Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft
File:                     BBTpkCtj_vq8x9aIekyBhcygky8.mft (raw, json)
Hash identifier:          CluKrqD89vXMpRcX6ucAB79NatS0YYgElsj3Phh9gUs=
Subject key identifier:   8D:DC:DE:6B:D3:88:AE:52:60:94:FE:8D:6C:DA:90:1A:44:B0:35:D2
Authority key identifier: 04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F
Certificate issuer:       /CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
Certificate serial:       0193471712D4FA279B2BAF41F62142167FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft
Manifest number:          0EA8
Signing time:             Wed 20 Nov 2024 01:01:54 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:54 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:54 +0000
Files and hashes:         1: 6UmwpBkOZ_Qnql5_1r0Yb0eOwZ8.roa (hash: y0oy7sZCxXcpjRTvQaWRbhHYd73bJ6fhkUm4pjCLnR8=)
                          2: BBTpkCtj_vq8x9aIekyBhcygky8.crl (hash: MB4N36O+3qa48yencn/qF4UnqT3pp6HEIPRqtci14hk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:12:d4:fa:27:9b:2b:af:41:f6:21:42:16:7f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
        Validity
            Not Before: Nov 20 01:01:54 2024 GMT
            Not After : Nov 21 01:01:54 2024 GMT
        Subject: CN=8ddcde6bd388ae526094fe8d6cda901a44b035d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:58:3c:da:89:d9:4a:0d:6a:19:67:6b:92:
                    f2:c5:31:04:66:8b:84:c6:f6:22:07:c8:88:bf:2f:
                    48:56:49:38:1d:20:49:b7:d2:56:ed:14:41:1a:11:
                    43:16:fc:34:43:c4:f9:79:03:00:7c:0f:24:c7:32:
                    17:71:89:ae:f9:d5:c3:7b:03:37:7f:a3:12:64:c4:
                    be:2b:c2:2d:40:42:01:bf:70:cb:23:ee:6f:82:cb:
                    01:c1:19:38:ee:a4:e6:26:34:b2:1d:aa:67:35:1f:
                    96:10:05:e0:48:a5:82:aa:ab:f5:1d:58:e9:68:b7:
                    67:66:e6:85:d7:8b:89:72:4b:8b:bb:7a:e9:37:30:
                    9b:9b:8f:17:e0:57:9e:97:46:b7:0d:b6:fb:84:2c:
                    b9:db:87:ca:ea:d1:86:7d:ce:d4:c2:a3:85:22:57:
                    7e:5e:0e:d5:7a:98:34:37:aa:98:35:ee:b7:64:19:
                    2e:71:00:a6:49:3a:d8:ec:7e:93:49:6f:18:13:8a:
                    d1:40:29:55:2a:3f:ee:4b:e7:a9:8e:2a:68:33:33:
                    6a:6c:2f:1f:de:8d:c4:da:0a:a2:db:5c:dd:05:d3:
                    43:cf:58:02:41:f1:48:35:8b:fa:7e:7b:f7:6d:5f:
                    9a:81:39:4e:b3:ca:fc:47:a5:c9:c4:49:20:e5:91:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:DE:6B:D3:88:AE:52:60:94:FE:8D:6C:DA:90:1A:44:B0:35:D2
            X509v3 Authority Key Identifier:
                keyid:04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:84:4f:4c:c3:f4:47:cd:bf:94:dc:62:d3:7f:b0:16:8a:
         e6:c5:9c:24:2a:58:f7:6f:d1:25:e5:01:6d:d9:52:a6:8c:78:
         38:99:0c:d0:f4:53:93:14:94:5f:32:12:a3:78:43:e6:a6:b2:
         58:77:c2:69:70:d9:a7:a6:50:5c:36:1e:1c:e1:67:d3:07:6b:
         79:a6:29:b5:99:0d:e6:5b:7f:14:de:f4:7e:a5:3c:1b:95:5d:
         2d:5f:a5:5b:34:16:ee:f4:be:fb:0b:f8:1b:8f:46:ac:da:a3:
         d2:a5:cd:d0:3e:d3:1d:70:72:7b:bb:d6:dc:64:d3:dc:ba:0e:
         c6:3d:66:7f:b9:25:2d:f4:8d:61:91:b4:94:bc:60:62:e4:bc:
         f4:6e:3c:cf:f4:10:91:d8:68:d4:9c:0b:23:d7:7c:d3:0d:93:
         79:e0:bd:6d:b8:4b:ba:df:bb:22:d5:65:56:9f:1e:b1:2b:eb:
         15:7b:16:4d:63:ab:ed:58:c1:cc:4c:f4:e9:2b:ea:16:85:93:
         6a:e6:d0:7c:13:58:e0:4a:bf:57:b6:54:dc:34:d5:54:49:30:
         65:6f:20:a6:29:55:12:7c:d5:f4:f2:98:e0:7b:19:f3:97:2a:
         3d:e3:88:23:d4:18:bd:96:98:5e:f3:88:de:d3:ad:6d:4e:7d:
         24:a5:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----