Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5d22fb-1ee3-4586-9983-2ca74e522f76/1/TxyEQ0lmqveiXyPOzSCxusEFDJU.mft
File:                     TxyEQ0lmqveiXyPOzSCxusEFDJU.mft (raw, json)
Hash identifier:          zgn4S2UJISaLvgH08HC7jP2u/uD1JPCB0eFbiLDJmTI=
Subject key identifier:   94:D7:A3:F6:E0:ED:7C:C9:A0:38:87:09:8B:C2:14:72:A0:5B:C2:97
Authority key identifier: 4F:1C:84:43:49:66:AA:F7:A2:5F:23:CE:CD:20:B1:BA:C1:05:0C:95
Certificate issuer:       /CN=4f1c84434966aaf7a25f23cecd20b1bac1050c95
Certificate serial:       018FBEA569CCF93DA004A0D68FBF7376E51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxyEQ0lmqveiXyPOzSCxusEFDJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5d22fb-1ee3-4586-9983-2ca74e522f76/1/TxyEQ0lmqveiXyPOzSCxusEFDJU.mft
Manifest number:          0F7E
Signing time:             Tue 28 May 2024 10:01:02 +0000
Manifest this update:     Tue 28 May 2024 10:01:02 +0000
Manifest next update:     Wed 29 May 2024 10:01:02 +0000
Files and hashes:         1: TxyEQ0lmqveiXyPOzSCxusEFDJU.crl (hash: X4AnHowEwSxngVJN4rLqKziQnf5F27aL7xVqi7pAW7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:be:a5:69:cc:f9:3d:a0:04:a0:d6:8f:bf:73:76:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1c84434966aaf7a25f23cecd20b1bac1050c95
        Validity
            Not Before: May 28 10:01:02 2024 GMT
            Not After : May 29 10:01:02 2024 GMT
        Subject: CN=94d7a3f6e0ed7cc9a03887098bc21472a05bc297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:7c:86:c9:98:1e:e2:4f:37:f3:58:af:25:
                    e3:7f:ee:28:ce:d9:f6:80:85:c9:c4:8b:04:95:f6:
                    9b:cd:7f:e2:1e:ec:3c:f0:26:26:bf:73:e9:0f:ea:
                    50:26:8f:4e:e6:fe:a9:8c:7a:a6:ae:c6:68:c1:bb:
                    3e:42:ba:1c:cc:6b:34:6b:cc:a1:cf:82:7c:78:69:
                    2d:99:05:fe:d0:f4:14:09:24:94:b1:f7:ac:a3:9b:
                    32:a1:be:59:1a:1f:66:15:75:2f:1c:e1:ec:79:4f:
                    63:67:4f:bc:04:6e:d7:5c:2f:f9:3d:80:33:be:d8:
                    94:a3:0e:38:ff:1d:82:2d:19:f9:eb:11:4c:00:5d:
                    c3:3c:d4:8a:7f:79:17:f5:f6:5e:9e:8a:fd:d1:e7:
                    a9:3a:50:d3:98:1f:d1:54:f7:94:c6:95:71:c1:10:
                    34:25:ce:08:45:41:6c:52:69:bd:6a:32:e9:ae:06:
                    6a:15:d0:0d:4d:2f:82:42:c2:0a:3a:43:85:b4:38:
                    f8:b5:a5:1c:3e:74:f0:a0:a1:64:fe:1f:1c:90:6d:
                    4c:ee:4f:7f:0d:7f:1e:da:98:fc:ec:2c:c8:32:65:
                    dc:51:f9:5f:67:d4:20:c2:22:c6:88:32:7d:f4:5e:
                    02:97:b7:67:85:71:23:80:2e:7d:72:06:57:61:a0:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:A3:F6:E0:ED:7C:C9:A0:38:87:09:8B:C2:14:72:A0:5B:C2:97
            X509v3 Authority Key Identifier:
                keyid:4F:1C:84:43:49:66:AA:F7:A2:5F:23:CE:CD:20:B1:BA:C1:05:0C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxyEQ0lmqveiXyPOzSCxusEFDJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5d22fb-1ee3-4586-9983-2ca74e522f76/1/TxyEQ0lmqveiXyPOzSCxusEFDJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5d22fb-1ee3-4586-9983-2ca74e522f76/1/TxyEQ0lmqveiXyPOzSCxusEFDJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:40:72:7e:e7:4c:12:08:6d:80:29:96:90:1b:bf:5d:f3:
         a8:71:f9:c6:c0:b3:b8:70:4f:a5:e5:0c:bd:df:bd:e6:bf:bd:
         b7:cb:55:a8:ae:04:a8:af:89:43:99:81:8c:36:a9:44:5a:0a:
         2c:ec:d1:2a:73:e1:7c:2d:9e:04:5f:15:1d:73:34:05:5a:69:
         02:2e:32:25:30:0e:64:28:ad:88:8d:48:a1:36:76:d9:0b:95:
         6d:15:13:fa:d1:5f:7e:aa:ca:eb:b6:45:66:72:e2:26:8d:4c:
         6f:7c:dd:79:3b:86:95:8a:d5:af:45:4a:7f:56:07:5b:65:11:
         22:5c:f1:61:ac:60:13:aa:a5:fd:7b:19:16:40:ac:e3:a1:3f:
         b6:83:a3:f3:b2:ae:74:c7:42:05:1e:c4:0f:14:4a:8b:fb:05:
         38:22:01:94:26:66:b4:72:c0:5b:f5:2c:31:93:5f:60:2c:79:
         c3:ba:95:ce:61:0f:11:07:56:c4:8e:50:e1:18:1d:02:f0:a8:
         38:01:2c:d8:7c:94:be:66:59:88:92:f8:8c:77:5b:92:09:4c:
         5d:5a:58:92:b7:e6:0c:99:43:18:89:5e:b7:61:39:14:27:9b:
         09:84:d9:b9:b5:8d:34:7f:8b:8b:65:78:70:df:ca:1e:3a:77:
         25:de:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----