Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
File:                     _yS3L1-QQNTSJoj16lEfYV8VAEw.mft (raw, json)
Hash identifier:          uutuhOdCQwcQgNrQTJlbFxmiLa29kJ0BRm6/RFE4puk=
Subject key identifier:   61:B7:70:FB:D0:E8:0D:75:70:8F:6F:43:DA:F7:38:22:E8:34:01:0D
Authority key identifier: FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
Certificate issuer:       /CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Certificate serial:       0193F39B1D9DAB1682477AD03B609CA9C565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
Manifest number:          13C4
Signing time:             Mon 23 Dec 2024 13:00:49 +0000
Manifest this update:     Mon 23 Dec 2024 13:00:49 +0000
Manifest next update:     Tue 24 Dec 2024 13:00:49 +0000
Files and hashes:         1: F2WEHd37tJPKXfKnNbCgfAL8xBk.roa (hash: Y++OIw5H6psqrbf44uHtn8kjnZcMNTHmN3OMMaBUxpo=)
                          2: _yS3L1-QQNTSJoj16lEfYV8VAEw.crl (hash: iXXsFXfnL6pYiaYsyY13GBTdktVgMJV1QPkANXF33Ek=)
                          3: xGMiPELHN0xps6jTX2uaCpUA-Uk.roa (hash: nFXiZ/NZNvOmrGYayRVbxhA1gDDAZRPYjlCQaExjR0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f3:9b:1d:9d:ab:16:82:47:7a:d0:3b:60:9c:a9:c5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
        Validity
            Not Before: Dec 23 13:00:49 2024 GMT
            Not After : Dec 24 13:00:49 2024 GMT
        Subject: CN=61b770fbd0e80d75708f6f43daf73822e834010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:66:ae:29:15:f9:0b:6f:ea:b5:80:66:97:
                    6c:f7:c4:b5:4c:b4:9b:ab:8e:84:79:87:35:e8:5d:
                    f1:9e:35:1c:b2:85:97:8b:b2:bb:63:7f:22:20:a0:
                    ee:a9:0c:83:6c:05:35:fc:18:1e:34:2f:fc:78:49:
                    40:0e:44:ae:c3:3d:1f:d9:56:16:e2:5d:18:74:62:
                    14:c1:8d:74:64:cd:cf:12:50:eb:9a:d5:db:41:c8:
                    2b:ac:e3:26:a6:57:5e:fc:bb:88:0e:f6:31:ec:4c:
                    88:85:f3:01:66:33:82:9a:14:c1:15:fb:ef:08:da:
                    6a:6e:1b:c3:a0:10:03:77:e7:a8:e0:d5:43:a7:de:
                    f7:2a:60:a4:2b:06:5f:98:94:e1:27:30:aa:76:7c:
                    50:cd:fa:44:f6:f1:7f:8b:11:1c:ff:df:ff:fa:1c:
                    6e:52:a4:27:a9:04:99:ad:ed:94:a3:b8:fb:5a:2b:
                    9d:f3:46:1e:7e:b0:30:de:df:04:80:fe:49:a5:40:
                    e5:35:92:c9:b2:fc:d7:6e:43:8c:a6:a0:66:cc:8d:
                    9a:24:af:28:e4:65:c4:a6:d3:73:c5:24:da:c7:eb:
                    6d:dd:b3:3d:71:65:c1:5c:3f:c4:c5:13:f8:fc:9b:
                    84:6d:ce:2b:03:91:02:27:6b:83:c4:35:9a:97:7c:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:70:FB:D0:E8:0D:75:70:8F:6F:43:DA:F7:38:22:E8:34:01:0D
            X509v3 Authority Key Identifier:
                keyid:FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:cb:b5:4e:9a:3f:b3:5e:4e:28:b0:c6:75:f6:c6:c8:85:
         4b:a1:f1:89:af:6c:a6:b9:4b:96:a3:f9:f8:55:37:dd:4c:06:
         b7:a7:d6:c9:c3:6c:b6:b0:b9:7f:55:cc:ef:05:27:c6:f7:67:
         a3:6e:ec:3b:58:64:74:96:02:81:fe:e2:3c:d1:8e:8e:c8:2d:
         aa:ad:ec:eb:c1:68:c0:7c:c6:91:d9:2b:64:ea:5a:d7:7f:0d:
         2e:69:10:e0:a5:72:59:00:25:b5:98:07:ec:95:51:6c:5b:ea:
         aa:50:81:f4:2b:73:10:0c:dd:fb:5f:b3:b7:08:ec:29:81:72:
         0a:1a:ad:9e:67:91:bc:12:c6:bc:f9:05:63:84:00:8d:c0:24:
         60:41:5c:f2:b0:fb:21:9e:92:64:ad:9c:89:98:f2:8b:fc:86:
         c6:ec:42:7f:13:4c:89:37:55:0c:e3:b0:cf:35:c1:53:d9:7d:
         1f:ac:3d:8a:f0:6d:f8:60:da:9b:a4:11:ac:4b:5c:5b:77:c2:
         0f:d6:98:84:17:3d:fd:c7:5e:2f:d1:83:21:69:cc:26:dd:c4:
         c8:cf:ba:cc:56:80:2e:12:ff:c3:17:5e:03:ba:b7:a3:54:93:
         05:24:ef:22:70:38:c4:1d:7b:72:2e:b3:0f:0e:35:8e:38:4c:
         ff:0c:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----