Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft
File:                     Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft (raw, json)
Hash identifier:          bp1TJi6/+tPlnD74A2uU02FYhZJ9J4AoQAHfHdpCiC0=
Subject key identifier:   4A:31:B8:4F:56:04:D5:85:6C:2B:C4:5D:39:77:8F:CA:F6:FC:E6:6A
Authority key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Certificate issuer:       /CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Certificate serial:       019230237FF7094EB8280465D4739B19913D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft
Manifest number:          0AC0
Signing time:             Thu 26 Sep 2024 21:01:25 +0000
Manifest this update:     Thu 26 Sep 2024 21:01:25 +0000
Manifest next update:     Fri 27 Sep 2024 21:01:25 +0000
Files and hashes:         1: 0qrDFNO_JGfHrubWypY4XHAaPY8.roa (hash: +FRgXZ1LvCv6lPkboOvlciLj/ub6zEc2osSdbCKD+sc=)
                          2: Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl (hash: wwTf0r8zyHuXAZRv1H8AjeME9B0BvKdUn4tQ1GG6Rps=)
                          3: VQ_1hCEM8uI1fJXZ1W9NXYMbY-g.roa (hash: lJHSQTMiQkxkUNScuPD4/GvgeatUmXMWSsOu/0OPq1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:7f:f7:09:4e:b8:28:04:65:d4:73:9b:19:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
        Validity
            Not Before: Sep 26 21:01:25 2024 GMT
            Not After : Sep 27 21:01:25 2024 GMT
        Subject: CN=4a31b84f5604d5856c2bc45d39778fcaf6fce66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:38:67:79:6e:49:02:ba:54:a2:a5:7f:aa:
                    c3:32:d4:dc:68:5f:32:a8:26:fc:ff:d1:74:62:db:
                    0a:cc:70:6e:e8:55:e2:7d:a9:60:0b:0e:f7:3e:2c:
                    74:fa:7b:fb:b3:52:e9:63:7d:23:a8:ea:3f:23:3d:
                    57:7f:66:4e:e9:c5:82:c2:05:4e:87:ec:1a:4a:eb:
                    8c:50:bc:1c:54:c1:81:1f:37:c6:8e:a3:6a:fb:03:
                    07:13:f5:9b:d9:1d:96:95:f2:86:74:a6:3d:b8:d5:
                    4f:3a:fd:c8:89:88:a8:36:1e:04:df:2f:cc:57:03:
                    e7:40:31:5d:48:0e:da:56:ca:eb:79:96:e1:44:66:
                    34:4d:77:eb:32:50:51:80:e0:37:4c:c5:e4:66:b5:
                    c1:92:b5:bb:ec:fe:89:3e:d4:05:a8:da:50:77:96:
                    cb:87:62:88:a0:1a:bb:ce:e1:6d:a5:0c:37:07:61:
                    0c:7f:0a:e4:55:0f:ca:ad:7f:c8:08:40:a7:7e:0a:
                    45:44:44:51:ef:36:0b:f2:6d:a8:82:5d:43:1f:0a:
                    f8:93:bc:b2:ae:0c:d2:e0:94:cd:2d:08:66:68:de:
                    f2:be:79:2f:39:44:5e:cd:ea:c7:84:6d:60:d1:03:
                    15:cd:df:56:2a:0e:e1:e6:0b:31:29:d2:dc:22:85:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:31:B8:4F:56:04:D5:85:6C:2B:C4:5D:39:77:8F:CA:F6:FC:E6:6A
            X509v3 Authority Key Identifier:
                keyid:3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:0e:bf:53:b1:90:a2:ed:83:e1:e7:b0:40:79:51:92:74:
         b7:db:51:cc:06:81:2b:88:c4:d0:f5:0f:8e:8b:5b:7b:a8:be:
         3f:86:81:ff:8b:26:55:3a:fe:d6:c3:69:12:6f:98:45:58:d5:
         96:2e:0b:c7:9b:81:8a:11:25:f9:9a:c0:52:41:3d:b7:3b:83:
         6f:a5:36:33:44:3e:44:a7:f3:a8:51:36:4f:a0:8e:2c:14:75:
         d4:0d:7e:91:79:91:5f:10:82:1f:b2:6b:53:08:71:73:45:7c:
         43:01:fa:c6:82:30:42:fb:e0:0d:e1:47:45:10:32:75:b8:eb:
         4e:9b:d3:5f:67:1a:85:e7:9c:1f:9c:5a:b3:c6:32:c7:c5:33:
         1e:08:99:10:2f:49:1e:d9:94:23:60:f2:2d:a1:3a:9f:35:9b:
         cb:db:56:ca:c2:d0:53:20:99:86:b9:f7:f3:a3:65:ff:a0:53:
         e8:f8:d0:bc:b0:09:f4:69:db:68:17:62:b0:86:bb:bf:da:19:
         23:a3:c8:15:c2:fb:a4:d2:34:f1:e1:c1:69:77:8f:72:1a:86:
         96:d6:39:a3:8a:2a:ea:8b:50:20:06:83:a1:50:64:f8:22:57:
         58:90:f4:b3:99:a8:b0:40:cb:9f:82:1b:ac:e5:f4:3e:38:1d:
         35:36:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----