Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
File:                     ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft (raw, json)
Hash identifier:          wWtWQS84NhF1FfN7AblEb5W76iWmr9gN4kiM8yMRH5o=
Subject key identifier:   16:8D:AE:30:54:98:BE:3E:3A:CA:2F:D4:2A:87:06:E0:94:F3:3C:D9
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Certificate issuer:       /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial:       0193FAAF9CAEE3B670FE7D409112BDA4AC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
Manifest number:          13C4
Signing time:             Tue 24 Dec 2024 22:00:33 +0000
Manifest this update:     Tue 24 Dec 2024 22:00:33 +0000
Manifest next update:     Wed 25 Dec 2024 22:00:33 +0000
Files and hashes:         1: ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl (hash: O4hsjnwoxy9+Qjwh3xSKrCyig3CNHztKex++JmjMv9c=)
                          2: rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa (hash: tjCSK37uqLsyNibvDIOYmAdzQ6MTUfBHFQH7pog1lPg=)
                          3: ztMFBySgYeNK1WuO7wte9mx5890.roa (hash: w8LECpTRTUjWqqiHNN9TrgV+zcgO6O2DaAPc6BiPc/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:af:9c:ae:e3:b6:70:fe:7d:40:91:12:bd:a4:ac:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
        Validity
            Not Before: Dec 24 22:00:33 2024 GMT
            Not After : Dec 25 22:00:33 2024 GMT
        Subject: CN=168dae305498be3e3aca2fd42a8706e094f33cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:e4:69:4e:8f:a8:db:8e:01:cb:07:10:54:
                    e4:a2:b3:ff:86:18:8e:1b:76:91:d3:d4:f6:76:af:
                    21:3c:94:6c:20:5b:45:8e:ea:5c:34:a9:7e:aa:23:
                    15:fd:4f:fa:d1:45:1e:98:8c:49:2d:79:cd:89:26:
                    9b:aa:96:f0:97:9d:de:a4:b5:0c:cf:31:e2:dc:a4:
                    7c:db:b8:f2:e3:14:5c:b4:5d:b9:fc:13:5b:70:6c:
                    af:5a:07:9e:fc:b2:e0:08:6c:09:b9:ff:a5:0f:8e:
                    17:58:9c:43:fc:1b:40:12:0a:2e:63:66:23:65:ed:
                    c4:33:97:f4:cd:72:4f:d2:60:1f:c5:b6:f8:b0:70:
                    5d:d1:b2:df:9a:8c:fa:73:60:30:ef:de:9d:69:dc:
                    34:07:ea:d7:9a:c3:46:36:4b:f4:cf:75:79:25:25:
                    ed:da:36:73:af:02:f4:27:b4:e3:7c:e3:5d:a5:27:
                    8e:07:2b:90:77:4b:15:57:cb:dc:f9:c1:9f:b1:f0:
                    28:b9:f8:0f:98:39:d5:c0:38:23:4d:e1:56:4d:a2:
                    bc:3a:ae:09:b2:54:a2:60:74:f1:7a:1f:75:74:09:
                    17:c1:17:13:87:5b:81:e2:6b:eb:82:bd:e8:af:f4:
                    f9:9f:dd:5f:42:ed:33:69:a5:5c:e0:57:48:1f:2b:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8D:AE:30:54:98:BE:3E:3A:CA:2F:D4:2A:87:06:E0:94:F3:3C:D9
            X509v3 Authority Key Identifier:
                keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:85:4e:10:5e:52:28:38:7a:54:98:ba:4f:e1:ec:bb:bd:b0:
         7b:86:75:9c:ae:2f:05:f3:25:90:04:90:b0:87:b5:85:2d:96:
         af:c6:0d:9e:44:6b:9d:2d:8f:4a:08:26:b2:fb:d5:4a:98:f7:
         4d:b6:e7:3d:a0:5e:f1:94:12:36:73:35:6d:44:bd:4f:3a:22:
         38:69:ec:33:70:fe:d4:3a:c7:6c:ad:cd:8f:22:be:47:d0:bc:
         04:29:41:2a:7c:cf:17:91:8d:ce:6f:37:e4:e2:75:c1:0f:66:
         45:c7:95:8e:21:19:16:c4:1e:8a:20:cc:59:15:17:c3:75:50:
         b7:f9:1c:71:ac:a7:43:7b:d3:33:b9:40:bf:9a:3c:2e:e3:7b:
         d4:ae:fa:07:c1:b5:58:67:9c:23:55:2a:f2:f1:1e:99:94:65:
         0a:a7:f7:51:54:b0:63:b3:1a:54:db:64:42:84:d7:e2:d5:c5:
         c0:85:06:b3:7a:8e:d0:59:da:29:e4:eb:8a:4c:34:25:25:4f:
         33:48:da:f2:10:b0:b7:26:47:6a:21:c5:41:26:4e:d9:c6:e1:
         f4:ae:a3:54:ba:8e:a8:e0:c2:ae:98:17:84:b2:45:9e:c7:7a:
         ca:87:2d:68:d8:c3:21:8c:97:50:93:56:85:79:a0:fe:a1:eb:
         85:15:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----