Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.mft
File:                     w2I_-80tgfezefq0JXNlFKnIv1M.mft (raw, json)
Hash identifier:          o3IbDoB5vcQnqULdV5O3TXxRguDwGxbf8AuuXSxjn1w=
Subject key identifier:   47:43:BA:D2:D5:E0:0D:F3:85:97:28:7B:AF:1D:98:0B:C7:57:43:3B
Authority key identifier: C3:62:3F:FB:CD:2D:81:F7:B3:79:FA:B4:25:73:65:14:A9:C8:BF:53
Certificate issuer:       /CN=c3623ffbcd2d81f7b379fab425736514a9c8bf53
Certificate serial:       0193474CCA743D0B7541241101F21C56770D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w2I_-80tgfezefq0JXNlFKnIv1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.mft
Manifest number:          35
Signing time:             Wed 20 Nov 2024 02:00:34 +0000
Manifest this update:     Wed 20 Nov 2024 02:00:34 +0000
Manifest next update:     Thu 21 Nov 2024 02:00:34 +0000
Files and hashes:         1: 5PHg1NfD2flYXTjXQV0pIgXfZWI.roa (hash: 3e+dNCH3aInRTjjyfn+AmieFBQg3t0rEnNXZ0TreeaU=)
                          2: w2I_-80tgfezefq0JXNlFKnIv1M.crl (hash: H4hHv2+Mh7b+SyAmC4cy9DavFAO0CsuuPWjDsLB+E7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:4c:ca:74:3d:0b:75:41:24:11:01:f2:1c:56:77:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3623ffbcd2d81f7b379fab425736514a9c8bf53
        Validity
            Not Before: Nov 20 02:00:34 2024 GMT
            Not After : Nov 21 02:00:34 2024 GMT
        Subject: CN=4743bad2d5e00df38597287baf1d980bc757433b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:8a:b4:e3:74:bb:fe:c3:b3:af:1b:04:ce:
                    f7:e9:2b:35:c3:e7:ec:0a:6b:76:ca:ba:10:d2:9c:
                    0f:8c:5a:0c:e6:32:f4:96:37:56:a8:44:8c:02:b0:
                    a0:6a:42:f7:31:3c:dd:e2:91:4d:eb:e7:86:41:fb:
                    4d:ba:fc:fc:3f:ae:ab:61:ce:2f:63:68:c9:2d:b9:
                    0e:85:35:6c:5d:73:9c:31:f5:bc:30:53:04:16:1f:
                    3f:c3:c0:42:09:8c:cc:51:7f:37:cf:42:14:fc:7b:
                    35:09:02:70:a6:28:97:7b:5e:6a:b9:59:84:c6:42:
                    af:b5:8e:d7:f8:99:e4:fa:08:6e:c2:28:b0:41:a9:
                    fd:b9:af:dd:6c:31:9f:0d:56:84:fa:7d:f4:bc:08:
                    a6:1a:a0:eb:d3:91:20:eb:17:3d:79:87:80:73:02:
                    04:7a:48:7f:e2:af:40:51:de:08:ad:91:78:93:a6:
                    71:ed:47:b4:33:b8:1c:d7:04:2d:81:a7:46:fe:9a:
                    f6:0e:4a:f9:c0:3b:d4:fd:8b:78:19:19:54:fe:85:
                    7c:94:d2:4e:c5:59:63:aa:f5:5e:4d:d8:34:17:4b:
                    05:af:89:c8:8d:8a:f3:df:d3:b3:25:6e:90:85:af:
                    6b:3c:14:9e:0d:49:d1:a3:33:c7:d5:89:3c:b1:9a:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:43:BA:D2:D5:E0:0D:F3:85:97:28:7B:AF:1D:98:0B:C7:57:43:3B
            X509v3 Authority Key Identifier:
                keyid:C3:62:3F:FB:CD:2D:81:F7:B3:79:FA:B4:25:73:65:14:A9:C8:BF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2I_-80tgfezefq0JXNlFKnIv1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:4f:1a:e3:96:00:b6:90:02:22:37:e8:c4:91:77:0c:31:
         4e:e1:d3:a0:7f:f9:9c:13:40:d8:a4:a2:fa:53:0a:a0:57:0d:
         a8:16:a7:5d:40:4a:b2:ba:25:f9:f9:91:21:7e:b2:f9:fb:d6:
         a6:2c:e3:be:2d:e8:7e:10:c4:ae:dd:3e:44:b9:95:7e:96:94:
         9c:19:63:81:5d:cb:b6:ff:9b:e3:bf:0e:d0:06:0d:b2:f7:98:
         4e:3c:e0:25:76:bf:56:21:08:fb:e7:6f:50:13:9b:e6:e3:4e:
         d8:4a:22:60:57:6b:08:eb:dc:e3:c6:33:2b:8a:b2:01:b3:94:
         50:4e:3b:8c:c1:a2:f7:c0:60:63:a7:d2:fc:1b:db:12:d5:df:
         0d:2e:e6:92:43:0d:09:3b:68:cf:ac:f3:8c:1b:f8:65:a0:17:
         aa:77:ef:43:ae:46:4e:1b:75:ea:b9:aa:ce:d7:67:86:26:33:
         a1:b5:d8:f0:22:14:b1:60:ec:00:f0:11:4c:04:c4:86:c8:9b:
         5a:c3:4a:63:32:0a:fd:d1:fb:e8:f2:76:82:97:06:41:a8:4c:
         85:1f:c3:0b:ae:ef:70:77:4b:6b:98:a8:c9:e6:02:54:ee:a9:
         f4:1c:7c:43:a6:63:31:7a:35:7f:c9:d8:a8:f7:27:8a:f6:e9:
         65:28:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----