Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
File:                     nWz2idSa8woXuBDn8nWHL9kW2Fg.mft (raw, json)
Hash identifier:          tCG4aokYzbysjCP5I0rUMc+JnPy9qN4jb+sMckZE4Ak=
Subject key identifier:   DC:3F:46:A0:41:50:DB:97:AB:2B:2F:EF:95:DB:C7:96:AF:AB:A8:86
Authority key identifier: 9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58
Certificate issuer:       /CN=9d6cf689d49af30a17b810e7f275872fd916d858
Certificate serial:       01919B017ADD40FCB5CF46C5EE3EFAA7AAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
Manifest number:          0FCE
Signing time:             Wed 28 Aug 2024 22:00:50 +0000
Manifest this update:     Wed 28 Aug 2024 22:00:50 +0000
Manifest next update:     Thu 29 Aug 2024 22:00:50 +0000
Files and hashes:         1: nWz2idSa8woXuBDn8nWHL9kW2Fg.crl (hash: MTlbYvfNUn9to9FAsB8QmzrVgimdksDwY8FYb+Jk+os=)
                          2: znLYZSL3YAQNdkfHzNbWKOUbkh0.roa (hash: P7CNuC8WCM8tvTHHiMT2A6wFA7wqdSAvJX07I3mTRwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9b:01:7a:dd:40:fc:b5:cf:46:c5:ee:3e:fa:a7:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6cf689d49af30a17b810e7f275872fd916d858
        Validity
            Not Before: Aug 28 22:00:50 2024 GMT
            Not After : Aug 29 22:00:50 2024 GMT
        Subject: CN=dc3f46a04150db97ab2b2fef95dbc796afaba886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:0c:c3:9b:c5:fb:bc:71:15:77:43:bd:e4:
                    ad:20:9d:67:fb:0b:a5:95:a1:34:1a:a4:91:1e:04:
                    a0:c4:7a:1e:28:dc:6f:9e:d1:49:90:1e:cf:37:88:
                    fc:b8:25:13:e3:b1:56:c1:93:8d:f7:b6:59:a7:69:
                    89:88:66:5c:26:ac:05:9c:b3:14:12:56:a9:3a:9b:
                    40:20:be:f5:5a:d2:99:d1:eb:19:d4:84:04:91:02:
                    4c:31:8e:5b:8d:ef:7f:4b:f3:bd:2d:d6:63:0a:89:
                    ea:31:c2:07:b5:62:61:e2:b2:a3:78:bb:3d:eb:f1:
                    dd:02:a0:6c:bb:bd:b3:7b:fc:e9:3a:e8:c3:5b:07:
                    a1:d5:8b:03:47:7f:b6:fa:1c:da:dc:b9:d7:b2:de:
                    0b:9b:c4:9e:b7:b8:5c:84:4e:e2:83:df:1d:bb:e2:
                    92:dc:d0:36:7b:2a:9b:44:97:28:67:27:59:f4:01:
                    90:86:dd:17:b5:46:ae:f7:18:cb:6f:b5:71:d0:fd:
                    2a:59:07:44:97:36:ee:4a:22:76:95:be:ce:a7:db:
                    a3:dd:9f:ce:75:5f:68:6b:84:51:2b:aa:2e:2f:9d:
                    2d:eb:77:56:cc:7d:89:43:ab:d8:a4:c1:f7:b3:d8:
                    48:2e:b8:84:15:4f:18:b7:7e:6e:e9:d0:70:0e:3b:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:46:A0:41:50:DB:97:AB:2B:2F:EF:95:DB:C7:96:AF:AB:A8:86
            X509v3 Authority Key Identifier:
                keyid:9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:6d:94:b6:43:d1:c0:37:d5:03:01:fd:a2:76:52:8a:e8:
         f7:8e:2e:34:5b:3c:ab:7f:bb:d3:93:56:5c:bd:8f:9c:22:b0:
         fa:ae:b6:88:7d:31:62:ce:b1:12:aa:45:bc:41:18:7b:27:2c:
         e1:09:83:e9:78:77:a5:55:74:61:22:a4:16:75:59:f5:c3:a6:
         54:cb:0f:86:7c:31:52:2f:d1:54:07:32:72:68:04:e4:88:1b:
         58:07:77:ef:78:a2:91:94:66:0e:07:4c:db:f0:f7:69:49:fc:
         51:a3:4a:ae:c6:eb:ef:d8:79:04:d2:94:6e:b0:b6:29:19:05:
         41:8f:c6:56:37:6a:07:ea:b4:5e:96:44:43:f3:0b:e4:7a:ea:
         8b:4a:1c:47:a6:f9:0a:8e:86:2d:ab:02:5f:65:f4:ec:46:4a:
         10:a3:98:0b:e0:cd:53:c9:36:07:84:2e:0f:8f:60:cd:10:80:
         c9:c8:c1:86:ba:32:6b:5c:dc:7a:28:2f:5e:8a:f7:10:8c:70:
         08:de:1c:ce:97:fc:01:b8:06:aa:91:65:db:2e:e5:ef:c4:3a:
         69:0b:a9:f5:85:c0:71:bf:92:13:d5:b2:4e:f5:9a:2a:a8:8a:
         da:58:31:58:94:b6:75:c9:09:93:61:a5:7a:b5:2a:8f:f0:9d:
         82:f8:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----