Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
File:                     9N6JFHS0vv0-shULVHWda-1mQZY.mft (raw, json)
Hash identifier:          iZeYLWo6NZC/GjutZWebrj0bSeEO/vIOvadw4ujTx+s=
Subject key identifier:   96:DB:49:DE:0F:E2:B1:DC:93:E5:67:F8:F6:27:0C:CD:0E:72:30:0C
Authority key identifier: F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
Certificate issuer:       /CN=f4de891474b4befd3eb2150b54759d6bed664196
Certificate serial:       0193F9667373EF5AE3890EB52847ADB490A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
Manifest number:          036D
Signing time:             Tue 24 Dec 2024 16:01:01 +0000
Manifest this update:     Tue 24 Dec 2024 16:01:01 +0000
Manifest next update:     Wed 25 Dec 2024 16:01:01 +0000
Files and hashes:         1: 9N6JFHS0vv0-shULVHWda-1mQZY.crl (hash: FWdleY/JClhQkTEoATl0lX03fIWWIIKyO4HHrRMLD28=)
                          2: KQI8dRLirQatqsxjgc3mS1BCCIs.roa (hash: qxBIfgIFeYVVup/miZjV1QuETPdRYzT74jCv5RpDkrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:66:73:73:ef:5a:e3:89:0e:b5:28:47:ad:b4:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4de891474b4befd3eb2150b54759d6bed664196
        Validity
            Not Before: Dec 24 16:01:01 2024 GMT
            Not After : Dec 25 16:01:01 2024 GMT
        Subject: CN=96db49de0fe2b1dc93e567f8f6270ccd0e72300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:95:78:4d:00:bf:d1:40:aa:4f:04:49:f8:
                    0c:4f:91:be:4f:19:4b:0f:0b:99:d5:99:19:9f:89:
                    e3:bc:b8:ce:60:c3:7c:47:7b:e6:0e:e2:ed:26:44:
                    68:a1:a5:ba:79:33:d0:00:6a:48:b9:ad:0c:e1:60:
                    d2:36:96:ef:d3:ac:ac:95:6e:67:ed:01:11:99:18:
                    12:6e:7a:4f:52:86:d6:30:f6:52:9e:db:08:b5:f4:
                    71:f8:08:e3:b2:86:2b:3f:e9:2c:c7:fc:44:90:fe:
                    18:27:86:c1:cd:51:88:10:19:0f:48:e4:dc:ee:24:
                    7f:1d:66:e5:c2:f7:30:46:e8:fa:5d:90:06:47:a3:
                    ea:df:7f:b4:ec:47:3e:a3:48:65:6e:f7:af:1b:1e:
                    bb:61:60:af:d0:23:c0:bf:5a:f2:3a:7a:78:0a:bf:
                    53:50:2c:b7:4c:99:cd:7d:08:c6:90:85:69:92:a1:
                    b7:9e:f1:a5:2a:62:df:08:bc:84:08:fd:ee:f3:23:
                    fa:82:18:fd:6b:c0:20:58:8e:10:df:5a:e2:08:e0:
                    4b:af:11:29:45:ad:17:da:0f:33:79:67:d8:38:63:
                    b5:66:ce:4a:b3:20:b4:65:7a:36:4a:d0:a5:91:f9:
                    df:61:f6:bd:8d:52:99:ed:ec:22:99:f5:5e:39:ba:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:49:DE:0F:E2:B1:DC:93:E5:67:F8:F6:27:0C:CD:0E:72:30:0C
            X509v3 Authority Key Identifier:
                keyid:F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:9c:a5:3b:4e:9a:1b:f3:26:34:03:ee:b7:b5:72:a4:d1:
         b8:a0:e1:af:ea:79:f1:1f:0c:c4:21:61:81:f1:e4:12:66:33:
         ea:7a:ed:fb:3a:3b:91:78:d3:6a:4e:32:be:b2:5c:73:aa:e1:
         26:7a:30:7e:64:7c:08:1b:0c:0b:00:c0:7e:a6:05:9a:b3:ec:
         6f:10:24:69:82:a3:ce:7e:a4:73:99:bf:88:d3:d6:20:bf:2c:
         f3:1c:67:c8:a1:3b:62:01:7c:e6:8e:33:65:a5:6d:8b:2c:3d:
         24:f7:fe:6c:b2:17:f3:95:4b:ba:27:76:9a:26:8d:c8:a5:b5:
         d7:3f:c6:14:6d:a1:d3:fe:53:0e:7e:3c:b0:12:2d:cf:44:a3:
         92:e2:33:36:ed:b1:a7:49:ee:c9:ae:18:a6:fe:be:76:e3:fa:
         a0:7d:3b:6f:73:17:b4:62:75:79:d8:75:10:40:63:aa:48:24:
         e4:45:38:d0:b5:9e:30:33:dd:71:be:43:7b:c3:c4:b5:16:64:
         e6:b6:d1:a5:e5:b8:e5:5c:99:43:62:69:4e:34:90:39:70:9b:
         9b:97:4e:6d:e3:ca:b1:9e:2a:62:eb:02:cb:fe:a7:53:72:28:
         11:ca:5b:c0:5b:05:6d:7b:66:72:c2:91:71:92:3b:86:63:d4:
         a7:69:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----