Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
File:                     ysjinzVYO1sqlnPddqJZA7NexZM.mft (raw, json)
Hash identifier:          cro7XlMmCKYYG8J2JdI0qYK3oNHLe59rTgJazpJia3M=
Subject key identifier:   DF:FD:86:FF:5A:1E:3A:8F:AE:79:DC:92:6B:94:1A:B7:B0:27:56:D1
Authority key identifier: CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
Certificate issuer:       /CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
Certificate serial:       019157D86B7F109BFA9CC58E02D1E520C626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
Manifest number:          8D
Signing time:             Thu 15 Aug 2024 21:01:26 +0000
Manifest this update:     Thu 15 Aug 2024 21:01:26 +0000
Manifest next update:     Fri 16 Aug 2024 21:01:26 +0000
Files and hashes:         1: 0daZaVn9kohnZi4AjxcLOI2dYTA.roa (hash: mhVNRU2/gx3nhr590ysq6mvg1YqKqke+tmcwMSUQ8lk=)
                          2: p8qS_oodmksqVdd_ZwecyVfKjpA.roa (hash: TXKeBdWiOxBf8NWGaXcUPZ5K4/QyvWiKOTcGQtcqmt4=)
                          3: ysjinzVYO1sqlnPddqJZA7NexZM.crl (hash: sUv/pjfyXRcepCADZKxsf3MZe/0cUGsFJHNrxOv2Fk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:57:d8:6b:7f:10:9b:fa:9c:c5:8e:02:d1:e5:20:c6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
        Validity
            Not Before: Aug 15 21:01:26 2024 GMT
            Not After : Aug 16 21:01:26 2024 GMT
        Subject: CN=dffd86ff5a1e3a8fae79dc926b941ab7b02756d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:a3:87:d5:12:8e:22:ac:9c:72:b1:08:4d:
                    b5:89:91:f7:4d:0c:86:56:9f:09:bd:4f:32:44:15:
                    19:fa:27:6b:6b:84:4d:59:3e:a8:30:da:3b:c5:57:
                    e3:21:1b:bb:f9:9e:e7:a2:1b:fb:d4:58:7f:9c:26:
                    9b:e7:0e:4c:e6:23:6e:2c:88:16:cb:9d:8d:28:11:
                    05:59:f4:8c:37:51:56:37:8b:fb:af:ee:f1:91:e9:
                    cd:74:41:1c:b2:42:da:70:4d:73:d3:6b:b7:e0:21:
                    99:a1:c5:a7:93:b0:38:d8:a8:d4:7e:ef:8e:b6:8d:
                    d4:6b:bf:e7:90:3c:e9:12:82:ef:a9:1c:c0:c9:54:
                    42:97:cf:9e:bb:51:4b:8f:66:08:84:c0:e1:30:1d:
                    b0:b0:c2:6a:25:8a:ec:5c:98:eb:0d:f4:f6:83:1c:
                    ed:19:36:bc:00:e1:4e:e5:60:d7:59:b3:45:03:a0:
                    e1:69:e3:6e:cf:cc:a1:5a:24:2a:8f:0b:5b:b7:8f:
                    0f:dc:ac:f0:4f:46:2d:31:f3:8b:4a:44:45:7b:4b:
                    0f:f8:5e:5a:2d:33:62:dc:08:0f:1b:76:65:69:21:
                    89:80:48:fb:40:bd:de:1a:28:23:8c:b1:a6:52:80:
                    9a:24:c9:37:4f:3a:22:fc:72:a1:71:4d:31:f1:06:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:86:FF:5A:1E:3A:8F:AE:79:DC:92:6B:94:1A:B7:B0:27:56:D1
            X509v3 Authority Key Identifier:
                keyid:CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:85:36:99:42:e1:50:9f:aa:86:34:67:1a:a7:82:c7:84:
         a7:c5:95:d5:17:5b:9e:d6:8a:6e:dd:98:82:67:3b:d4:78:f2:
         19:08:45:ef:d6:15:87:a5:91:24:a3:c7:4f:65:7a:10:84:13:
         21:e5:eb:8e:d0:df:a8:0a:a6:3a:10:9c:db:54:9c:15:d8:69:
         dc:a1:04:61:2b:3d:c7:36:bb:d6:b0:e8:fc:73:6d:a5:f6:3c:
         ba:84:fa:7d:04:b2:e6:31:2f:c8:de:dc:c0:49:33:15:9f:80:
         e0:7a:67:b0:37:43:ab:2f:a4:84:a6:04:d8:8f:70:ff:7e:4d:
         f0:7f:2a:85:fa:e8:47:4f:2f:3d:ba:8d:9d:10:0b:69:ec:42:
         7c:58:49:0a:82:50:aa:43:b2:f5:77:45:f9:8f:e4:72:89:a3:
         d9:dc:c7:1b:dd:88:fa:9a:d2:b8:5d:1e:1d:88:a8:8d:b9:7a:
         ad:ed:2b:9a:4b:6c:47:0c:32:67:d9:0b:4c:0c:a3:48:4c:e2:
         4c:d0:c4:61:3f:36:1d:8f:f3:ab:e8:76:15:6f:89:04:03:9a:
         15:c9:19:cc:88:29:fb:be:10:1c:fe:dc:88:a6:4f:71:5f:cc:
         14:e8:17:99:fa:c5:e9:4c:a6:67:82:06:6e:ce:6b:6a:15:90:
         2e:2f:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----