Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.mft
File:                     SO9rxgUngfH9WQOXeIA1fSYOrXo.mft (raw, json)
Hash identifier:          Lz8leeybvrhPQHGhyaI1olQCTgOBkpNvpMICJgHpRCw=
Subject key identifier:   EF:5B:C4:3E:73:00:A6:EA:C6:FF:AB:BC:29:D3:53:0B:4F:23:97:77
Authority key identifier: 48:EF:6B:C6:05:27:81:F1:FD:59:03:97:78:80:35:7D:26:0E:AD:7A
Certificate issuer:       /CN=48ef6bc6052781f1fd5903977880357d260ead7a
Certificate serial:       018F99182972692FB012999B0098EB239C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SO9rxgUngfH9WQOXeIA1fSYOrXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.mft
Manifest number:          04AE
Signing time:             Tue 21 May 2024 03:00:48 +0000
Manifest this update:     Tue 21 May 2024 03:00:48 +0000
Manifest next update:     Wed 22 May 2024 03:00:48 +0000
Files and hashes:         1: SO9rxgUngfH9WQOXeIA1fSYOrXo.crl (hash: VbakimSUo1UTGWwp+GzQHnxf9kxX4bZGlDkLbmrd2YA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:18:29:72:69:2f:b0:12:99:9b:00:98:eb:23:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ef6bc6052781f1fd5903977880357d260ead7a
        Validity
            Not Before: May 21 03:00:48 2024 GMT
            Not After : May 22 03:00:48 2024 GMT
        Subject: CN=ef5bc43e7300a6eac6ffabbc29d3530b4f239777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:f1:e8:bd:22:59:09:7c:c1:eb:92:b5:49:
                    75:ed:5d:21:aa:66:26:98:fe:b8:b7:7c:1d:5d:73:
                    cb:90:f6:45:a2:f4:b2:65:ed:ef:f3:55:d2:eb:ed:
                    63:51:08:30:b2:e2:6e:26:ef:93:31:44:22:dd:10:
                    ce:16:05:18:83:ad:9c:94:c9:95:0a:c5:50:d8:24:
                    6b:71:33:96:14:51:dc:97:75:96:a0:2f:af:b2:ad:
                    27:fc:9b:af:2e:00:98:80:6d:41:70:34:ed:5b:85:
                    d8:5f:3e:e9:ee:29:ff:92:46:c8:2d:99:c5:46:92:
                    3f:e5:05:a3:01:95:49:34:d1:0e:aa:d8:f2:65:55:
                    1f:ec:ef:16:12:bf:b9:c6:93:cf:36:32:e6:bc:9d:
                    01:23:4d:b7:55:ca:a1:e1:ee:e2:51:71:79:36:a4:
                    c5:e5:30:b6:24:30:de:72:b3:69:2b:61:d1:e1:c0:
                    f5:91:7b:73:2e:cf:e8:f2:59:1b:86:c2:15:32:0a:
                    92:08:f8:ba:05:48:da:0b:8c:a3:af:28:3b:90:16:
                    6e:10:f9:7f:aa:88:8a:cb:c6:5c:cd:1c:43:59:b9:
                    f8:31:05:81:43:83:d6:81:35:f5:26:ff:d3:1f:d0:
                    4d:c9:a7:94:6d:4f:ca:ab:85:fc:e7:17:33:4c:4b:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:C4:3E:73:00:A6:EA:C6:FF:AB:BC:29:D3:53:0B:4F:23:97:77
            X509v3 Authority Key Identifier:
                keyid:48:EF:6B:C6:05:27:81:F1:FD:59:03:97:78:80:35:7D:26:0E:AD:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO9rxgUngfH9WQOXeIA1fSYOrXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:02:15:30:30:2f:cd:41:d2:ed:1f:21:d0:98:b8:a6:8d:
         46:14:15:e9:8a:1c:1f:c6:34:fd:16:b0:c6:8d:4f:d8:f3:55:
         75:de:e1:e4:cc:1d:c1:86:51:34:f9:f1:a5:95:eb:b9:aa:30:
         54:64:f6:3d:4e:26:1b:16:a4:25:42:96:89:be:b5:ca:04:bc:
         39:9b:b9:eb:1e:27:ee:2d:d9:3a:cc:12:c8:0a:b6:a2:9b:20:
         1f:f3:bb:ac:85:28:ee:de:30:5f:d8:1f:67:88:1a:0b:3e:bf:
         02:8e:e0:da:5c:6b:b7:ed:83:fb:a1:64:23:1d:8e:e5:3c:a3:
         f5:d8:a7:8a:83:f7:e4:8f:3b:86:f8:67:38:94:7a:0a:a1:51:
         c6:a8:4c:56:e3:11:53:eb:c0:40:21:ca:4d:ed:b8:83:16:c3:
         27:ec:2e:8c:30:df:18:d0:1a:d5:24:64:b4:17:47:bf:13:2d:
         03:b4:62:a3:bd:20:b0:d1:f1:18:53:26:a1:c7:7c:d8:e1:75:
         c7:3e:01:28:a5:4e:ff:00:be:58:9f:22:4d:5f:b3:e2:87:92:
         42:17:c9:b8:38:5f:d2:56:29:d9:cc:bb:0b:8a:e1:02:f4:ea:
         cf:de:74:0d:c8:b7:44:e1:c3:0e:09:fa:5a:9f:d5:b0:c1:12:
         86:6c:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----