Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f8b356-4ec2-4b02-b4b1-808d21b247ff/1/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.mft
File:                     Mmj7F_AoNaHyW-6w6I-BpCdG-TE.mft (raw, json)
Hash identifier:          DiytScROflTEaeNf1FB2xM/4SWQ5rOrMIFA+REfOOho=
Subject key identifier:   C6:1A:DB:EE:91:91:0E:AB:8A:AC:A6:9B:92:C6:5C:F4:0F:0B:3B:D4
Authority key identifier: 32:68:FB:17:F0:28:35:A1:F2:5B:EE:B0:E8:8F:81:A4:27:46:F9:31
Certificate issuer:       /CN=3268fb17f02835a1f25beeb0e88f81a42746f931
Certificate serial:       018E6D56B9390E07E80A137FA9197DF1DBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f8b356-4ec2-4b02-b4b1-808d21b247ff/1/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.mft
Manifest number:          06AB
Signing time:             Sat 23 Mar 2024 22:03:03 +0000
Manifest this update:     Sat 23 Mar 2024 22:03:03 +0000
Manifest next update:     Sun 24 Mar 2024 22:03:03 +0000
Files and hashes:         1: Mmj7F_AoNaHyW-6w6I-BpCdG-TE.crl (hash: gq86u1IMxi1vuwe9sKBq4eheGdfPJpBDpISouLiypD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:6d:56:b9:39:0e:07:e8:0a:13:7f:a9:19:7d:f1:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3268fb17f02835a1f25beeb0e88f81a42746f931
        Validity
            Not Before: Mar 23 22:03:03 2024 GMT
            Not After : Mar 24 22:03:03 2024 GMT
        Subject: CN=c61adbee91910eab8aaca69b92c65cf40f0b3bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:3d:1e:bb:6e:98:e7:1d:ea:5d:3e:6f:c2:
                    a4:e5:68:ea:f4:6e:b7:fe:50:34:8f:ce:09:a6:f7:
                    e1:1d:86:33:dc:7c:00:e8:05:d4:c1:ec:9c:69:3c:
                    bd:f9:2f:aa:0f:cf:14:80:76:83:10:99:3f:69:5d:
                    f4:b5:d2:c1:e0:79:ac:4a:3f:57:c8:97:65:0d:bb:
                    85:ea:c2:ba:57:dd:8f:7e:63:40:20:07:c7:cc:ba:
                    79:06:8e:66:17:68:13:70:35:41:de:81:6d:e2:e3:
                    f3:39:17:48:7f:3f:8a:12:5b:2a:0e:3f:54:c1:a1:
                    ad:c3:43:7c:3a:f7:67:3f:3d:ad:6a:6c:93:e0:54:
                    2b:b2:83:ee:8d:d1:00:2b:67:64:c6:6a:e6:5f:64:
                    ab:5b:8c:84:cd:d1:84:f1:42:52:39:77:5b:e2:8f:
                    6e:6c:d5:7e:e5:76:2f:3f:7f:fb:40:5a:e5:45:d7:
                    b3:bb:90:3a:45:f7:23:c0:eb:7c:3e:da:cd:ec:5c:
                    77:2c:90:17:bd:98:c9:77:41:d4:be:d4:6b:6d:5c:
                    52:7c:f5:40:ee:46:ef:10:aa:f8:a9:77:71:89:d1:
                    92:49:f1:63:62:e1:1d:b1:14:c6:8f:2b:c1:b9:b6:
                    79:18:d5:8b:01:67:f9:2f:c2:4d:51:cb:2f:e9:1d:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:DB:EE:91:91:0E:AB:8A:AC:A6:9B:92:C6:5C:F4:0F:0B:3B:D4
            X509v3 Authority Key Identifier:
                keyid:32:68:FB:17:F0:28:35:A1:F2:5B:EE:B0:E8:8F:81:A4:27:46:F9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f8b356-4ec2-4b02-b4b1-808d21b247ff/1/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f8b356-4ec2-4b02-b4b1-808d21b247ff/1/Mmj7F_AoNaHyW-6w6I-BpCdG-TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:35:7e:00:61:60:0f:4d:9e:a1:8f:4d:d2:ef:d0:25:59:
         5e:ff:cc:a9:1a:f6:87:20:c6:3c:43:e5:d8:e2:4b:eb:c8:e0:
         72:2b:46:10:e3:8b:01:f8:8d:79:83:75:fe:02:c0:b7:85:5c:
         04:f6:e8:30:9f:ca:66:f6:49:15:69:d9:b4:2a:58:c3:38:d2:
         be:08:d2:00:b7:fe:4d:5c:f4:6c:8a:4b:e9:04:c1:3b:37:84:
         a8:85:d6:73:06:c1:57:6d:cd:eb:6b:26:de:81:3d:98:be:75:
         22:c0:3c:51:74:3a:e0:4d:fe:63:71:8b:d5:14:7f:03:d5:d1:
         2d:e2:d6:79:fb:d6:11:72:80:4f:81:c7:e7:63:23:36:cd:e3:
         ea:aa:8a:07:48:86:87:d1:48:79:a7:19:f6:db:0e:32:dd:14:
         cb:f9:5e:73:38:a2:ba:94:93:a6:18:2c:27:51:19:f1:22:85:
         60:ee:4c:f3:78:bf:e5:46:20:12:4b:84:30:38:c1:43:6e:97:
         fd:fe:b5:5e:14:e4:55:bc:12:06:1f:c1:57:dd:b3:26:a7:8a:
         e1:97:1b:19:73:74:dd:0a:87:fc:ff:20:83:da:21:fc:05:33:
         af:96:91:d7:6e:c6:9a:91:a0:49:c2:6b:e3:0c:56:9d:28:4c:
         d9:31:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----