Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/MAVTeLXXzAy3lDvIAzeQFbNIUpY.mft
File:                     MAVTeLXXzAy3lDvIAzeQFbNIUpY.mft (raw, json)
Hash identifier:          owBSCPsdt5eNEjK9MTShWm+sSUkVO1X9pCNrA2mFx1s=
Subject key identifier:   C3:6D:EF:56:29:91:15:AF:7F:32:17:4E:A9:3F:DC:82:31:A0:B7:9D
Authority key identifier: 30:05:53:78:B5:D7:CC:0C:B7:94:3B:C8:03:37:90:15:B3:48:52:96
Certificate issuer:       /CN=30055378b5d7cc0cb7943bc803379015b3485296
Certificate serial:       019347166B98E9CF16E85829FC1E3B67ADD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAVTeLXXzAy3lDvIAzeQFbNIUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/MAVTeLXXzAy3lDvIAzeQFbNIUpY.mft
Manifest number:          1368
Signing time:             Wed 20 Nov 2024 01:01:11 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:11 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:11 +0000
Files and hashes:         1: 1-ViM19SPm6eudAY-idgummhDfuc.roa (hash: pT9wuHYCQ+p7DZliNYKdJZhuNd0It+fY2C6C/yEpXqA=)
                          2: MAVTeLXXzAy3lDvIAzeQFbNIUpY.crl (hash: 059TsxtlirtRM6eHuvxbOKKsFO3rRvjgV0/NgPUcQmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:6b:98:e9:cf:16:e8:58:29:fc:1e:3b:67:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30055378b5d7cc0cb7943bc803379015b3485296
        Validity
            Not Before: Nov 20 01:01:11 2024 GMT
            Not After : Nov 21 01:01:11 2024 GMT
        Subject: CN=c36def56299115af7f32174ea93fdc8231a0b79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:9b:28:ab:3a:ad:d2:e3:9c:6d:dc:89:b3:
                    2b:57:6b:7f:29:de:12:1e:90:61:13:fc:74:6d:1c:
                    b7:d5:94:fc:81:60:cc:ce:99:38:bf:aa:7e:7c:1f:
                    c3:d7:ba:f7:b5:c8:00:4e:f3:c0:d4:01:ca:55:69:
                    11:d4:28:01:1c:2a:9b:bd:32:41:fd:09:f8:50:01:
                    41:e1:46:48:f6:05:b1:31:9f:dd:32:53:1e:c0:f0:
                    5e:03:3f:59:72:23:d6:24:a8:29:dd:d0:d1:3d:b9:
                    27:86:72:8c:b1:a6:c4:68:ee:d5:bb:1f:47:94:52:
                    20:8d:69:1a:9e:79:97:75:35:a9:f6:d3:7c:37:b6:
                    5c:f3:4d:b0:2c:8c:45:ce:fe:98:f6:1e:9a:8f:7f:
                    8e:2d:3d:30:33:d3:95:29:7e:87:82:0e:db:1c:cf:
                    bf:8b:a5:bd:5c:ef:a3:d3:ad:86:64:b8:18:76:01:
                    ea:5c:94:de:80:76:6a:e0:12:47:b2:9f:d6:95:dd:
                    b9:59:01:f3:44:a0:1a:b6:56:67:61:cf:51:ce:ff:
                    1b:1f:bb:01:7c:6e:f0:aa:09:eb:13:4a:bd:68:63:
                    fb:69:3e:85:3c:e2:32:53:4e:11:f0:99:26:58:ce:
                    23:73:b7:41:fd:41:32:1f:2b:0e:6c:df:2f:f0:df:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6D:EF:56:29:91:15:AF:7F:32:17:4E:A9:3F:DC:82:31:A0:B7:9D
            X509v3 Authority Key Identifier:
                keyid:30:05:53:78:B5:D7:CC:0C:B7:94:3B:C8:03:37:90:15:B3:48:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVTeLXXzAy3lDvIAzeQFbNIUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/MAVTeLXXzAy3lDvIAzeQFbNIUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/MAVTeLXXzAy3lDvIAzeQFbNIUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:08:70:c8:72:e4:1a:07:61:f3:61:e4:46:45:ba:bf:81:
         cb:73:2e:60:0f:9b:b8:cf:85:0d:cd:0b:ec:9e:22:4b:2d:e5:
         69:c5:e7:98:23:db:fd:92:46:cc:87:af:7e:17:c1:f6:b6:a2:
         9b:49:1e:fb:27:c1:1b:1a:b9:87:74:69:c0:49:f0:6a:68:62:
         3f:21:35:68:21:aa:de:73:73:9d:e4:db:36:15:48:ef:8f:75:
         af:ca:82:fc:1f:21:6d:a2:96:76:c5:e8:13:22:94:8a:c8:30:
         bb:0b:5c:7d:9d:7a:8e:f9:71:d5:cf:69:7b:10:ec:3f:e2:2e:
         d2:d9:f3:f9:51:3b:95:6c:a1:31:d9:de:6c:1a:48:10:5c:f9:
         17:fd:3e:51:c8:b4:d7:44:2e:d8:3e:aa:ca:ea:1c:d7:c9:ae:
         48:2d:53:04:27:5d:a0:92:9d:dc:8b:6f:87:3e:2a:aa:cc:28:
         0c:e5:45:f7:e3:9b:27:f0:f0:b0:28:ae:89:f0:32:a4:63:a1:
         dd:a3:55:3a:19:59:57:49:29:da:08:b5:80:b8:85:ea:dc:9d:
         2d:0c:42:ac:a3:7e:64:6c:aa:8e:39:37:1c:f5:ff:cb:7e:18:
         88:53:65:02:43:62:3a:17:e8:a9:36:90:be:9f:d8:86:d4:2e:
         a2:bc:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----