Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
File:                     OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft (raw, json)
Hash identifier:          cmQ7o0yeC/3jvXzXgFa+vNKczrU71yjZFrd5xxeNpcI=
Subject key identifier:   E2:28:D6:61:AB:A2:91:AF:59:09:D3:5B:1B:77:72:3C:1B:03:05:6A
Authority key identifier: 39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
Certificate issuer:       /CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Certificate serial:       0192AF6195F62F04BF612C6CB63968E76693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
Manifest number:          131A
Signing time:             Mon 21 Oct 2024 14:01:00 +0000
Manifest this update:     Mon 21 Oct 2024 14:01:00 +0000
Manifest next update:     Tue 22 Oct 2024 14:01:00 +0000
Files and hashes:         1: OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl (hash: 7EK17AXItVbqQFYFfm5mpW3VWOUSDWSjWpXxEdrFOcQ=)
                          2: kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa (hash: MwxoHM3vEk3eb7cvcq7ElEp7kNipwz1Q047cRcbqBUI=)
                          3: lyTCERDgv679X47XBAMqB-8Ezmk.roa (hash: 4S1nWM1QowUDpbMkoufqHf+Vxw6dUug0Jrl3MyzQ4T4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:61:95:f6:2f:04:bf:61:2c:6c:b6:39:68:e7:66:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390d4b34493382383a2096ea9e0f9b7f94f33280
        Validity
            Not Before: Oct 21 14:01:00 2024 GMT
            Not After : Oct 22 14:01:00 2024 GMT
        Subject: CN=e228d661aba291af5909d35b1b77723c1b03056a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:3d:d7:ab:2a:19:85:da:dc:2a:76:22:3c:
                    eb:80:58:74:e6:18:d1:c5:ad:31:57:5d:a3:45:d9:
                    af:39:f5:04:40:64:a2:c4:e4:63:89:37:27:96:0c:
                    e5:3a:0f:50:f9:2c:52:1b:86:21:9e:06:ac:d0:f0:
                    60:f7:78:33:a1:c8:e6:0c:ac:51:f7:22:b3:73:55:
                    e3:bc:93:88:67:84:5e:93:5c:1f:67:a9:b5:03:b5:
                    41:e2:a1:c6:6b:ac:f4:ac:62:05:2c:71:34:40:98:
                    35:2b:ef:ef:b9:24:08:dd:2f:eb:cc:7a:83:e5:2b:
                    59:9b:ef:dd:a7:f2:4a:5b:1e:81:ce:20:e7:ef:d9:
                    53:30:d5:0a:82:3c:f0:38:ee:3f:0a:4f:f0:02:96:
                    41:c0:6c:6f:13:4f:40:a9:2d:b9:ec:8f:7d:d3:6c:
                    73:de:9d:a0:9a:ed:86:a7:75:95:95:2a:7d:22:5b:
                    9a:bb:a1:18:0e:c1:53:7a:18:70:cb:fa:90:f8:be:
                    a0:2f:27:1f:64:2f:ea:3f:ab:a1:55:3f:e5:7a:9e:
                    75:e7:20:ca:13:aa:6a:4c:76:42:e7:95:f0:14:f0:
                    9a:9c:e9:6a:30:44:bd:09:7a:75:3d:1b:d4:4f:92:
                    db:b2:f3:be:3d:8c:d8:e0:f1:4c:9d:9e:c6:97:1e:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:D6:61:AB:A2:91:AF:59:09:D3:5B:1B:77:72:3C:1B:03:05:6A
            X509v3 Authority Key Identifier:
                keyid:39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:42:15:86:59:68:02:39:b8:7b:cb:fe:5a:7b:d9:f0:5e:0d:
         15:b4:65:ef:e3:3e:5c:48:1c:34:ff:65:aa:3e:83:98:49:d9:
         75:83:66:7c:63:bf:9d:2f:f2:1d:da:4e:1c:fc:a0:d1:39:3e:
         44:84:d1:5c:7e:b2:b7:fa:25:d0:f1:cd:cd:be:b1:c5:aa:51:
         ff:3c:90:92:f6:75:61:e9:1d:06:2d:fa:02:91:8f:d1:f8:e7:
         55:ea:4e:04:69:15:22:63:f7:20:3e:7b:78:be:bd:05:ec:bf:
         02:bf:7f:fa:88:8d:36:8f:7a:99:98:a9:91:9a:7d:67:c8:d1:
         f1:cf:a0:35:b8:e1:3e:8b:aa:ae:4a:6b:3b:c6:e8:a6:2d:35:
         b9:00:ab:40:66:59:1a:af:51:48:69:65:91:32:cc:5f:de:a5:
         f6:a4:73:16:09:82:59:d5:b5:21:43:f3:38:f5:ff:29:a6:23:
         cb:82:66:8d:61:c3:4a:bd:fe:ea:11:e9:a9:53:79:d4:18:14:
         bc:41:04:8b:5b:c3:cd:26:4a:eb:79:8d:2c:98:e7:44:a1:f5:
         86:c3:e6:cc:29:43:e2:27:9f:75:e0:f2:b7:a1:45:1d:8a:b0:
         0a:d4:7e:39:46:ea:22:f7:0c:b0:55:97:86:ca:80:ea:8b:a7:
         c6:f9:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----