Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1930c0-c45d-438a-8f6c-cd6d8b247f4f/1/ilfWIG81uH_lh85o0Oe7R213Vg8.mft
File:                     ilfWIG81uH_lh85o0Oe7R213Vg8.mft (raw, json)
Hash identifier:          TV07B+sIZ/7P2yhNIcHkPfv5FkzwJNkMo2CaJ6tWVZM=
Subject key identifier:   FE:FB:06:6D:DD:65:71:95:D2:08:7D:A6:21:18:85:55:E5:A8:DE:EC
Authority key identifier: 8A:57:D6:20:6F:35:B8:7F:E5:87:CE:68:D0:E7:BB:47:6D:77:56:0F
Certificate issuer:       /CN=8a57d6206f35b87fe587ce68d0e7bb476d77560f
Certificate serial:       018FFFE0B13C614EC082EA31A7AD12C85994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilfWIG81uH_lh85o0Oe7R213Vg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1930c0-c45d-438a-8f6c-cd6d8b247f4f/1/ilfWIG81uH_lh85o0Oe7R213Vg8.mft
Manifest number:          062C
Signing time:             Mon 10 Jun 2024 02:01:06 +0000
Manifest this update:     Mon 10 Jun 2024 02:01:06 +0000
Manifest next update:     Tue 11 Jun 2024 02:01:06 +0000
Files and hashes:         1: ilfWIG81uH_lh85o0Oe7R213Vg8.crl (hash: Rqz2WE9yMh9bb2I5/h+Y7NbZIXyOUei0VfecnwlWgQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ff:e0:b1:3c:61:4e:c0:82:ea:31:a7:ad:12:c8:59:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57d6206f35b87fe587ce68d0e7bb476d77560f
        Validity
            Not Before: Jun 10 02:01:06 2024 GMT
            Not After : Jun 11 02:01:06 2024 GMT
        Subject: CN=fefb066ddd657195d2087da621188555e5a8deec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:dd:ba:d9:71:9f:35:e7:d8:70:e9:2e:71:
                    3b:0e:73:8f:3c:e2:e9:b8:87:65:c8:46:b3:3f:2f:
                    8e:1f:0c:82:7a:42:f2:d1:3a:52:8b:fe:a2:01:a0:
                    ec:6b:2d:d8:2b:36:b2:8b:b5:b0:42:e7:c0:90:7e:
                    42:70:4e:47:4f:9c:d7:9d:8a:ee:08:bb:02:27:83:
                    32:52:f5:61:cf:61:0b:ff:73:ad:3a:75:68:89:4f:
                    a0:b8:8c:ab:41:62:66:da:4f:02:6e:06:08:b9:b0:
                    4c:8e:44:42:ee:1b:37:b7:b6:a6:44:e8:7a:f8:75:
                    d8:dc:d0:2f:07:41:5a:2f:9f:e9:54:db:4b:8e:83:
                    c6:2f:f4:a2:aa:ab:b5:ae:fe:33:89:bf:bf:d7:36:
                    82:29:9b:ba:79:a3:f3:37:df:69:79:b3:35:76:c7:
                    d1:46:d0:0c:09:d5:e2:8d:ec:27:b0:7b:15:74:78:
                    7c:3a:bc:ea:ff:50:aa:ad:d7:08:ca:e4:ac:09:a4:
                    b8:78:b5:00:52:36:cc:07:da:4e:65:b9:c1:db:bd:
                    1b:9a:81:ce:d6:87:f1:4f:74:3e:39:96:91:f3:88:
                    fc:5b:a7:a1:71:05:71:f7:f3:3d:ef:ad:91:3c:db:
                    81:66:f2:05:77:97:2f:b0:b3:8a:f4:33:0c:4e:82:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:06:6D:DD:65:71:95:D2:08:7D:A6:21:18:85:55:E5:A8:DE:EC
            X509v3 Authority Key Identifier:
                keyid:8A:57:D6:20:6F:35:B8:7F:E5:87:CE:68:D0:E7:BB:47:6D:77:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilfWIG81uH_lh85o0Oe7R213Vg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1930c0-c45d-438a-8f6c-cd6d8b247f4f/1/ilfWIG81uH_lh85o0Oe7R213Vg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1930c0-c45d-438a-8f6c-cd6d8b247f4f/1/ilfWIG81uH_lh85o0Oe7R213Vg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:1b:05:41:b3:c4:26:44:43:b6:a5:91:96:f5:0a:71:4b:
         69:09:e4:74:11:4f:f9:4c:73:3c:14:68:c5:e6:96:52:7d:80:
         52:1a:9f:9e:92:6e:63:22:5c:19:65:e7:dd:83:4c:1d:3b:a5:
         fe:1f:8d:18:27:0d:49:b5:bf:c2:1c:22:9f:95:cb:0e:8a:5a:
         a0:e6:a3:96:dc:14:04:8a:63:ae:55:90:32:ba:63:bd:1f:74:
         51:1c:63:85:ff:b9:7a:90:da:6c:41:57:0b:6e:8a:9e:aa:ed:
         73:56:32:e4:82:15:c5:4c:14:a7:99:49:2f:5a:2b:7b:b9:73:
         7b:f9:b8:00:7d:e7:d3:e4:09:fd:f1:99:ff:8c:73:63:0d:9d:
         0f:66:9e:cd:dd:07:70:55:1a:8a:e8:64:68:2c:7e:b7:db:75:
         98:b6:19:67:ab:0f:d1:bc:a3:e7:63:a1:c3:ab:46:08:98:f7:
         ae:d8:99:8f:97:19:b1:bc:e9:00:c5:bf:74:a9:20:a4:b1:55:
         64:2a:5a:77:35:87:4d:df:16:15:ee:82:80:fa:7d:9f:01:40:
         9c:df:43:31:aa:1f:8b:3a:f7:be:ba:2f:db:90:11:54:4b:a5:
         18:9b:11:9e:c3:9f:99:a4:d5:c6:ce:18:07:c5:7a:86:87:76:
         d7:5c:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----