Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.mft
File:                     vs7XisRU98RZvBO9tHladnA8i5g.mft (raw, json)
Hash identifier:          S7Zx+r/u7/eILYyfZZq8OUCFECScIL4i+JnuzDym5Ao=
Subject key identifier:   D4:60:85:04:75:C8:84:1E:3E:AF:26:B5:A6:9E:CB:AB:4C:CA:D9:D8
Authority key identifier: BE:CE:D7:8A:C4:54:F7:C4:59:BC:13:BD:B4:79:5A:76:70:3C:8B:98
Certificate issuer:       /CN=beced78ac454f7c459bc13bdb4795a76703c8b98
Certificate serial:       01934717ACA2D004F763B0ECC9AD022B68DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7XisRU98RZvBO9tHladnA8i5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.mft
Manifest number:          0671
Signing time:             Wed 20 Nov 2024 01:02:34 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:34 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:34 +0000
Files and hashes:         1: kyDOPGSE7TJvLr9LhUwzCrcpZuw.roa (hash: cxtJmHfAF0/BiH3tq3BhJXlnP1v8gRtmYwTMVpyy4J0=)
                          2: vs7XisRU98RZvBO9tHladnA8i5g.crl (hash: GUPl0IyRPACEk2sYc6xuKPZU/JU1K/VR9MFaexDGf5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:ac:a2:d0:04:f7:63:b0:ec:c9:ad:02:2b:68:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beced78ac454f7c459bc13bdb4795a76703c8b98
        Validity
            Not Before: Nov 20 01:02:34 2024 GMT
            Not After : Nov 21 01:02:34 2024 GMT
        Subject: CN=d460850475c8841e3eaf26b5a69ecbab4ccad9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:f9:b0:26:31:75:35:da:27:cd:8a:0f:92:
                    43:74:98:15:d0:0e:fd:22:84:31:b7:a3:01:43:b9:
                    c2:52:d2:b2:8a:a9:43:39:66:3b:9c:3e:5b:61:87:
                    dc:04:b0:ca:b0:c4:a8:d0:e9:fb:97:fe:0e:9f:5d:
                    03:47:0f:09:7c:66:6e:a6:df:64:fa:73:99:0b:d6:
                    06:78:3b:0a:9f:c3:7c:3b:b0:13:89:ce:3a:45:f0:
                    ba:00:da:c9:92:3f:32:a2:e8:19:c6:58:29:88:ab:
                    bf:13:3e:05:b8:46:b6:a7:2f:92:9b:d2:26:f3:a3:
                    56:bf:b7:43:9d:8f:0f:53:dd:21:7c:97:79:fe:80:
                    ad:e3:a2:eb:af:f1:a3:fa:f7:e1:6e:3a:cf:a4:07:
                    1d:76:26:3b:6c:b9:53:db:46:b6:b1:c2:f4:d9:cd:
                    a0:76:90:1e:d1:c3:56:2f:4c:07:d5:6a:6c:7a:0f:
                    4d:df:95:8d:7b:15:5b:e1:15:17:dc:52:5c:6c:35:
                    f6:e1:c8:69:0b:8a:fc:02:c6:c6:40:f7:07:6b:7f:
                    e2:df:f7:9d:e6:06:2b:fb:76:5d:a7:f2:03:cc:ce:
                    6e:75:ec:2e:8d:ff:02:a1:60:44:a0:fe:6b:50:63:
                    72:3b:61:52:2f:8d:9b:f2:c1:53:c3:42:65:9c:7f:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:85:04:75:C8:84:1E:3E:AF:26:B5:A6:9E:CB:AB:4C:CA:D9:D8
            X509v3 Authority Key Identifier:
                keyid:BE:CE:D7:8A:C4:54:F7:C4:59:BC:13:BD:B4:79:5A:76:70:3C:8B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7XisRU98RZvBO9tHladnA8i5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:3d:ad:5d:b5:20:cb:31:d2:49:c2:7d:d8:74:76:35:00:
         57:20:94:9c:95:ed:28:bc:ed:e0:6c:53:63:dd:94:74:41:34:
         cc:9e:88:03:51:2c:75:af:fa:f0:cc:c7:1a:de:33:6f:6d:56:
         a6:04:b7:3c:60:14:89:10:cd:92:0e:35:9f:51:37:ac:99:c8:
         df:2b:23:bc:22:40:18:ac:70:8f:c5:04:f0:ec:4e:44:1f:b8:
         6b:ec:67:ea:c5:b9:13:10:98:f7:35:0a:1f:75:e9:27:de:b0:
         9c:b4:e1:2b:b6:38:d6:7e:bc:e8:a0:49:90:52:c2:9b:1b:3f:
         61:65:79:1a:b7:c5:0c:2d:ca:e3:74:fa:5f:57:74:13:d4:e7:
         05:65:ce:f4:de:3c:1c:5d:e5:1f:74:ac:dc:3b:e4:94:53:28:
         86:63:7a:e6:06:9f:7a:54:68:8b:1a:42:77:86:a0:25:f0:ec:
         de:a1:26:7f:ec:90:d6:a9:99:f1:65:a2:16:a6:b5:72:3a:64:
         70:e4:5e:d4:1d:be:8d:5c:b9:99:be:3f:a7:6c:01:ac:72:aa:
         2a:4e:54:0d:27:65:cb:d7:73:62:53:7a:ca:de:e1:87:1e:4e:
         9a:84:18:16:a9:02:78:a7:62:5b:7b:9b:3d:5d:82:31:e0:66:
         ce:84:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----