Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
File:                     KuSoz5RAPH-drSfzyf_nMehrd4c.mft (raw, json)
Hash identifier:          u6yKreQVSq1i/45pSeUmtP3vhqkJMFUG+u+POWgFXkA=
Subject key identifier:   78:62:B7:0F:AF:5D:A5:8A:D6:99:8C:69:73:87:9C:8D:D3:42:09:F7
Authority key identifier: 2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
Certificate issuer:       /CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Certificate serial:       0193F4E602809CB739D3F97629B0C45300FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
Manifest number:          13BF
Signing time:             Mon 23 Dec 2024 19:02:14 +0000
Manifest this update:     Mon 23 Dec 2024 19:02:14 +0000
Manifest next update:     Tue 24 Dec 2024 19:02:14 +0000
Files and hashes:         1: DZCOI-ES2QF_93ycDxCnUyPKRrw.roa (hash: f0KqmdId8kLa0ODHLSp2dBvZuCm7X/Ykmno/K/VSwj8=)
                          2: KuSoz5RAPH-drSfzyf_nMehrd4c.crl (hash: gr8+fbbZtSHYeXEOug8hUOur7AX5+Gq458Bs5x1YzFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f4:e6:02:80:9c:b7:39:d3:f9:76:29:b0:c4:53:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
        Validity
            Not Before: Dec 23 19:02:14 2024 GMT
            Not After : Dec 24 19:02:14 2024 GMT
        Subject: CN=7862b70faf5da58ad6998c6973879c8dd34209f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:59:9e:76:87:b6:d7:f6:19:60:b6:c5:5a:
                    cd:1d:dd:2e:a3:c5:cb:8a:f3:56:19:97:73:f2:a3:
                    b1:bc:6d:ce:9e:ff:1e:cf:9a:21:76:d1:e2:a6:a3:
                    84:ef:89:6e:23:7c:12:eb:8d:a5:ac:33:b0:a7:c5:
                    0a:3e:8e:ee:e4:4d:b1:7a:fe:84:86:f7:87:3d:7c:
                    eb:ee:70:1e:fe:ab:c8:c0:5c:ed:87:89:13:99:2d:
                    d3:33:8e:7a:c0:3c:cb:28:6b:64:ce:2b:8b:70:3a:
                    0d:b5:e1:31:33:86:13:bd:fa:0a:5d:5f:5f:fa:c2:
                    0e:e9:4f:db:b9:3a:10:e3:40:0f:8d:78:e6:17:d0:
                    13:7a:50:2e:2d:ca:b3:96:57:54:92:7e:d0:ee:ef:
                    33:13:55:d8:7d:6b:06:0c:9b:f0:1c:46:34:ca:92:
                    ca:e0:2d:36:e8:0a:ac:d1:af:e7:b8:53:14:b8:ac:
                    d5:75:b1:a1:55:7f:6d:22:43:db:a3:63:72:ce:73:
                    90:68:0b:7f:9f:63:57:f8:32:63:8b:8b:66:a8:6d:
                    d4:68:c6:82:79:d8:f9:d5:47:d5:b2:85:8b:a2:8f:
                    08:ac:e3:68:af:12:1d:68:0f:2c:a4:98:84:74:ac:
                    c4:65:24:97:5c:97:1a:6e:41:be:58:81:be:47:33:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:B7:0F:AF:5D:A5:8A:D6:99:8C:69:73:87:9C:8D:D3:42:09:F7
            X509v3 Authority Key Identifier:
                keyid:2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:be:24:39:27:a2:de:38:6d:ba:c5:6a:16:c5:d5:73:cd:
         48:65:6c:f7:93:1c:04:9e:f8:91:7a:01:27:2b:b0:15:99:b2:
         27:c8:ea:cb:0b:b0:30:e7:a8:c8:5d:3c:a8:6b:f8:1e:40:84:
         e6:6f:66:3d:63:7f:d5:c7:1f:df:f5:46:db:d4:01:79:ae:70:
         b0:64:47:20:31:c8:e6:e5:07:40:0b:cf:83:3c:48:43:51:06:
         cf:1c:4d:8d:34:61:b5:79:fc:ee:b3:39:3c:c5:8d:b1:37:b3:
         08:a1:b2:61:27:f6:56:4a:2a:59:54:a4:7d:96:3b:b7:70:18:
         55:c9:f6:e0:5e:fd:0e:40:6c:13:a9:b4:21:f1:9c:7c:1d:fe:
         1e:49:76:be:f6:aa:13:55:63:f8:4f:ce:ad:ad:83:09:a1:d1:
         e4:33:2e:7b:a1:9e:bf:45:c6:2e:ea:ae:66:c1:33:01:4d:70:
         a7:73:bd:e4:41:29:f4:cd:3c:e9:47:aa:cf:2a:14:34:2c:14:
         ea:dd:15:e8:79:56:93:fd:22:c7:71:46:e6:8f:26:a2:39:00:
         f7:c9:ac:a9:77:24:a4:8e:82:43:db:0d:31:3f:35:34:c2:a6:
         45:1a:55:18:b2:9f:ee:ea:d9:69:8b:8a:e0:3f:74:a0:ef:20:
         3e:21:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----