3a:0e:aa:4c:8a:1d:
         f4:68:4e:6a:f8:f5:d9:ef:0b:22:88:29:b5:e9:3c:a2:06:a4:
         d0:2e:51:06:14:a1:9e:e6:b0:96:67:ec:04:75:8b:33:90:6f:
         5c:8f:ae:13:ce:af:ca:50:ed:89:c3:e7:35:df:da:cb:f7:f9:
         35:71:c6:4d:b6:17:10:70:2a:2a:6f:2f:b1:87:3d:e0:a2:34:
         45:f3:22:35:ec:d7:4d:4f:2a:7f:66:47:7d:fe:3b:d2:31:90:
         c0:cc:b2:76:7e:5e:27:98:22:2a:2c:d3:b4:9b:b3:64:10:64:
         6a:70:d6:f6:f0:24:b4:80:c3:7b:65:de:97:31:67:0a:aa:1f:
         57:df:ca:2c:16:e6:15:53:b5:6f:fa:3e:3e:1f:05:87:a3:ba:
         bf:2b:17:29:ff:21:b0:bb:cb:73:82:f5:91:45:c1:b4:cc:88:
         65:52:e9:35:6b:1f:c3:13:80:e1:3b:30:9e:a7:4c:22:c4:1c:
         8d:6a:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----