Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
File:                     _gyfMOO0bVC40b95udHbhPJRNLo.mft (raw, json)
Hash identifier:          lU/11AfE8TywcPLyicpyetMbBvfukUgkXKbnEVe0c40=
Subject key identifier:   48:AE:13:A0:7F:74:7D:11:DF:2E:2C:D4:E0:C8:32:18:1E:65:FA:24
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       0191B37867E7B2AF9EAD8390B066BEC8206C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
Manifest number:          09D3
Signing time:             Mon 02 Sep 2024 16:01:38 +0000
Manifest this update:     Mon 02 Sep 2024 16:01:38 +0000
Manifest next update:     Tue 03 Sep 2024 16:01:38 +0000
Files and hashes:         1: NXGee85ErSqoPHit0HbEI9RiTXA.roa (hash: mrQojEodQoPywO1DCX1hNHlcS314pUQ+hShQlzfdTpc=)
                          2: XXKSMBfdtj4wckKpZqtviuU7xFg.roa (hash: AnVa68j0ow0iry2rgLMUfSnCOuwaBZQrrfYMJBvfaO0=)
                          3: _gyfMOO0bVC40b95udHbhPJRNLo.crl (hash: Uqh9tlCwhJAWQchwUiRMY5U7vpyGxQ8qweg+XFyd81U=)
                          4: ne7u7zrQx9h3GyUCTzVtTKZz5yc.roa (hash: 3jTE7nHCoy0u9yFZiKr5iAaof29Zj8WJDdeH8FAjGpc=)
                          5: s8LVsFvaOxwp2E4b-2DaV_21w1I.roa (hash: P95qrYxWkT8pnUh8iTszvyQhE+gKTkiqgI76lRaKS6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:78:67:e7:b2:af:9e:ad:83:90:b0:66:be:c8:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: Sep  2 16:01:38 2024 GMT
            Not After : Sep  3 16:01:38 2024 GMT
        Subject: CN=48ae13a07f747d11df2e2cd4e0c832181e65fa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:3b:a1:25:6b:1f:5f:4a:26:6f:e1:85:75:
                    17:23:90:c4:4d:b1:d4:04:f5:e1:2d:6b:91:9a:53:
                    14:59:f4:e8:45:1c:cf:cd:a3:b7:13:2a:06:d0:ce:
                    a2:7d:9f:ab:5b:cb:d0:fc:97:63:f8:f1:53:59:ff:
                    09:cd:76:a8:00:2b:d0:b8:c8:65:11:31:9c:f8:3a:
                    76:a3:0a:0b:1d:91:fe:0e:b1:ff:98:dd:80:61:08:
                    47:31:a7:51:91:7e:cf:5f:f8:8d:94:8d:15:9c:ea:
                    04:1b:27:a3:a1:60:66:2b:a4:d2:15:93:fc:e1:dc:
                    89:2b:e0:2e:b5:d8:9c:63:a9:11:8e:32:d5:6b:9b:
                    72:d0:0f:5a:be:9e:b3:0b:3c:92:31:40:44:6c:ee:
                    3e:61:de:1a:3a:47:d4:f5:26:df:6d:94:be:3a:7b:
                    26:94:83:f3:a3:43:25:f4:1a:11:84:87:a1:4b:7e:
                    30:9d:8e:be:52:9b:7e:d0:e6:c3:88:59:c0:36:f1:
                    4c:8c:b5:63:12:e0:e8:cf:f3:64:0f:ac:17:97:e5:
                    2b:b6:ab:f2:37:b1:3a:68:41:7d:b6:9f:9b:dc:d4:
                    3a:01:bf:1b:99:29:5e:4d:82:44:dd:8c:d6:f5:77:
                    ca:8b:4e:16:52:cb:b1:2c:3d:c5:93:7e:22:57:62:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:13:A0:7F:74:7D:11:DF:2E:2C:D4:E0:C8:32:18:1E:65:FA:24
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:ff:a8:c7:e2:b3:a9:a4:70:77:15:c4:32:41:cb:ab:1e:
         4a:c6:22:12:f7:2d:4f:b3:a4:8e:40:06:bc:8e:da:5c:7e:37:
         39:3b:0f:0c:67:fe:c7:9f:10:af:f5:60:09:13:c0:08:83:01:
         91:62:b8:76:76:85:fc:2c:d3:74:25:89:8f:2b:18:f8:58:fa:
         46:9b:b7:40:38:9a:14:46:b1:1e:b1:ef:b4:79:c4:4a:62:b5:
         b7:f6:ee:9f:57:0a:22:22:91:78:68:d1:b8:37:e0:e3:16:d5:
         64:a6:3c:e5:8f:62:55:d7:eb:1c:e2:1b:f4:3f:28:d2:23:b0:
         a4:ac:8a:3a:46:5b:44:43:7b:11:b4:7e:3f:86:16:ce:95:55:
         88:21:17:05:ac:63:99:a2:4a:d2:9a:29:d8:f3:d9:6b:db:2f:
         de:29:36:a0:d0:f8:65:db:c5:d7:33:d1:b5:a8:68:93:a8:2c:
         c1:34:6a:e7:15:c0:a1:ed:30:42:18:0e:09:36:66:d6:42:2e:
         b7:4f:a6:a4:dc:8b:3b:08:56:33:df:6d:9d:e1:96:2a:4c:32:
         ee:2d:d5:da:df:ae:ff:f5:05:52:6f:e0:6d:9f:20:48:c9:91:
         8f:69:58:e9:29:cd:29:0e:36:ee:4f:12:83:fa:08:bf:61:95:
         81:4b:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----