Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
File:                     TATgEjGx24ILH11UKDSrBfaT_Xg.mft (raw, json)
Hash identifier:          QCeqaRG+J6B8urlSqJ7nSMTaGwcl5Ldyu2hhFZ6xLWw=
Subject key identifier:   C3:FB:31:95:EF:D6:75:E3:9C:52:A7:9B:7D:B8:A1:E8:00:3A:45:EE
Authority key identifier: 4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78
Certificate issuer:       /CN=4c04e01231b1db820b1f5d542834ab05f693fd78
Certificate serial:       0193FAB0DDF67A72518B0DF1C5B18C1D771A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
Manifest number:          13C8
Signing time:             Tue 24 Dec 2024 22:01:55 +0000
Manifest this update:     Tue 24 Dec 2024 22:01:55 +0000
Manifest next update:     Wed 25 Dec 2024 22:01:55 +0000
Files and hashes:         1: TATgEjGx24ILH11UKDSrBfaT_Xg.crl (hash: fdGFAn3V08Vsen8YlKuFxvXnmkwkH5Qicwf/fZrbadI=)
                          2: YOGFlmlV2_WJqXJipmKxo-UT7Fs.roa (hash: yldbSa1BsIMdKFPk5mMeltr1Ebyxjw7wj9onkWkP/p8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b0:dd:f6:7a:72:51:8b:0d:f1:c5:b1:8c:1d:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c04e01231b1db820b1f5d542834ab05f693fd78
        Validity
            Not Before: Dec 24 22:01:55 2024 GMT
            Not After : Dec 25 22:01:55 2024 GMT
        Subject: CN=c3fb3195efd675e39c52a79b7db8a1e8003a45ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:da:29:60:e1:ed:18:46:aa:a7:16:74:81:
                    51:eb:08:9a:a0:73:95:ca:a1:4e:47:fa:24:9c:70:
                    4f:04:a7:e0:5d:3a:2a:7c:91:3b:6e:5a:d2:95:e9:
                    51:21:35:f8:d6:86:e5:5d:b2:80:d7:0f:f4:42:18:
                    1d:9f:c2:c3:4a:d0:ea:04:66:75:4c:c0:23:92:a1:
                    a5:12:5d:d1:83:9d:5e:07:60:c5:5a:96:28:c7:6f:
                    13:5d:1a:25:2d:3b:32:58:6a:ec:a9:08:42:83:20:
                    82:5f:29:40:f0:6b:95:b8:bc:1e:71:e3:b9:ec:5b:
                    7e:92:da:1c:0f:b0:55:3e:da:e6:5b:70:ff:e5:c6:
                    32:06:df:c9:78:f8:dc:34:19:f1:4e:db:16:f0:0b:
                    1e:c8:42:07:66:d6:db:6d:d9:83:a4:c9:b8:7a:ca:
                    fd:28:d3:c4:98:2f:94:e0:ea:b7:5b:3f:d1:9a:67:
                    90:fa:8b:0b:63:47:12:0d:6b:ba:1a:5a:03:69:ec:
                    65:79:b9:25:64:1d:cd:d2:c3:9f:d7:79:96:44:f0:
                    18:48:f2:23:b3:00:2e:da:29:47:c8:4c:42:dc:00:
                    42:98:dd:30:a6:c3:52:72:93:5f:2b:22:eb:97:c4:
                    ae:57:f6:c7:0e:ab:e6:e4:72:9b:53:7a:9c:63:88:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:31:95:EF:D6:75:E3:9C:52:A7:9B:7D:B8:A1:E8:00:3A:45:EE
            X509v3 Authority Key Identifier:
                keyid:4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:e1:0f:d1:0f:48:34:2c:38:5d:f7:e5:98:62:fb:71:cb:
         45:6a:e3:e6:f7:cc:57:5d:8b:c8:33:8c:c5:96:c5:f3:cb:e1:
         b1:c8:26:e6:d4:e5:e1:5a:64:fb:08:ab:35:79:e6:b8:c6:ec:
         3f:76:9b:05:0f:0b:68:c6:53:db:67:4d:84:6c:b4:7e:0c:70:
         ab:e2:a5:4d:8b:1d:8e:48:64:81:02:dc:5e:16:88:a0:69:17:
         f3:93:9c:ec:c9:1d:72:ac:db:d5:45:b7:79:0a:3c:61:0a:c7:
         3f:ac:d9:17:f0:f5:9e:f5:55:c0:5d:06:7b:f9:d5:a9:e7:9d:
         b9:25:6e:bb:af:6d:ab:d0:2d:a4:c5:f6:9a:79:67:a2:39:2c:
         93:26:37:2d:cf:83:d9:e6:f5:ad:27:9d:54:70:aa:34:c8:89:
         65:bb:55:57:92:bb:d5:8d:f3:82:50:f8:ea:d5:22:29:ae:46:
         a0:06:c1:94:d6:b3:0b:96:6f:ea:bd:b8:08:1a:73:94:7e:dc:
         4a:38:75:f1:db:06:e2:08:65:27:01:19:d5:0e:12:fc:d4:4e:
         72:35:30:24:8e:ae:01:2f:31:65:1c:c1:da:74:16:6e:c2:38:
         94:d3:2a:b7:e3:c3:fd:03:33:18:4c:47:03:e6:27:05:8c:89:
         6e:ff:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----