Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft
File:                     oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft (raw, json)
Hash identifier:          0gHa1SXrTilHArvQsoyJfHobpD8Oox1yka04CzTRnI0=
Subject key identifier:   FD:AA:68:32:05:A4:8D:9F:40:AE:56:56:B2:C4:D3:8C:91:6E:79:C5
Authority key identifier: A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
Certificate issuer:       /CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Certificate serial:       01922F11E5C236B5E4F2FE783A05B668C652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft
Manifest number:          0873
Signing time:             Thu 26 Sep 2024 16:02:35 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:35 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:35 +0000
Files and hashes:         1: ibv39Ay3PJbMdntufQht56n0Zbs.roa (hash: dro2yZ1kMlvQloAU22rhnene53Po07NmAGCSu5zovkk=)
                          2: oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl (hash: a4gVGrD5HPF/9iMjr0TBtJ1ouhbyF7Sw/jMF/JxotnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:e5:c2:36:b5:e4:f2:fe:78:3a:05:b6:68:c6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
        Validity
            Not Before: Sep 26 16:02:35 2024 GMT
            Not After : Sep 27 16:02:35 2024 GMT
        Subject: CN=fdaa683205a48d9f40ae5656b2c4d38c916e79c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:03:b2:59:dc:4c:59:93:1b:96:f4:bd:64:
                    9c:b2:d9:b5:1f:fd:4c:51:e9:57:da:8d:92:8f:e7:
                    ea:c3:75:e6:49:61:49:55:bf:c6:da:62:80:23:b8:
                    14:39:3c:3b:f0:7b:d7:83:37:8f:93:a3:ff:42:8d:
                    d6:0b:46:a7:2d:0d:d8:19:37:a8:1d:fb:9c:ef:f2:
                    2b:c5:32:73:98:a1:e4:d2:56:e7:f1:c7:60:00:51:
                    5f:98:bf:7d:aa:13:84:ca:00:f2:db:59:3c:4a:88:
                    01:45:fc:f5:0c:c4:e5:72:67:aa:33:6d:01:a1:21:
                    38:16:30:19:6b:9b:89:e1:e7:15:37:b1:9f:f4:e1:
                    71:44:f2:d8:be:fd:0b:a6:6b:27:54:5f:41:da:84:
                    4b:90:e7:63:98:21:1d:01:ae:46:3a:fe:d6:1e:70:
                    fb:be:f5:28:c1:8c:60:d9:ff:07:ff:be:6a:55:1b:
                    e5:dc:0f:00:84:bd:15:09:0a:03:67:35:3b:a4:e7:
                    ad:ca:24:87:d9:fe:3c:19:a4:bd:17:16:76:7b:fe:
                    85:eb:ed:26:0e:77:f4:3a:de:10:ce:38:cf:98:f1:
                    84:a2:d0:00:b8:a0:73:cd:16:64:7d:22:a5:b4:7a:
                    c6:db:ef:d0:16:25:71:cc:be:34:e6:35:4c:e7:41:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AA:68:32:05:A4:8D:9F:40:AE:56:56:B2:C4:D3:8C:91:6E:79:C5
            X509v3 Authority Key Identifier:
                keyid:A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:13:f5:25:51:31:ed:97:b1:c5:46:f9:31:0e:0c:d4:c7:69:
         18:d0:a8:93:da:73:93:f6:ee:3b:d5:64:b3:57:59:1c:4e:2e:
         d6:e6:f0:35:16:ed:bb:07:f2:17:0e:3a:4d:a9:7c:93:ce:99:
         fd:7c:b1:ac:1e:9f:64:8c:89:cd:c9:8d:5f:8d:c5:d3:b6:a9:
         d5:8b:3e:74:5a:bd:fd:be:96:08:2d:69:8b:44:b4:6c:2c:7d:
         23:ae:58:9e:eb:ec:40:45:c1:3e:0b:9f:4b:af:2e:74:4a:30:
         72:ad:a7:bf:c6:ff:53:5d:3e:24:25:36:02:99:d5:0a:c5:02:
         b2:e0:59:5e:72:a5:db:c9:88:e3:85:4e:7b:c4:49:6c:ec:59:
         3e:44:3d:df:2e:5e:da:22:55:21:6d:28:f6:01:d3:ca:c1:99:
         b5:1e:9e:56:32:66:12:da:af:73:0f:8c:9f:dc:fd:51:55:10:
         b9:3e:04:ca:b8:db:a8:aa:55:44:fb:25:1b:df:42:c8:f6:36:
         54:1f:db:bc:72:b7:5a:2b:7f:df:13:4e:f4:ed:4e:c1:20:44:
         4d:66:12:db:24:cc:72:26:13:45:d4:54:9c:78:2a:e7:7b:f6:
         dc:bd:32:5e:57:f0:9f:e7:96:a0:e8:94:af:01:f1:d0:12:81:
         47:72:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----