Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c3b570-ed44-4ecb-9af7-dcce563f603f/1/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.mft
File:                     EfI_HH8yEJmsJ3RdjK9kvFKKPpI.mft (raw, json)
Hash identifier:          wzx+LMRxyKWO3pESDdIXLsW/Au/3hyXC2/IeB8V78Zc=
Subject key identifier:   93:E2:A9:64:D2:94:BC:70:8F:1C:CA:00:F5:90:3D:FE:15:36:40:D0
Authority key identifier: 11:F2:3F:1C:7F:32:10:99:AC:27:74:5D:8C:AF:64:BC:52:8A:3E:92
Certificate issuer:       /CN=11f23f1c7f321099ac27745d8caf64bc528a3e92
Certificate serial:       0192AF618EDB72C6B71F13CF48F8F5F50CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c3b570-ed44-4ecb-9af7-dcce563f603f/1/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.mft
Manifest number:          0975
Signing time:             Mon 21 Oct 2024 14:00:59 +0000
Manifest this update:     Mon 21 Oct 2024 14:00:59 +0000
Manifest next update:     Tue 22 Oct 2024 14:00:59 +0000
Files and hashes:         1: EfI_HH8yEJmsJ3RdjK9kvFKKPpI.crl (hash: 2oBFgDEYr7+lbEmWN8T2w7uCr+X6DjgubG6AvZUMAhc=)
                          2: xUXNzcbbojXWhgKXNPDCpXvhJUU.roa (hash: kRb20kxjKfZ977RkhT1bPCfYzlUagp3J1wdCuTu9p+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:61:8e:db:72:c6:b7:1f:13:cf:48:f8:f5:f5:0c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f23f1c7f321099ac27745d8caf64bc528a3e92
        Validity
            Not Before: Oct 21 14:00:59 2024 GMT
            Not After : Oct 22 14:00:59 2024 GMT
        Subject: CN=93e2a964d294bc708f1cca00f5903dfe153640d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:81:25:60:63:6e:ae:b1:74:f7:38:0e:fc:
                    25:b1:19:bc:cf:e4:94:51:50:77:b2:ea:0e:c6:9d:
                    23:4c:a5:b3:ce:2b:ef:94:8e:41:8c:d3:b9:63:99:
                    23:3a:7d:5c:b9:48:f7:59:42:7c:cb:80:04:27:44:
                    df:aa:f2:46:ca:a7:e3:8b:bc:b6:c1:ae:b0:58:b8:
                    a2:6d:a9:c8:3c:5f:b7:64:2e:21:78:13:2c:d2:eb:
                    68:37:4d:f0:de:40:2f:01:c4:a4:c5:af:c4:87:30:
                    43:b6:2d:09:05:5f:1e:3f:ee:aa:f6:7f:c3:ae:08:
                    47:ab:02:b0:d8:84:71:6d:51:03:21:0f:1d:ad:0c:
                    b6:04:58:f2:5a:62:99:df:69:aa:9b:f4:1d:07:29:
                    72:e2:b9:37:a1:4b:3e:36:e9:ed:fe:36:dc:f0:5c:
                    62:b3:78:b3:d7:69:46:35:bc:5a:96:22:d7:50:06:
                    48:c5:57:48:35:f0:34:76:af:37:8f:16:6a:c6:f5:
                    88:2f:50:06:ed:ee:6f:97:b0:63:6b:61:aa:97:aa:
                    0c:14:9b:cb:02:5e:4d:05:ff:7e:a9:dd:6c:7b:eb:
                    37:c3:7b:4d:fe:2b:d6:99:56:be:b0:12:45:29:b2:
                    a2:84:64:a6:3f:70:2a:f4:c4:2e:8e:81:8b:99:b7:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E2:A9:64:D2:94:BC:70:8F:1C:CA:00:F5:90:3D:FE:15:36:40:D0
            X509v3 Authority Key Identifier:
                keyid:11:F2:3F:1C:7F:32:10:99:AC:27:74:5D:8C:AF:64:BC:52:8A:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c3b570-ed44-4ecb-9af7-dcce563f603f/1/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c3b570-ed44-4ecb-9af7-dcce563f603f/1/EfI_HH8yEJmsJ3RdjK9kvFKKPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:7e:69:2f:0c:de:a9:18:0d:9c:69:96:cd:45:57:c9:1f:
         00:59:62:b8:96:d0:8b:9e:71:32:08:ea:38:fb:56:79:8a:89:
         9f:9a:25:6c:65:cf:77:98:59:b6:f7:36:00:40:69:f1:b8:34:
         df:e0:d8:84:87:b0:15:38:5b:d6:4b:b7:47:fb:0e:6e:0d:ae:
         ad:c2:84:c2:ee:78:16:bf:ec:76:61:f3:04:f0:00:c0:23:db:
         62:a8:f6:b7:6f:c0:86:83:d0:f1:8c:52:9d:7c:25:6c:bd:76:
         15:6d:b7:55:5a:c6:58:9e:a2:31:8b:5b:99:e4:bd:f3:38:62:
         47:62:ef:7b:37:fe:35:29:12:2a:0e:82:74:c7:31:11:44:51:
         36:39:f7:39:84:4a:35:e2:80:5b:d9:de:3b:a2:16:77:e5:23:
         2a:f5:3d:4b:b8:e9:51:ef:79:69:a8:4e:99:35:7f:fc:6f:e7:
         26:a4:31:fa:dc:5d:eb:cc:59:68:69:43:56:5f:dd:f7:05:81:
         f9:cd:7e:50:05:ea:dd:10:29:7a:f1:1d:44:96:5f:6f:6c:1f:
         76:36:69:6b:29:aa:a6:37:21:49:b3:65:ac:b0:02:91:ca:50:
         26:cb:2f:5e:f4:29:e0:10:13:3a:15:af:ad:06:76:5a:19:0f:
         c6:e8:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----