Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.mft
File:                     1-3RABurDCEv4jxKDSbDnM7s9eeM.mft (raw, json)
Hash identifier:          8okSmDWXDdkF/mJCO7Lr8bh4vcqE1xgUyNkSJ4LVQWI=
Subject key identifier:   A5:98:AD:A9:BD:CC:7E:48:36:EB:3E:D4:77:95:BA:2A:28:DB:AC:C1
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Certificate issuer:       /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial:       0192AEF393FBA278ED2F962FE3E35426220E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.mft
Manifest number:          1325
Signing time:             Mon 21 Oct 2024 12:00:51 +0000
Manifest this update:     Mon 21 Oct 2024 12:00:51 +0000
Manifest next update:     Tue 22 Oct 2024 12:00:51 +0000
Files and hashes:         1: 1-3RABurDCEv4jxKDSbDnM7s9eeM.crl (hash: epA04LSqqz2YeREF1j9f55BznTt+jDYzPiGl/BENre0=)
                          2: aawodUMaz1sarMmhPxEtl3_VHI8.roa (hash: PvCoehhRC8ZaTGeMyYaNuEr08RIx7R/qtgOFrXKvTuo=)
                          3: sfCO6HC9ppANp35jFNhh6JQ2jy0.roa (hash: ZLdTa/NDVMaW27BUggBR77q2qtUdKzPeqvGRYpirP5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:f3:93:fb:a2:78:ed:2f:96:2f:e3:e3:54:26:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
        Validity
            Not Before: Oct 21 12:00:51 2024 GMT
            Not After : Oct 22 12:00:51 2024 GMT
        Subject: CN=a598ada9bdcc7e4836eb3ed47795ba2a28dbacc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:b1:79:c9:b5:4f:a3:fb:cf:f8:7b:c3:31:
                    bd:f5:45:47:e6:4d:d3:99:b3:e7:e7:1a:f1:27:0f:
                    a5:1d:67:35:a7:e3:1d:e4:c0:95:55:b1:cd:be:b9:
                    35:fb:9e:a1:22:17:ec:05:eb:32:59:e6:d0:9e:98:
                    7b:0f:15:be:e9:d6:d4:a3:31:aa:70:8e:45:51:37:
                    85:30:6e:dc:36:13:60:48:60:11:44:bc:73:7d:dc:
                    29:32:8f:9b:ff:6f:12:06:90:22:3d:82:f1:f3:63:
                    f4:e0:a9:01:ec:33:8b:a7:17:3d:a9:31:79:47:5a:
                    e0:ff:a0:ed:c4:a7:c6:62:d0:1e:71:c3:14:0e:85:
                    e4:61:c6:59:25:bb:9a:cd:92:c7:9f:c1:f0:68:63:
                    75:65:c0:f6:38:7a:a6:19:6d:95:4f:8a:65:fb:2a:
                    c4:72:aa:24:57:a0:9b:51:bc:3e:40:87:0d:57:e7:
                    dc:28:e9:a9:df:17:1c:f7:9d:74:3d:44:de:76:cf:
                    0c:de:51:bb:be:01:5c:89:b0:82:15:dc:ba:00:86:
                    ca:b7:a3:e4:41:f5:03:f5:fc:96:9b:32:6b:7a:d4:
                    75:5f:5c:42:28:c8:ff:13:c1:0d:2e:11:a1:d4:04:
                    01:c2:94:26:b8:65:d5:bb:89:2a:ae:d8:4f:a1:1d:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:AD:A9:BD:CC:7E:48:36:EB:3E:D4:77:95:BA:2A:28:DB:AC:C1
            X509v3 Authority Key Identifier:
                keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:5b:e2:53:3a:22:bc:3b:6d:4d:16:13:12:6f:b2:81:b7:
         8c:34:43:2f:b0:89:68:e6:2f:9a:f4:78:2d:12:ab:f6:ba:25:
         94:2a:09:c3:b2:08:06:cc:a6:a2:a6:f4:c6:c6:4d:fc:07:78:
         b5:8b:d9:34:f6:1e:16:e7:a9:7f:13:64:52:98:43:3c:4b:3a:
         c0:cc:d7:0a:b8:3d:1d:5b:f3:f3:1e:d3:4b:ab:66:85:f2:af:
         bd:ba:68:86:ac:4e:fc:db:ea:54:67:e5:9b:e7:fd:7f:07:69:
         81:3b:a9:40:0e:b8:37:f7:1c:bd:b8:6d:89:51:c3:39:ae:e1:
         2d:a5:ad:05:3f:05:d0:27:5c:b3:53:63:f8:24:64:f8:65:f5:
         a8:3f:5f:86:5d:81:76:75:dd:e7:3a:38:e2:a2:ba:f9:92:c3:
         5d:83:ef:8c:19:94:8e:bb:90:54:81:25:ad:56:6f:bc:a0:95:
         c7:0e:bf:af:19:64:90:fd:8f:9a:10:49:5e:2f:4e:38:33:25:
         a4:10:c2:c7:b5:2a:e9:a9:98:e7:46:07:26:85:3d:bc:39:1d:
         58:77:d9:6b:ef:ef:db:01:28:37:66:59:32:c7:21:94:88:50:
         68:ac:7d:2f:1b:a2:73:bf:1e:f2:d5:9c:ef:f8:3a:5f:42:f4:
         08:ba:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----