Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft
File:                     w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft (raw, json)
Hash identifier:          TC55sLCsb7FJpsV1ce4a9BNiZyEFgHLOBBwX/9JxNEc=
Subject key identifier:   E2:D5:19:8E:C8:DC:25:74:DD:97:15:3D:FC:43:03:15:E1:C1:81:3A
Authority key identifier: C3:D7:CB:33:3C:50:FF:21:26:E2:6F:22:EC:B7:91:CF:6F:D9:5C:21
Certificate issuer:       /CN=c3d7cb333c50ff2126e26f22ecb791cf6fd95c21
Certificate serial:       0193FA78960B0A0E08500A150C11C9365B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft
Manifest number:          0ECA
Signing time:             Tue 24 Dec 2024 21:00:26 +0000
Manifest this update:     Tue 24 Dec 2024 21:00:26 +0000
Manifest next update:     Wed 25 Dec 2024 21:00:26 +0000
Files and hashes:         1: 9KuTUwuYY8EW7s3-S2mLG4TE9LU.roa (hash: chsECT7Pns91FQ7cIeyINwZMYtxmSgRPck7DCz2HjTA=)
                          2: KAHUhwuOgy0Pt2NoBITLl1tm_Rc.roa (hash: 9gfeq8gYHAsOLFTVtfZDHsh7XdlOwWRuuvynl2qCiSg=)
                          3: w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.crl (hash: 1UM0XWX8D4IOCd4g7Nqmg8WK2VON89DxwRdP9q44pAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:78:96:0b:0a:0e:08:50:0a:15:0c:11:c9:36:5b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3d7cb333c50ff2126e26f22ecb791cf6fd95c21
        Validity
            Not Before: Dec 24 21:00:26 2024 GMT
            Not After : Dec 25 21:00:26 2024 GMT
        Subject: CN=e2d5198ec8dc2574dd97153dfc430315e1c1813a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:2a:e6:48:3a:f4:9d:a2:83:db:bd:80:42:
                    51:19:15:df:c6:65:c2:43:2b:9e:8f:b1:2f:21:51:
                    67:db:35:14:bf:41:2b:ec:55:50:26:78:c8:98:13:
                    e7:d7:bd:a7:7a:c8:c3:dc:27:36:34:54:ac:a1:5b:
                    ba:84:be:0b:43:be:26:a4:14:30:e8:5b:17:34:ef:
                    ca:4b:66:c0:be:a9:87:ea:29:cc:24:6a:54:f1:4b:
                    44:e1:14:76:6e:a3:be:a6:eb:0f:cc:0b:f9:62:4a:
                    b8:5d:b4:44:c6:3c:3f:11:3e:d4:2c:53:a0:ac:3c:
                    18:0e:09:c5:dd:72:b8:57:4b:a0:7e:b1:21:21:9a:
                    9e:c9:08:99:8b:c5:d7:b7:b1:c9:76:61:ae:9c:25:
                    28:d0:e9:19:9b:68:9f:94:1c:2d:b3:40:ec:9f:9c:
                    00:0a:e3:86:53:1f:71:ef:6b:b3:a4:75:84:ae:53:
                    ed:96:74:8a:09:69:da:d4:70:59:d8:69:6e:a6:72:
                    af:74:ec:36:cb:c3:0b:06:a8:9e:31:e8:ce:b7:52:
                    22:be:1b:eb:86:51:76:f7:e5:61:da:2b:49:3b:b7:
                    d0:ef:62:40:65:8d:75:f8:76:75:17:9a:ed:c7:85:
                    b6:2b:0a:d9:b8:a9:49:a8:c4:63:8c:8a:b0:c3:92:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:19:8E:C8:DC:25:74:DD:97:15:3D:FC:43:03:15:E1:C1:81:3A
            X509v3 Authority Key Identifier:
                keyid:C3:D7:CB:33:3C:50:FF:21:26:E2:6F:22:EC:B7:91:CF:6F:D9:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:67:7a:45:40:a1:69:9f:d5:5c:0b:0f:27:0f:98:f7:ad:78:
         1c:c5:23:e0:d9:06:d7:e2:4d:e1:42:29:c0:27:22:5f:21:58:
         71:b2:8a:7a:5a:b2:8e:96:ac:99:e7:c2:91:ef:e2:8c:eb:ca:
         50:2c:cd:8f:99:49:b3:de:2b:bf:91:3d:43:b6:17:7b:01:78:
         84:ec:76:f7:94:09:fa:40:5a:c8:13:c8:d4:9d:b4:73:25:9a:
         8a:35:fb:12:a7:d0:3f:fd:d3:bd:25:b3:72:bb:e4:57:e2:03:
         84:2c:bd:1e:d5:5f:ca:eb:72:b3:14:6a:35:c2:eb:85:11:04:
         cd:ae:a0:46:a1:6c:d5:c3:53:c1:75:32:54:8f:c1:c2:54:ba:
         bb:88:68:fd:71:f4:31:97:12:0f:b5:b1:c7:2d:40:db:2d:3d:
         7a:bc:ee:bf:d3:94:ab:d2:9f:08:c9:04:fe:0e:8f:98:13:32:
         aa:f1:27:86:71:19:a0:06:3a:b3:55:82:11:99:20:c7:9c:ae:
         4d:3b:42:f9:06:18:fa:ff:aa:33:98:92:ff:55:8b:0d:4c:58:
         b0:fe:57:37:b3:32:01:6c:2e:d4:e1:6c:fe:b4:9d:fb:a1:30:
         06:9c:32:81:0b:72:77:31:c0:e9:fd:9c:f1:aa:eb:39:3f:37:
         6d:ce:95:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----