Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
File:                     KeUoQqbixQwOLA9duJHdLZZW-v0.mft (raw, json)
Hash identifier:          RgsV71shWLIDTtZIIyX6l0wZmvHhW6ammKSpKMk9N70=
Subject key identifier:   9E:0F:B3:16:73:4C:4A:FF:11:33:39:3C:31:73:6E:70:FF:E5:7F:E1
Authority key identifier: 29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
Certificate issuer:       /CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Certificate serial:       0193474CC254CF809DD092056365517464AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
Manifest number:          027A
Signing time:             Wed 20 Nov 2024 02:00:32 +0000
Manifest this update:     Wed 20 Nov 2024 02:00:32 +0000
Manifest next update:     Thu 21 Nov 2024 02:00:32 +0000
Files and hashes:         1: 02UNUsIQyfpAbMMmvTUZ33TeAmw.roa (hash: RXwzkMXiWEIN9cpmS0j+E/p8BQSPaf5OEf8dEqFXk58=)
                          2: KeUoQqbixQwOLA9duJHdLZZW-v0.crl (hash: tCTNax42onqn0rVh8Gde32c3xgZoreVXqaUk3i+VzVM=)
                          3: M0jPGazvff9Ux3NIuCmO24EtQXA.roa (hash: td5TKaMyv4i6JkPKN5xIyTcHESx+WHZpKCjwvcocQj0=)
                          4: tnkdqfzvl9cIEK3LRFyQyZn83Z0.roa (hash: LxAAM0FivlGbdfmDD/Jv/CGMf/d6mOeXCB6StNV1L6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:4c:c2:54:cf:80:9d:d0:92:05:63:65:51:74:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
        Validity
            Not Before: Nov 20 02:00:32 2024 GMT
            Not After : Nov 21 02:00:32 2024 GMT
        Subject: CN=9e0fb316734c4aff1133393c31736e70ffe57fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:1d:61:12:26:75:e0:b6:7a:a0:8b:05:54:
                    95:48:67:54:fc:47:d8:c8:d2:e4:03:97:3a:e2:cb:
                    bd:25:60:c2:2c:6f:15:3a:c0:c3:60:26:ca:a7:e4:
                    34:6c:04:c7:56:35:28:c6:bc:88:3c:17:bc:25:a8:
                    67:1a:d5:90:e8:d4:a5:9e:05:ff:82:0d:24:a4:f4:
                    9b:ad:e4:da:1a:46:69:ec:a6:ae:01:c2:3d:e4:04:
                    88:eb:bb:cf:41:e3:25:25:27:7a:e1:64:15:b6:4d:
                    5a:3d:7e:2b:c6:a1:be:ca:14:ac:84:72:60:7b:9a:
                    4d:37:b1:50:0b:3d:44:fd:ce:29:f2:3c:da:ea:8e:
                    4f:7d:8a:86:2e:ce:ac:0a:d0:db:59:4b:49:12:48:
                    83:d0:98:d5:5d:d2:24:dc:b5:21:4c:a9:44:82:ca:
                    57:70:29:8e:ca:7a:3d:76:af:3c:4a:bb:c5:29:6c:
                    29:f6:3d:67:e4:5c:e5:5d:f3:00:d7:88:1c:0d:f4:
                    5f:68:57:2a:76:7f:fb:e5:e1:f7:c9:29:5f:9c:ba:
                    44:7a:64:a5:1c:2c:61:d4:bd:57:75:50:ca:ec:c5:
                    08:2a:37:b0:eb:82:0a:0a:f4:b8:86:27:6e:c5:bb:
                    86:07:e6:04:23:3f:eb:38:2d:85:2f:b0:ce:0c:99:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0F:B3:16:73:4C:4A:FF:11:33:39:3C:31:73:6E:70:FF:E5:7F:E1
            X509v3 Authority Key Identifier:
                keyid:29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:61:97:a4:5e:57:fb:63:7c:45:45:73:02:a6:63:7f:6b:
         b7:95:ae:fe:13:bb:6b:ac:f5:cf:74:ef:ce:fa:bb:c8:2a:08:
         5d:43:e7:b5:85:36:4f:46:39:28:ae:0a:7d:bd:ad:29:bb:33:
         29:3f:6c:ab:ad:1d:b2:ad:b1:47:5d:bb:58:30:14:17:27:c4:
         20:e8:a6:2a:5c:fb:9f:3c:3b:76:b1:32:40:e1:ac:37:52:40:
         4d:92:80:8c:6d:d8:66:b0:9b:cf:a3:ad:21:ec:ff:2e:07:cb:
         ed:c4:76:0c:9d:21:38:04:60:67:27:72:91:18:c7:e7:da:c7:
         26:b0:b4:de:c2:d8:6f:2c:4d:10:26:15:5d:5c:d5:7e:6d:2e:
         a5:d4:df:4e:2d:3b:80:3c:5b:27:b5:2b:8c:d4:4b:23:76:e4:
         60:e8:e3:12:72:3e:03:da:9e:10:ba:38:27:6f:35:79:85:14:
         98:76:2b:4b:19:45:7f:8e:c9:ce:8a:0b:2f:0c:85:38:3c:c7:
         59:1d:0d:46:b2:77:63:a3:ca:47:d6:60:46:77:38:8c:d4:98:
         fe:b1:43:a7:38:d2:8a:67:b7:a1:ac:7e:da:45:c2:c4:14:16:
         24:9e:95:9e:56:2d:bc:2c:10:fa:7b:ab:d1:76:91:bc:d1:02:
         e0:37:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----