Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft
File:                     qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft (raw, json)
Hash identifier:          o4SHsVQKGEJDF7dFQW9/LmFZWL/3Ifs3ALaJziXdQQY=
Subject key identifier:   CE:16:F2:1C:0B:A7:30:C0:B5:41:FC:E1:3C:2C:07:1E:1A:E4:ED:CB
Authority key identifier: A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65
Certificate issuer:       /CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
Certificate serial:       01934716F44CB255898DC555C61D7F5F623A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft
Manifest number:          1369
Signing time:             Wed 20 Nov 2024 01:01:46 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:46 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:46 +0000
Files and hashes:         1: cxYc9OSKga3MpsK4SgHckun8egc.roa (hash: Xex5j/4fsjtzs0yjCJOL9FmoH9/auaK6odqOy/29bsE=)
                          2: qJyEDR7wzVLc9fqmUzWl3VBUxGU.crl (hash: i4rnlOUGcDGn7pmTotHfK9Wzfiu+/Ms2vWpj0GLwIwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:f4:4c:b2:55:89:8d:c5:55:c6:1d:7f:5f:62:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
        Validity
            Not Before: Nov 20 01:01:46 2024 GMT
            Not After : Nov 21 01:01:46 2024 GMT
        Subject: CN=ce16f21c0ba730c0b541fce13c2c071e1ae4edcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:90:5a:bb:81:06:6d:58:b8:8e:d1:c1:21:
                    d3:13:84:47:34:9c:bc:41:0d:4a:63:b7:8b:af:5a:
                    60:f8:d1:57:a9:5e:80:ee:36:1a:0b:ee:98:d8:42:
                    05:5c:41:27:ed:0e:3f:a4:7a:88:c5:0a:c9:64:3b:
                    84:2f:0b:76:0f:65:45:b6:10:bc:30:0f:3c:5f:ee:
                    f0:ad:02:c7:6b:24:55:1a:55:71:46:7e:5e:3b:ed:
                    9c:f8:b7:61:fe:c2:cb:6d:03:ed:c6:ff:fe:7e:79:
                    6d:a4:a5:fd:f5:80:96:7d:46:67:61:ea:7b:9f:b1:
                    1b:92:49:e2:78:7b:67:41:7c:19:73:db:7a:36:27:
                    7e:ea:02:84:c9:2a:3b:39:46:a4:83:75:b2:15:d3:
                    f1:d6:d7:f0:8d:e5:4c:19:92:73:54:17:e5:e1:69:
                    cb:39:1d:5d:e4:c1:93:97:71:a2:e8:e0:7d:b5:89:
                    8f:49:76:ac:c0:e4:f5:67:2a:e4:7b:44:f6:73:75:
                    6b:fe:07:1d:a5:12:f8:83:14:33:1c:37:5b:22:91:
                    67:39:47:e0:5b:0f:d4:ff:43:38:cd:48:42:73:ea:
                    87:f4:58:8e:3f:e9:32:53:0e:9a:4c:bb:60:d8:7e:
                    33:69:5e:e9:61:8e:b2:92:d8:59:ef:ce:cb:5d:37:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:F2:1C:0B:A7:30:C0:B5:41:FC:E1:3C:2C:07:1E:1A:E4:ED:CB
            X509v3 Authority Key Identifier:
                keyid:A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:b5:84:99:d6:a4:be:a5:03:f6:2e:8d:b8:8c:7f:c9:ad:
         d6:75:cf:59:be:55:41:28:6b:94:65:88:04:da:09:3d:97:96:
         fa:7a:13:a3:8f:2e:3e:98:64:13:b8:3c:16:3b:45:f1:fa:88:
         24:55:55:66:d0:3d:1a:bc:09:82:3f:4f:e5:18:7f:a6:66:48:
         46:8e:d4:30:cf:f7:5b:01:83:c5:85:c7:ac:0f:38:71:a5:4f:
         63:34:11:6f:05:af:ab:30:08:34:32:5f:b3:bc:fa:a4:8b:ee:
         e1:10:26:de:ad:f6:f7:1d:79:f0:7c:90:24:08:d5:44:1f:f7:
         dc:37:59:f7:04:3b:09:5a:be:b0:b4:5a:58:8a:80:9c:2e:16:
         ac:e3:d7:d3:98:f2:3d:5c:8d:74:c1:8a:5d:a5:c0:99:e4:57:
         a2:13:eb:78:2c:b2:62:dc:b7:ed:ae:2f:32:8d:6b:5d:66:90:
         eb:fe:c5:a5:50:0e:8c:a3:c3:d7:ed:33:86:8e:c0:96:67:d1:
         8e:fa:a7:71:62:e2:6b:b0:13:6d:72:ca:70:7f:16:0f:41:75:
         84:f8:f1:a8:15:20:c1:dd:25:87:58:77:54:fe:da:68:15:c8:
         65:77:ba:ee:9a:fb:fb:85:a6:a4:21:ac:e5:df:70:27:e8:cf:
         9b:34:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----