Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
File:                     LW8f1O9FRHbRJBD99h1N-MPHwhs.mft (raw, json)
Hash identifier:          eRpBNVIXqrFuepd3eI+Rz2JfXG8OQdws3Ijmpd4T+gE=
Subject key identifier:   31:B4:A2:D2:8E:1E:EB:8F:B6:2C:E3:6E:23:24:72:BD:C0:23:F8:8E
Authority key identifier: 2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
Certificate issuer:       /CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Certificate serial:       01922F7ECC9B01FA98814739A74083716261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
Manifest number:          0ACA
Signing time:             Thu 26 Sep 2024 18:01:31 +0000
Manifest this update:     Thu 26 Sep 2024 18:01:31 +0000
Manifest next update:     Fri 27 Sep 2024 18:01:31 +0000
Files and hashes:         1: 1-1HHsrOeuzuCnaFMj_7_dtRyc60.roa (hash: ypcrwR6GPMPZeB1P3u9TYuxfw2nY9xlfxnebd5qCNNQ=)
                          2: LW8f1O9FRHbRJBD99h1N-MPHwhs.crl (hash: WUSz445DxIzNc8GfIVCsMxAG3kcZheVr9hcBG209Rcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:7e:cc:9b:01:fa:98:81:47:39:a7:40:83:71:62:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
        Validity
            Not Before: Sep 26 18:01:31 2024 GMT
            Not After : Sep 27 18:01:31 2024 GMT
        Subject: CN=31b4a2d28e1eeb8fb62ce36e232472bdc023f88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:5d:a3:60:c5:c4:5c:0d:8e:49:70:6c:83:
                    4d:20:87:0e:34:fd:dc:dd:db:cd:94:29:f1:21:c7:
                    51:67:61:e9:3d:53:90:92:6f:03:a6:66:b3:68:8a:
                    73:02:1e:f7:0f:d9:f1:0e:76:c5:14:db:bb:c9:96:
                    89:41:5e:a8:1f:2a:02:28:05:d0:c0:89:4d:c4:35:
                    66:94:46:e2:bc:97:3f:ca:64:d4:47:d9:79:62:e1:
                    ca:03:08:11:18:75:6c:60:21:77:59:1c:91:1a:90:
                    0d:40:24:7f:f3:e6:da:70:58:1b:9c:f9:89:45:82:
                    40:d5:02:d4:8c:84:66:ef:55:a3:6e:11:dc:c8:f9:
                    5a:b7:d4:81:5c:7e:83:da:3b:7c:40:7b:8f:1d:a4:
                    f5:e0:ea:9d:64:20:f8:6e:80:35:57:d3:ec:8d:13:
                    75:47:07:ba:3d:40:96:23:ab:04:f6:c1:ca:eb:95:
                    28:a7:01:30:8f:dd:2c:cd:e2:cd:f8:4a:9c:a3:4a:
                    f8:aa:38:12:a3:7f:52:92:af:bd:4a:f9:59:91:ab:
                    79:82:df:ca:9f:fb:95:8f:86:7d:4f:4b:11:bf:84:
                    a5:1f:24:01:57:4d:36:cf:8e:43:67:6e:6d:88:f1:
                    20:04:ce:5a:a6:f2:01:6a:19:7e:e8:6e:ee:a7:28:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:A2:D2:8E:1E:EB:8F:B6:2C:E3:6E:23:24:72:BD:C0:23:F8:8E
            X509v3 Authority Key Identifier:
                keyid:2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:78:39:9e:ef:33:77:77:34:f7:ef:35:57:ec:9b:57:bf:65:
         19:81:99:f5:cb:c5:c7:70:03:9d:53:6a:26:bc:4d:cf:b0:09:
         e9:a0:55:a3:94:a3:66:04:18:46:3e:86:5f:e7:fe:39:42:93:
         2b:33:7a:6c:46:72:20:a0:d9:1f:60:a4:cb:e7:3d:e8:d1:0e:
         70:60:27:f2:14:86:95:d6:13:db:4a:bc:f5:89:35:78:ab:72:
         c6:8d:be:b8:f4:a6:6f:98:c7:43:e9:63:45:51:9e:47:f7:d2:
         33:54:9e:0a:70:3e:99:8c:7c:8e:85:ff:a1:82:0d:42:de:fb:
         7f:98:13:6e:61:c0:9f:31:85:28:0f:ce:db:1d:58:73:94:2f:
         a5:cc:aa:1c:21:31:b0:29:79:d7:c6:d7:44:5b:de:a7:17:aa:
         52:71:de:de:5f:7e:b3:34:82:ba:2a:a1:56:de:5c:53:c5:87:
         d3:2e:9f:9d:93:90:8c:9b:ca:3e:86:23:28:8d:f6:47:ff:9f:
         0f:ed:e8:24:92:4e:bf:ee:8e:90:46:b1:a9:45:42:4b:81:44:
         1f:d2:c7:97:3c:fc:f1:6b:89:c5:01:a3:98:ae:74:e1:88:85:
         44:74:ce:3d:f9:61:12:1b:42:4b:66:b2:3a:f0:f8:68:13:a4:
         e3:8b:1a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----