Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft
File:                     w6vcxJ99kDO1KQRnnzybeD2ME1g.mft (raw, json)
Hash identifier:          aOx7z67WYlL1R2qyymKlhkTf/uiGwzsE0sKr7zMRUQQ=
Subject key identifier:   0F:86:76:74:58:91:85:03:28:28:88:AE:A9:AA:EC:56:56:AA:E8:58
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       01934783DC197D7169902519E9A848090C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft
Manifest number:          0AA2
Signing time:             Wed 20 Nov 2024 03:00:44 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:44 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:44 +0000
Files and hashes:         1: XD4B82g56UEpTSfAO6GK_DcHVtY.roa (hash: wrnSByXk8QYqZZ91JN4XrMR5oHynWHyyc1rryMSoDv0=)
                          2: w6vcxJ99kDO1KQRnnzybeD2ME1g.crl (hash: EATAY2fEHuMDzE7mIW2K03+VOENf0/VYxJn0SVTX6LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:dc:19:7d:71:69:90:25:19:e9:a8:48:09:0c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Nov 20 03:00:44 2024 GMT
            Not After : Nov 21 03:00:44 2024 GMT
        Subject: CN=0f86767458918503282888aea9aaec5656aae858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:21:e1:ab:67:25:89:13:10:ae:b2:47:78:
                    72:bd:54:4d:f9:fc:c5:03:67:0a:57:2e:d7:7a:2e:
                    b4:61:fc:a6:08:98:b4:15:2d:4a:ad:0a:04:41:5f:
                    89:da:da:30:bd:3b:f1:49:16:f5:ec:81:39:68:c9:
                    0c:1b:13:12:6f:c0:ac:6b:3a:fa:08:26:a4:6a:60:
                    95:3d:61:50:cf:7b:5e:c5:6a:68:6a:43:ab:e7:01:
                    60:53:10:b7:e9:f5:bc:54:5b:e9:24:e5:7c:1d:09:
                    70:f6:cb:58:a6:e3:e1:d0:30:a7:b4:ed:59:3e:85:
                    bc:d4:f7:a6:26:05:fc:e8:95:16:25:18:14:3b:22:
                    d1:c5:ab:83:12:35:79:93:53:0e:93:17:56:32:a2:
                    0d:9b:02:ff:88:fe:08:71:10:68:c7:22:2c:2e:44:
                    94:5b:74:bc:ef:5d:4c:07:f7:4d:66:01:22:25:9c:
                    6d:8a:10:23:bc:10:83:cb:08:20:b6:4a:fb:1f:e1:
                    a5:2f:24:d4:f2:3b:3c:da:61:4c:12:b5:93:e5:c8:
                    2f:4d:f2:d7:e6:4e:31:d5:0a:8e:b6:ca:df:e6:b6:
                    75:ff:ee:88:f1:09:0e:f0:56:5d:3d:3f:f9:0a:6a:
                    93:2f:94:9a:22:ef:72:91:d6:ca:b5:fa:05:6d:db:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:76:74:58:91:85:03:28:28:88:AE:A9:AA:EC:56:56:AA:E8:58
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:b8:38:69:38:a1:43:3f:d1:47:a7:ac:a1:f4:3e:6d:3a:
         5c:2f:a7:a9:36:61:30:d2:33:39:95:ff:6f:52:9a:cd:04:6f:
         64:44:98:72:3c:0c:73:4c:91:c4:68:30:73:d2:af:7d:92:8b:
         44:85:bf:b6:78:12:9e:84:08:ba:cf:45:bc:d1:ae:95:54:31:
         cb:46:95:6a:10:a7:8d:20:da:37:cd:03:9e:ca:54:36:a1:36:
         ca:fe:52:d8:36:db:6e:4f:77:9d:95:ee:71:d6:53:e1:2e:e7:
         10:58:e9:7c:3b:43:eb:16:7e:f4:9d:bf:09:b5:c3:33:58:23:
         cc:b8:58:25:47:b4:0a:ab:1a:65:31:ae:75:15:e3:92:cc:5c:
         9d:b0:ed:76:18:19:a8:81:a5:f5:a4:40:17:1b:eb:2b:df:96:
         d0:19:d6:7b:d4:ef:78:ef:0c:cf:47:d5:83:ec:7f:28:ee:57:
         a8:3c:f4:d7:90:31:b3:89:e6:1f:e8:4c:61:0d:b3:ac:0b:40:
         6b:8e:63:28:3b:62:f4:5e:99:6b:4e:d6:a6:2d:9e:5b:fb:4c:
         dc:58:d1:8a:d6:d2:c6:c1:bb:ea:fe:ac:47:a5:10:91:39:a4:
         79:e8:db:35:5e:74:0d:70:d5:fa:cb:4d:21:33:0b:18:26:99:
         b6:a3:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----