Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
File:                     ShO3dYZ23i7xJ8x3UO52xag0HXg.mft (raw, json)
Hash identifier:          hMACtHkv/Fxq5eZUN4YUhTb4Ag80Fq93cDu2jQBUMuE=
Subject key identifier:   A3:52:47:1E:9B:AD:6A:79:BC:6F:37:0C:E2:02:B5:E6:48:07:E1:EC
Authority key identifier: 4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
Certificate issuer:       /CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Certificate serial:       0192AF986C24012413C2D4500903F13C1D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
Manifest number:          0E73
Signing time:             Mon 21 Oct 2024 15:00:54 +0000
Manifest this update:     Mon 21 Oct 2024 15:00:54 +0000
Manifest next update:     Tue 22 Oct 2024 15:00:54 +0000
Files and hashes:         1: HD9Hx9PVFnNgGKThhu3e4vCe88A.roa (hash: /WzSoRAJi0VglVwEfzdULW136aAyGXI2qBvI9R6McEw=)
                          2: ShO3dYZ23i7xJ8x3UO52xag0HXg.crl (hash: JssYFMPOQ29wMnoHDKs2c8217ViX+dA/eVS+5GeMFjo=)
                          3: k5IK2aFsCMWdA6KcDFwF1c8d5Eg.roa (hash: RLYxMyHbkbgzP531TQCOJ1cVPIXCFneiBCAL7eel4cQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:98:6c:24:01:24:13:c2:d4:50:09:03:f1:3c:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
        Validity
            Not Before: Oct 21 15:00:54 2024 GMT
            Not After : Oct 22 15:00:54 2024 GMT
        Subject: CN=a352471e9bad6a79bc6f370ce202b5e64807e1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:f7:14:ec:72:03:68:66:1d:f5:91:e3:d1:
                    0f:f5:fe:d4:78:54:b6:0d:88:78:df:ed:ee:a6:d1:
                    8f:d1:bc:22:64:48:e9:57:1c:e2:35:79:b2:2c:cc:
                    f9:d4:99:fa:78:ea:1c:14:d4:a3:cf:23:21:b6:7c:
                    0c:21:ed:1c:3f:4b:25:fb:4d:f4:0c:96:49:84:cb:
                    8e:7e:2b:ab:6d:da:0d:ea:eb:60:2e:98:7b:a4:d9:
                    4e:86:95:b5:41:e8:52:3c:4a:31:c8:c8:c0:f3:5a:
                    c5:a9:e0:0f:cd:01:52:0e:75:bb:fd:f0:c4:39:73:
                    64:0a:c8:44:62:b9:15:28:3e:4b:18:79:a6:a1:e8:
                    f2:79:4d:21:26:dd:5a:76:a4:30:cb:01:63:56:35:
                    9e:4c:a7:2b:34:0d:88:59:82:13:1d:98:4b:1b:64:
                    4c:61:7b:48:d9:a5:68:38:8a:88:7b:88:51:3e:7d:
                    a7:4b:8a:05:6b:4e:fc:bd:38:cc:d1:4f:62:15:38:
                    2d:8f:5a:c4:0c:c2:1e:51:7f:c9:15:55:05:c1:7e:
                    64:09:31:53:e4:94:c9:31:89:e2:7b:57:91:78:c3:
                    1b:e4:d4:b5:4f:64:c3:73:aa:ce:5c:38:a1:ce:72:
                    2a:85:6e:1d:3a:2b:5f:a0:ea:14:8f:dd:89:09:87:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:47:1E:9B:AD:6A:79:BC:6F:37:0C:E2:02:B5:E6:48:07:E1:EC
            X509v3 Authority Key Identifier:
                keyid:4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:60:22:c6:df:0d:3b:44:52:7a:ca:e8:ec:ad:7b:5d:f7:fe:
         38:b2:49:8e:d6:2f:10:64:5c:71:a9:47:e8:bd:b9:06:0d:e3:
         a8:54:5c:9c:37:5e:d5:95:23:38:9d:85:f1:66:4f:1d:48:8f:
         4a:ba:12:be:df:22:02:35:2e:fe:c0:94:8d:7f:bd:78:0d:c4:
         31:ec:10:12:8e:96:09:24:61:c5:9a:dd:29:ca:1f:88:d9:c6:
         72:a1:bd:26:9e:5c:6a:d3:13:ab:13:38:9a:0c:50:d1:8b:01:
         47:db:5f:9d:e4:ea:3c:fc:c4:6b:94:8d:6d:91:ea:2c:47:07:
         16:b3:af:fb:d2:29:f7:84:95:d3:1e:43:64:8e:7d:c5:21:0d:
         c0:00:29:3a:4d:6e:5b:a8:5f:85:d9:28:f0:c1:58:e2:d2:77:
         1e:4f:c4:10:35:0f:f5:64:60:d9:67:ac:af:82:cb:15:ee:d2:
         5e:83:1e:6b:53:fb:ae:e5:0d:53:40:84:aa:de:f4:da:06:ba:
         08:ee:9a:89:83:26:89:ce:61:d9:b6:99:08:16:f0:2c:4e:8a:
         6b:e6:bf:cd:b2:ed:a8:af:f2:7c:0f:e4:9c:5d:25:36:40:eb:
         58:81:0d:47:dd:56:2f:de:d0:53:c9:b6:71:0f:4d:ac:24:1a:
         41:b9:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----