Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
File:                     U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft (raw, json)
Hash identifier:          QosH51yczuyhahK1tQ4YnBqxJHOYpmmk68tUzH3UjTo=
Subject key identifier:   4E:CC:DA:EF:8F:09:1C:06:1C:95:D0:32:2B:EB:4B:41:E5:6C:03:52
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Certificate issuer:       /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial:       018C8A51F4CCF3104F522374AE96EB725CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
Manifest number:          0FEF
Signing time:             Thu 21 Dec 2023 03:01:15 +0000
Manifest this update:     Thu 21 Dec 2023 03:01:15 +0000
Manifest next update:     Fri 22 Dec 2023 03:01:15 +0000
Files and hashes:         1: Bl07xZK5FwNV4uJC1X2SK30R3dM.roa (hash: LoN1tEvPsZvjUEF2xvUc2Htoz9dn6nf+4Nuub+ESDOI=)
                          2: U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl (hash: eCteILGSJLNTa3RTcS/S3fFdAmFLJgtUBlAHPgb0Nd4=)
                          3: vgp-tfaDBAC9KVZWpG5twKVa8Ac.roa (hash: u0Hv3+BaDuwxBLB0P/wCWrbv+j6pjYDV9dsXW4v7Ns8=)
                          4: woOWSJSfC1d3AaOyO4FRx0muJzg.roa (hash: 9ER+GVPFc6GH85jIS0R3OnPOojotXb80VSexwAqUjUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:51:f4:cc:f3:10:4f:52:23:74:ae:96:eb:72:5c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
        Validity
            Not Before: Dec 21 03:01:15 2023 GMT
            Not After : Dec 22 03:01:15 2023 GMT
        Subject: CN=4eccdaef8f091c061c95d0322beb4b41e56c0352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:99:5a:c8:0a:7d:87:2b:2a:fb:ce:5e:95:
                    07:c2:44:26:d8:72:d7:92:c2:6a:91:54:de:9c:40:
                    79:3b:10:e7:98:ad:13:08:0d:35:e4:28:d5:e4:bd:
                    7f:ff:09:18:21:08:59:62:7f:b8:a6:f1:4d:8d:c8:
                    98:e1:47:9a:85:bd:26:81:fb:22:aa:15:bb:60:7a:
                    cb:a4:31:e2:e5:28:94:35:d7:cc:f8:48:72:52:46:
                    0b:c2:29:b2:f8:86:2c:ae:35:9e:9c:f1:e8:d1:db:
                    bb:ec:ac:5f:dd:80:74:24:2f:01:34:eb:86:64:c6:
                    de:ee:a8:20:d8:67:e4:c5:61:75:6a:2e:05:f2:27:
                    8d:77:01:c9:29:34:7d:d1:ff:a9:af:02:47:77:b1:
                    03:e1:28:d4:c5:6f:57:05:38:0c:73:3b:8f:03:76:
                    b2:6c:c8:19:c9:4b:93:0a:0f:45:e8:6a:5b:e5:70:
                    eb:64:88:42:12:68:1c:31:27:75:16:a1:c4:91:35:
                    39:51:29:e2:0a:6d:6a:e6:18:a6:67:1a:ea:5a:09:
                    62:02:35:be:37:4c:52:43:7e:43:4f:55:2d:c7:08:
                    5c:79:33:fc:57:44:46:08:bd:7b:f9:3a:89:19:6d:
                    f2:81:ba:c5:55:2f:e4:74:3e:93:f0:e0:93:2f:06:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CC:DA:EF:8F:09:1C:06:1C:95:D0:32:2B:EB:4B:41:E5:6C:03:52
            X509v3 Authority Key Identifier:
                keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:18:d3:1a:ee:09:77:de:23:be:26:81:02:88:1e:8b:ad:dc:
         5d:ed:c4:33:c5:12:3c:1a:51:bf:1f:2e:27:68:4e:40:bc:82:
         d8:a8:65:7c:f4:6d:78:f5:2b:c2:28:af:4f:51:e7:94:e8:a6:
         a1:b0:06:4a:9c:71:ce:b0:72:2d:62:8e:89:ed:cd:a3:2a:b4:
         c3:ec:22:86:ab:a5:37:41:e9:d3:40:69:40:e7:88:e9:0c:d3:
         f0:d4:5e:d3:56:58:57:63:bb:3c:75:76:e4:9d:50:aa:0c:5d:
         09:6e:2c:af:df:56:56:50:65:42:05:38:0d:5c:96:f5:78:88:
         ab:fe:ca:ad:f9:de:8f:c3:c6:b6:fb:fb:59:13:55:0d:8a:36:
         89:0a:2b:19:9f:75:c9:1d:72:b1:56:60:e9:71:2c:81:56:a5:
         75:65:e1:38:ef:d0:b8:2b:76:1c:cd:ee:66:46:ee:e1:d5:e3:
         f9:eb:6d:24:28:70:3f:7a:4b:57:b7:50:bd:8c:77:39:06:ed:
         2f:00:a8:6c:1f:4d:70:1f:bc:30:dc:f3:c0:41:98:d4:3a:c1:
         db:00:65:b1:48:e0:00:87:80:95:72:dd:91:1e:9e:5d:10:de:
         b9:4e:c8:c5:d2:e9:0b:5f:72:27:db:a1:41:6b:6b:56:dc:b9:
         fa:cd:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----