Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft
File:                     3Q_rml-gQDQeoYU0xbau1-zSoN4.mft (raw, json)
Hash identifier:          W+VSYf9AXPYum1Sh5OYBm5oM0/eLbsb8SUh0vpTI5JI=
Subject key identifier:   CA:32:DA:A1:BC:E0:F4:34:22:6D:1A:DB:B3:1C:15:8E:C0:89:BE:14
Authority key identifier: DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE
Certificate issuer:       /CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
Certificate serial:       018CED06A0B0E1FCD5F0C506CC96F1AE8CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft
Manifest number:          0803
Signing time:             Tue 09 Jan 2024 07:01:23 +0000
Manifest this update:     Tue 09 Jan 2024 07:01:23 +0000
Manifest next update:     Wed 10 Jan 2024 07:01:23 +0000
Files and hashes:         1: 3Q_rml-gQDQeoYU0xbau1-zSoN4.crl (hash: G2ORgTocGuidc9xxdHbYy2Nza838+h+TTpVjDIOEyIY=)
                          2: PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa (hash: hj31vhrkbnrHemOGAuPTgzeAQ89j93aaaAFzTqJnNvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:06:a0:b0:e1:fc:d5:f0:c5:06:cc:96:f1:ae:8c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
        Validity
            Not Before: Jan  9 07:01:23 2024 GMT
            Not After : Jan 10 07:01:23 2024 GMT
        Subject: CN=ca32daa1bce0f434226d1adbb31c158ec089be14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:16:0b:88:83:0a:4e:06:af:6b:b9:24:c8:
                    fa:e6:11:be:78:bf:c9:10:ba:6e:49:37:d5:51:38:
                    92:d7:4d:f0:30:91:5a:7a:c4:58:0b:15:a8:3b:38:
                    86:c3:89:0f:e2:2a:b7:98:cb:8c:0c:0b:fe:47:30:
                    cd:8b:e7:ab:94:77:73:a0:81:6f:4f:e5:39:59:39:
                    52:d2:be:14:8f:7d:77:c0:2b:f2:64:94:f0:30:55:
                    57:dc:87:ae:ef:9b:a8:f4:dc:9c:c6:40:b3:8b:30:
                    09:2b:78:4b:e5:16:62:22:4c:9f:ad:ad:f8:ee:b6:
                    ce:e2:b4:d0:c0:44:6d:17:89:24:57:5c:27:fd:2a:
                    db:de:0d:d3:5b:21:e8:97:97:cc:04:40:1c:f1:2c:
                    78:4d:d0:88:fc:30:88:64:d4:85:32:5b:23:a1:4c:
                    10:bd:e3:c5:9f:ce:8b:c5:8b:53:45:d2:8b:fe:b0:
                    68:0e:8d:eb:83:6f:0d:92:c7:2f:ac:5e:8a:9f:9d:
                    75:ab:89:3c:8c:bb:ae:c8:b7:e5:d7:10:35:9c:3d:
                    bb:76:29:6c:4c:79:7e:10:b9:7d:25:9b:42:56:64:
                    8a:70:7e:d0:2a:98:9a:6d:f5:31:8b:13:69:06:5e:
                    d2:ee:9a:2f:f8:74:6d:f5:b5:d1:26:2f:8f:8a:26:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:DA:A1:BC:E0:F4:34:22:6D:1A:DB:B3:1C:15:8E:C0:89:BE:14
            X509v3 Authority Key Identifier:
                keyid:DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:98:04:54:31:8b:38:9c:73:d7:58:19:20:7c:e0:d0:4c:
         31:f8:8f:cc:90:20:b2:aa:98:91:3a:58:d4:f3:37:7a:e3:ad:
         d2:b5:5e:52:5d:5f:57:0a:65:58:a9:d9:b3:f5:a3:80:ae:30:
         c7:2b:b6:07:74:fd:11:f5:24:01:1e:94:6b:d9:e6:6e:07:91:
         ee:83:13:d8:e3:f4:cb:f6:d8:5f:2d:4d:bf:b3:63:3e:59:97:
         d2:71:34:61:b4:12:a1:22:d3:b2:c5:92:72:16:e9:a7:a6:0d:
         ea:bd:31:0f:f9:ab:00:16:10:54:16:29:0d:b9:0d:61:9f:ee:
         8a:e1:4c:e2:62:4f:cc:d5:36:bf:6a:cf:fc:2f:3d:38:1f:fa:
         93:36:a6:67:53:5b:5d:d7:fa:a7:9b:b5:b7:6d:67:fb:5c:48:
         ec:a0:75:eb:f3:f4:f1:5d:f3:26:38:42:af:dd:34:1d:3a:79:
         96:7f:ef:06:7b:c7:45:4c:52:55:2c:71:21:18:95:8e:5c:5e:
         25:44:53:f1:db:cb:8f:39:55:28:66:5a:8c:2f:d4:6e:75:45:
         3d:3a:ca:29:f1:02:bc:b9:74:52:bb:8b:75:c9:1f:ea:6a:47:
         4e:96:aa:f9:f3:cb:12:0b:18:f1:fd:b8:07:fd:a3:5d:b6:76:
         7c:cf:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----