Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/kAebPo3wmXDBQUSCvlsiaHKUdf8.mft
File:                     kAebPo3wmXDBQUSCvlsiaHKUdf8.mft (raw, json)
Hash identifier:          +Ov41rSzgB8OuvUFehGjASRi+2m4j+Z5ivW0oM5n+Xk=
Subject key identifier:   81:AD:36:42:FD:C2:7D:ED:EC:C2:DD:F9:B6:FA:9E:92:AA:DE:54:48
Authority key identifier: 90:07:9B:3E:8D:F0:99:70:C1:41:44:82:BE:5B:22:68:72:94:75:FF
Certificate issuer:       /CN=90079b3e8df09970c1414482be5b2268729475ff
Certificate serial:       018CA96F49677C9706EC09714CA0740B4A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kAebPo3wmXDBQUSCvlsiaHKUdf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/kAebPo3wmXDBQUSCvlsiaHKUdf8.mft
Manifest number:          0832
Signing time:             Wed 27 Dec 2023 04:01:31 +0000
Manifest this update:     Wed 27 Dec 2023 04:01:31 +0000
Manifest next update:     Thu 28 Dec 2023 04:01:31 +0000
Files and hashes:         1: 1wmQCq2H9Tcsv3wy14VlXv4tqso.roa (hash: KYOzOItLf8SG3Ooao3cA9PhupE/QONT4CWUgYfAsl0I=)
                          2: kAebPo3wmXDBQUSCvlsiaHKUdf8.crl (hash: hSdNSqAynHxTNdeQs0I+WZL2ZSJTRkkKLrRay1XcPhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:6f:49:67:7c:97:06:ec:09:71:4c:a0:74:0b:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90079b3e8df09970c1414482be5b2268729475ff
        Validity
            Not Before: Dec 27 04:01:31 2023 GMT
            Not After : Dec 28 04:01:31 2023 GMT
        Subject: CN=81ad3642fdc27dedecc2ddf9b6fa9e92aade5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:49:4f:51:03:3a:bb:fe:76:87:94:16:51:
                    52:7e:6f:a9:65:22:18:70:89:3b:fe:0b:50:2d:af:
                    1b:81:2b:92:ea:74:e3:d9:9a:12:15:c2:05:5f:c9:
                    77:9b:cd:9a:bf:34:d7:14:ea:44:ed:09:67:1b:48:
                    30:2b:82:53:3d:82:5e:1e:04:74:2f:a4:47:3f:89:
                    e8:b3:7f:82:33:a9:7a:0d:d7:43:53:5c:44:ac:e6:
                    ac:11:d8:bd:17:3e:57:85:ac:d8:44:6c:08:39:08:
                    a9:e0:ac:2e:79:d6:67:d8:f8:6d:d4:81:ec:36:39:
                    99:30:78:2f:f8:3e:9f:a3:98:31:23:88:95:03:5c:
                    f3:03:22:0c:12:4a:17:b2:de:dc:b9:48:06:44:2f:
                    00:24:ca:14:1b:92:e6:d4:e8:e3:85:44:4b:f7:2e:
                    a3:55:03:fc:9f:0a:3a:46:81:43:da:2e:9c:18:49:
                    94:c1:80:e1:78:db:8c:27:81:2d:67:bc:04:99:b2:
                    24:db:dd:b9:93:84:9a:db:e7:95:77:db:16:53:77:
                    e9:e3:0f:08:c8:da:06:5b:0e:c0:36:07:e7:02:cb:
                    e4:ec:9f:30:6a:0f:88:82:79:cb:e3:c1:15:71:ce:
                    57:d8:d6:77:d8:14:f5:1a:d8:cc:5a:5c:09:de:e2:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:36:42:FD:C2:7D:ED:EC:C2:DD:F9:B6:FA:9E:92:AA:DE:54:48
            X509v3 Authority Key Identifier:
                keyid:90:07:9B:3E:8D:F0:99:70:C1:41:44:82:BE:5B:22:68:72:94:75:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAebPo3wmXDBQUSCvlsiaHKUdf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/kAebPo3wmXDBQUSCvlsiaHKUdf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/26855d-1990-4d80-9c82-1563f93a540d/1/kAebPo3wmXDBQUSCvlsiaHKUdf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:48:83:b1:19:00:cf:33:40:2a:f1:30:0c:8d:22:93:5f:
         93:a6:a6:74:9e:c3:15:4b:a7:56:3a:6d:62:c1:54:e7:a3:9a:
         09:38:9d:13:ca:57:77:11:39:20:62:8b:3f:ab:08:0e:1b:c8:
         02:1c:71:16:20:5a:7d:21:1d:f3:76:ca:d6:74:31:f4:bc:eb:
         ba:30:8d:f8:e9:dc:53:20:03:6e:4d:c7:16:30:62:4f:52:3a:
         bd:9b:fa:18:d5:d0:0f:0f:67:91:88:bf:fe:c6:e3:cf:e3:d8:
         20:89:62:8b:1c:26:2a:05:5e:9d:69:a9:cd:2d:16:83:93:7a:
         75:35:11:ca:3d:51:33:5c:3d:88:07:3e:2c:f6:f2:f4:75:8b:
         f0:a8:dc:b8:52:4a:2f:78:27:c9:47:3b:47:db:6b:81:db:3e:
         25:d3:f5:3c:7a:ba:25:06:2e:01:27:b3:3a:f2:69:ff:d5:17:
         15:16:da:9e:c1:1b:88:ff:25:67:8f:97:01:4b:54:11:5a:30:
         15:82:45:09:88:08:40:57:a3:6b:15:2e:11:b3:73:c7:36:ec:
         3a:a1:f1:69:90:cb:d4:d5:14:05:7e:8e:55:f3:f0:24:f8:38:
         d1:f4:5d:54:ae:d1:fb:88:a2:aa:0d:04:35:24:d9:5f:37:cc:
         84:20:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----