Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
File:                     jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft (raw, json)
Hash identifier:          XaTmdFxRG5xIhRvt92KQkSEJFk3N1FKy3Zn2WRgwYr8=
Subject key identifier:   4C:E6:16:9B:34:BE:04:B3:13:44:7C:B9:87:63:F3:8B:68:2D:D8:A2
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Certificate issuer:       /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial:       019345CBEA5291D3F931F8C0153CCE5BAB0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
Manifest number:          0D29
Signing time:             Tue 19 Nov 2024 19:00:11 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:11 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:11 +0000
Files and hashes:         1: QJg-CbaRmp7x7cWECceto1So7ig.roa (hash: VCDbu3ps5PQjvpKEg6A+yNRmqHLrVBgU+3KXmVTaxIg=)
                          2: aoIUzEs6QhPKBDGrylsB49coCpQ.roa (hash: njsc2yMTQjcEgBeAXcbusvFBe4XeVh5KYG+KfigxNV4=)
                          3: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl (hash: 88IJTEtmj+clOc/q1RPHPgHcijbrOHotgenDdEbWNSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cb:ea:52:91:d3:f9:31:f8:c0:15:3c:ce:5b:ab:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
        Validity
            Not Before: Nov 19 19:00:11 2024 GMT
            Not After : Nov 20 19:00:11 2024 GMT
        Subject: CN=4ce6169b34be04b313447cb98763f38b682dd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:d2:87:69:69:12:c9:f6:10:45:73:48:94:
                    52:fe:57:be:15:b6:0b:4d:d8:e3:ac:89:6c:1c:42:
                    6b:56:9c:b5:3a:07:67:92:31:99:6f:06:0f:a0:54:
                    04:e5:8d:41:52:4a:97:fa:29:af:80:46:2d:37:67:
                    27:e1:6a:e8:57:05:2a:d1:0a:57:b0:5a:99:47:13:
                    47:ff:5c:91:6d:68:b0:19:02:77:a0:a0:f0:44:ca:
                    9e:f5:bf:17:49:41:c1:68:7f:e2:fd:c3:e3:53:0b:
                    86:66:8d:ae:46:1d:93:54:35:40:cd:9b:b8:71:52:
                    04:0d:94:cd:93:25:c8:60:86:c1:20:f5:58:8d:32:
                    ec:62:78:41:19:4a:24:0a:f4:3c:cb:6b:78:24:59:
                    f0:80:c9:02:e0:88:68:8a:9c:c6:54:bf:f8:61:19:
                    28:15:03:5c:21:4c:db:ed:3d:dd:61:8e:ca:89:f9:
                    e0:f1:18:11:b4:13:84:89:f4:23:45:5a:16:75:68:
                    1d:ff:ce:54:ae:72:35:d9:82:ef:65:44:8a:de:c6:
                    c3:c1:7e:24:4d:4f:0e:b5:84:99:4f:0b:96:de:b7:
                    d1:fc:7c:7c:ad:c5:bd:9e:3f:82:df:37:67:53:1d:
                    56:f6:6f:a3:e2:03:69:aa:80:b9:81:08:65:23:11:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E6:16:9B:34:BE:04:B3:13:44:7C:B9:87:63:F3:8B:68:2D:D8:A2
            X509v3 Authority Key Identifier:
                keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:38:11:16:d7:99:64:30:cd:5a:a2:47:54:11:a9:18:4d:
         5f:ba:57:ef:d0:92:48:67:e8:7a:cf:04:e1:67:ca:01:85:b4:
         41:a5:1c:1b:fb:8c:a0:91:20:ce:4f:28:6d:c8:20:f6:a8:37:
         10:7f:ef:c0:03:bd:90:6c:d5:78:2f:8d:06:0c:ab:e0:08:11:
         40:16:0a:cf:20:fb:b1:4c:62:7b:16:9b:d7:87:d6:7a:32:b1:
         d2:11:ed:fc:a2:c4:ce:cf:93:d0:ee:b3:63:4a:25:d9:d3:fa:
         62:1d:6d:3c:14:7c:dd:44:aa:c2:f8:69:77:fd:7e:21:c2:fa:
         04:b5:28:4e:81:71:9e:d8:01:e2:b8:f0:d9:61:18:7e:5d:3d:
         2d:23:76:f6:91:0d:34:bf:13:7e:b0:a3:1f:3e:9d:5c:d0:29:
         26:81:93:49:dd:8d:0a:25:ae:f9:c4:d0:72:d3:fe:ba:48:45:
         54:0f:6d:f5:2b:3b:28:15:dd:f7:83:dd:26:ff:31:5e:7a:a6:
         43:e5:16:9f:18:3e:c7:e9:10:5e:a6:5f:64:53:60:59:6c:7d:
         c7:c8:0e:ae:1d:02:0e:52:c5:55:f3:7e:93:9a:d0:9b:04:7d:
         36:a0:5e:1e:3f:b1:ae:20:ff:a0:c4:79:6d:fb:0c:f4:c9:3f:
         b1:c7:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----