Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ce53e0-6ef3-4ce8-a9fe-c6ec12825051/1/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.mft
File:                     1-8ccfPr4iLZwOwshKlRpzjIMK3Q.mft (raw, json)
Hash identifier:          M95V0iPlhaLGWUZiC1Z7NrMUxhBIdb0KpgWZ9vMHPbY=
Subject key identifier:   C2:FC:14:41:21:A8:6A:1D:1A:29:AB:4F:FB:49:D9:7E:66:FF:84:F1
Authority key identifier: FB:C7:1C:7C:FA:F8:88:B6:70:3B:0B:21:2A:54:69:CE:32:0C:2B:74
Certificate issuer:       /CN=fbc71c7cfaf888b6703b0b212a5469ce320c2b74
Certificate serial:       018F84473F97A420337B86A27F987E820FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ce53e0-6ef3-4ce8-a9fe-c6ec12825051/1/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.mft
Manifest number:          70
Signing time:             Fri 17 May 2024 02:00:12 +0000
Manifest this update:     Fri 17 May 2024 02:00:12 +0000
Manifest next update:     Sat 18 May 2024 02:00:12 +0000
Files and hashes:         1: 1-8ccfPr4iLZwOwshKlRpzjIMK3Q.crl (hash: kIS31ICnjVhEwWrTpevcOJGzm0TTtsfg0BOkBqRs07w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:3f:97:a4:20:33:7b:86:a2:7f:98:7e:82:0f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbc71c7cfaf888b6703b0b212a5469ce320c2b74
        Validity
            Not Before: May 17 02:00:12 2024 GMT
            Not After : May 18 02:00:12 2024 GMT
        Subject: CN=c2fc144121a86a1d1a29ab4ffb49d97e66ff84f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:d9:cc:3d:0e:fa:9e:e1:8a:80:3b:f7:8b:
                    fa:31:dc:2d:bb:1d:e4:15:ca:fd:c2:9a:1c:e3:96:
                    a1:6d:7d:c5:80:a6:bc:b6:c9:f1:c6:1f:2c:4d:6a:
                    65:f3:5f:8c:d5:df:49:b2:b3:fc:fc:8d:38:29:2f:
                    e3:70:3c:bf:eb:79:94:ba:07:68:7e:a4:e3:d1:0c:
                    a3:91:37:78:52:cd:1d:b6:2f:a8:a1:6b:c7:44:1a:
                    e2:62:85:27:b6:30:06:ff:40:76:91:ca:0d:2d:24:
                    79:76:13:a5:86:1d:d8:f1:09:08:33:6b:65:69:22:
                    88:1d:34:1a:bd:ce:cf:8a:82:ce:10:5a:7b:13:e1:
                    cb:bd:f2:82:ce:62:dd:d8:3a:ad:e5:15:0e:8e:78:
                    37:f3:97:bf:44:6c:9d:32:64:4c:b7:3d:a7:3a:52:
                    4c:19:0d:b5:a0:56:14:ac:ad:cb:0e:65:a6:f2:6f:
                    da:dd:eb:c2:2e:c2:10:b1:38:e3:ef:b5:e3:6a:cb:
                    dd:67:17:93:4e:52:65:82:3a:12:4a:7f:11:dc:ef:
                    2e:7c:c2:7f:5d:ff:c2:4e:1f:15:85:6b:fe:e0:2d:
                    8b:eb:b8:a2:70:8f:03:2b:7d:82:c6:d3:69:2c:30:
                    94:3c:10:9c:01:9b:51:7b:5e:5c:50:70:d2:a3:ff:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:14:41:21:A8:6A:1D:1A:29:AB:4F:FB:49:D9:7E:66:FF:84:F1
            X509v3 Authority Key Identifier:
                keyid:FB:C7:1C:7C:FA:F8:88:B6:70:3B:0B:21:2A:54:69:CE:32:0C:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ce53e0-6ef3-4ce8-a9fe-c6ec12825051/1/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ce53e0-6ef3-4ce8-a9fe-c6ec12825051/1/1-8ccfPr4iLZwOwshKlRpzjIMK3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:01:8d:a6:79:31:a0:d4:90:dd:14:b9:de:c8:2e:fa:c0:
         6e:ef:71:e0:1a:eb:b5:f8:3e:c9:ec:61:00:62:1f:c6:40:ab:
         79:21:29:db:2f:fe:c7:69:04:c8:6a:f7:b2:49:b5:29:6a:ee:
         89:64:0a:1c:9d:ea:ca:ba:1d:d6:76:80:93:11:bf:36:fa:8d:
         a5:ef:04:e1:5e:a3:a1:f3:c3:d3:88:f7:bf:fd:9a:9b:6f:b0:
         d4:71:33:60:ca:62:5a:a2:92:36:5e:ef:97:9e:c0:ee:b7:0f:
         87:3a:ff:19:48:f9:d2:df:7d:6e:e8:96:96:97:2e:dc:57:f5:
         ba:1e:42:f2:5f:aa:dc:c6:16:29:05:41:62:e8:c1:f9:0c:e5:
         54:94:ca:fa:0b:91:4c:3c:b3:0c:dd:dc:e0:b0:5c:c4:79:b7:
         3e:d3:a9:13:75:bf:cf:d9:c0:23:39:cd:47:f3:38:8e:9d:56:
         9f:b9:36:43:31:6d:94:da:85:c5:01:39:ba:1d:83:17:07:d5:
         61:ce:8a:82:c5:80:26:a9:3e:fa:26:7c:51:ec:00:e5:f0:49:
         83:58:55:24:2e:a9:9f:bc:c3:da:4e:28:da:d9:99:3b:9f:ea:
         38:51:73:56:d6:39:01:9f:60:7f:88:ab:eb:a0:a0:08:3b:0c:
         11:97:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----