Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
File:                     gMGC8Jzf20wXzTGwpYkaidYTx_w.mft (raw, json)
Hash identifier:          cNO9F8Dsg5qviKHF69Cz017i0qtAYPqR/BJD/gvbDUY=
Subject key identifier:   DF:45:91:99:63:C7:A7:EA:5F:DE:F7:AA:0B:27:CB:A5:1F:DE:80:7C
Authority key identifier: 80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
Certificate issuer:       /CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
Certificate serial:       0192407225AC283F2CC356740FA32A48A064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
Manifest number:          0453
Signing time:             Mon 30 Sep 2024 01:01:15 +0000
Manifest this update:     Mon 30 Sep 2024 01:01:15 +0000
Manifest next update:     Tue 01 Oct 2024 01:01:15 +0000
Files and hashes:         1: gMGC8Jzf20wXzTGwpYkaidYTx_w.crl (hash: 9kUYTEBJ3ZLTh8wgGI3CQUSA+bayDQ8UzD079dNa9J0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:40:72:25:ac:28:3f:2c:c3:56:74:0f:a3:2a:48:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
        Validity
            Not Before: Sep 30 01:01:15 2024 GMT
            Not After : Oct  1 01:01:15 2024 GMT
        Subject: CN=df45919963c7a7ea5fdef7aa0b27cba51fde807c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:23:69:33:d2:51:7c:a5:8e:99:fc:8a:40:
                    36:a0:f5:6d:df:de:60:4a:51:e8:ab:23:40:0c:48:
                    e5:09:1a:15:87:1b:0b:0d:48:cc:77:5b:b9:26:a1:
                    ef:1a:cc:63:52:9d:a7:db:61:50:2c:7a:20:cb:76:
                    9a:42:9e:59:9a:cf:97:81:3f:9e:b9:a6:4a:e7:6c:
                    04:73:b0:a0:4f:7b:a1:8e:5e:91:24:1a:8c:ff:bd:
                    b1:3a:28:c4:64:13:29:e0:f0:e7:80:04:f6:0c:5c:
                    6e:ab:5a:1a:11:ec:0a:da:32:16:42:ac:b8:21:7a:
                    ff:52:f6:9d:cf:80:97:a3:e3:0e:92:2b:0c:9e:56:
                    1b:68:23:59:1a:89:76:ba:d1:05:5e:3c:5d:29:e5:
                    60:b3:7d:96:c1:23:db:60:35:f4:fb:fd:de:51:ea:
                    71:15:4e:e7:2f:dd:a6:c4:54:58:6d:0f:e5:f2:c9:
                    cb:ee:0d:59:f2:8a:92:4f:89:b2:66:a7:39:82:7f:
                    87:f3:b9:ab:75:7c:9d:38:5a:05:72:71:d5:8a:08:
                    ef:52:24:06:8a:43:ae:f7:ad:ae:de:e4:c2:8d:0b:
                    a4:b4:7c:33:db:12:ff:32:50:02:f7:ae:9a:f7:d0:
                    dd:c1:10:5e:0f:1e:86:1a:cf:b1:1e:ce:5a:22:7b:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:91:99:63:C7:A7:EA:5F:DE:F7:AA:0B:27:CB:A5:1F:DE:80:7C
            X509v3 Authority Key Identifier:
                keyid:80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:6c:ec:65:a4:e3:96:54:6c:fb:e8:aa:35:d5:10:27:9c:
         bb:15:77:95:c3:3d:55:07:ec:02:a6:4b:9e:5a:ef:df:2a:c7:
         e9:d4:9d:10:29:62:a6:8e:eb:19:31:31:07:97:5c:5f:e5:d5:
         48:61:7c:9a:9a:74:fb:01:7e:4e:7e:1c:14:14:23:73:e0:41:
         2b:3b:56:fc:f8:8c:ec:2e:5c:b1:8a:f6:21:87:94:20:02:3d:
         d7:16:cb:14:09:e7:df:bb:53:2a:df:f0:a1:6a:79:72:a3:c8:
         a0:9a:2d:1d:94:56:4b:b7:cb:a7:f6:3a:f9:15:00:a8:55:cd:
         a5:8a:95:c5:60:d0:c4:d3:74:2b:88:95:5d:67:92:a7:57:fc:
         d3:d1:0c:26:4e:a9:d8:4f:cd:5d:45:69:33:25:26:1a:0c:3a:
         45:d5:7c:85:1d:2f:16:d2:0b:3d:69:92:29:ea:52:78:7c:e6:
         d6:17:12:a3:af:13:a4:80:26:f8:61:34:de:e5:2a:38:0b:c4:
         fa:1b:a7:f9:46:8e:0b:f7:67:a1:a1:d2:2e:be:34:e6:a1:62:
         0b:05:fd:10:ba:ed:37:cf:16:6f:2c:de:68:bb:ad:73:aa:6c:
         7b:ae:4e:b3:b9:3e:c3:9c:2f:97:34:ea:63:89:5b:26:34:c3:
         9a:b4:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----