Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft
File:                     _9122XOig24gFSaHn0CuO2X1ZPQ.mft (raw, json)
Hash identifier:          OyUqlPchMvcktQb7S3Wvu0uNvaVa4bnoIGIX9NkYVbQ=
Subject key identifier:   C7:E0:36:4F:D7:F2:68:F7:B1:31:10:FE:C6:69:C7:B7:6E:7D:3B:16
Authority key identifier: FF:DD:76:D9:73:A2:83:6E:20:15:26:87:9F:40:AE:3B:65:F5:64:F4
Certificate issuer:       /CN=ffdd76d973a2836e201526879f40ae3b65f564f4
Certificate serial:       0193F9D402C982DAF6481BCC91947AC626DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9122XOig24gFSaHn0CuO2X1ZPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft
Manifest number:          1102
Signing time:             Tue 24 Dec 2024 18:00:41 +0000
Manifest this update:     Tue 24 Dec 2024 18:00:41 +0000
Manifest next update:     Wed 25 Dec 2024 18:00:41 +0000
Files and hashes:         1: 3YB2Zlq6cQGL_zvdlsW5o8Obass.roa (hash: P9rzBe/z0wojX8Dyh55Aa+TPSh7ayxbyBOt6o93lnxE=)
                          2: _9122XOig24gFSaHn0CuO2X1ZPQ.crl (hash: PaMFzTcwKXLLXgQwShzhC67jt0iYapwHNEOUOmlkGIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:d4:02:c9:82:da:f6:48:1b:cc:91:94:7a:c6:26:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdd76d973a2836e201526879f40ae3b65f564f4
        Validity
            Not Before: Dec 24 18:00:41 2024 GMT
            Not After : Dec 25 18:00:41 2024 GMT
        Subject: CN=c7e0364fd7f268f7b13110fec669c7b76e7d3b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:f1:11:f4:3b:1f:f8:f0:f3:ff:32:84:21:
                    bf:a9:ac:63:8f:cd:b8:e9:aa:72:4f:8a:18:eb:01:
                    a1:88:50:58:92:9d:c4:57:03:e8:c8:56:24:5e:66:
                    a7:08:b6:ca:fe:7c:fd:d4:64:bc:4f:6b:da:bd:da:
                    09:94:0f:13:89:32:0b:37:b0:a1:31:e5:a7:67:f1:
                    ab:cf:fd:d2:dc:8f:b5:d3:80:56:80:95:60:5a:bf:
                    41:d6:15:db:4f:76:bb:15:6a:81:3a:15:42:da:2d:
                    bc:19:9f:5a:50:3b:f5:25:8e:96:36:af:32:a1:ff:
                    1b:e2:90:83:55:a2:95:7a:37:b9:4b:a5:c9:33:37:
                    0b:67:27:5a:4e:f9:02:b4:5b:e4:0c:4a:7c:1c:fc:
                    17:d6:84:58:45:80:4e:45:b1:38:db:27:44:06:9b:
                    46:9b:fe:e6:c1:15:b2:f3:02:47:38:bd:b3:82:3d:
                    e1:77:80:b1:fa:58:82:b7:52:13:41:b2:69:ff:e7:
                    f7:15:b2:6b:70:87:6f:c4:70:d1:42:9b:f4:06:b7:
                    f4:7b:fa:97:dd:89:bd:5d:31:f8:74:3b:0d:25:9d:
                    a4:33:3b:00:98:38:ed:da:8f:62:4c:b5:66:e0:79:
                    8c:7f:3f:7c:69:83:0b:a4:a0:01:9e:1e:c7:34:ae:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E0:36:4F:D7:F2:68:F7:B1:31:10:FE:C6:69:C7:B7:6E:7D:3B:16
            X509v3 Authority Key Identifier:
                keyid:FF:DD:76:D9:73:A2:83:6E:20:15:26:87:9F:40:AE:3B:65:F5:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9122XOig24gFSaHn0CuO2X1ZPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:ee:49:e8:f6:08:99:47:32:70:8a:c0:32:df:2e:88:ff:
         7f:86:0f:34:af:e9:9a:43:e9:25:7e:85:79:13:88:6d:37:18:
         7c:b4:ec:88:98:5e:2b:05:7c:a9:ec:b6:56:28:4b:02:12:c7:
         19:f3:7c:85:04:af:aa:d4:82:1b:cb:67:d8:b6:da:8e:33:a2:
         1f:e6:eb:d3:e4:e6:4d:9d:c7:7a:e9:30:ce:17:96:a3:cb:4b:
         a4:4b:2c:6d:03:67:fe:59:d5:fc:b1:08:34:00:9d:a8:4d:94:
         a8:db:5a:61:91:44:33:d4:fb:d6:c4:99:49:81:89:50:f2:48:
         01:b7:2a:2b:1e:23:23:c1:61:2d:4d:f8:1c:1f:b3:83:90:c9:
         b6:35:8f:ea:58:a0:36:0c:28:22:ea:7f:4c:00:b6:f9:1d:02:
         31:bc:50:cf:2c:43:c1:4c:09:d1:5c:92:d2:72:1c:3d:bf:53:
         55:dd:ab:56:20:1a:be:f9:dc:37:94:bd:1e:17:b3:6f:c8:87:
         80:c5:7b:8c:b9:24:e5:60:6f:1e:5e:bf:a5:19:b7:df:e6:f9:
         33:46:1d:04:03:a7:87:f7:4d:9c:5c:9b:e0:fa:ce:2b:da:cf:
         9d:db:11:91:d2:f1:b6:78:59:c7:f7:b2:5b:ff:60:ad:fc:09:
         be:68:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----