Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
File:                     QJVm2b91OLcBz1bzqFyZUrvHQaY.mft (raw, json)
Hash identifier:          RCRu+otAJTmjgifkXfpHSayHZn4LVsT6LUZbCRZGU5k=
Subject key identifier:   BE:F9:D3:D8:0E:95:F1:67:E0:B9:54:D5:01:25:FD:52:5F:CC:BE:7A
Authority key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Certificate issuer:       /CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Certificate serial:       01932ED6C7623CB26CBF913D5F1343A1360C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
Manifest number:          0571
Signing time:             Fri 15 Nov 2024 08:00:47 +0000
Manifest this update:     Fri 15 Nov 2024 08:00:47 +0000
Manifest next update:     Sat 16 Nov 2024 08:00:47 +0000
Files and hashes:         1: FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa (hash: DJxFJRuAFOSA41xK5vCLKgFu0Dy9jhdcYa2OYdAi0s0=)
                          2: QJVm2b91OLcBz1bzqFyZUrvHQaY.crl (hash: LH2swhQrAUJA42e2aVQK938y8ejrKBtcM/gtcNRWe5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2e:d6:c7:62:3c:b2:6c:bf:91:3d:5f:13:43:a1:36:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
        Validity
            Not Before: Nov 15 08:00:47 2024 GMT
            Not After : Nov 16 08:00:47 2024 GMT
        Subject: CN=bef9d3d80e95f167e0b954d50125fd525fccbe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:7b:62:bf:65:f1:85:34:c4:fa:d4:cf:77:
                    07:2d:cd:de:0b:8a:db:e0:04:00:db:74:f5:3e:d5:
                    9d:a4:da:48:f3:b6:72:89:58:2a:bd:5c:86:eb:2a:
                    7a:cf:88:df:01:05:0b:1c:0e:40:bc:06:3b:47:6a:
                    10:c6:2a:cd:89:0b:37:2f:b2:bc:41:3c:40:bc:39:
                    58:e4:5c:76:ba:75:d0:8f:91:41:cb:ab:c3:d9:db:
                    8e:83:32:4b:d1:8f:64:fc:8f:b2:4f:c4:39:19:9d:
                    a9:c0:0f:ee:5f:03:0a:b3:46:68:7c:b7:c5:a8:3b:
                    94:d7:1d:f8:11:d1:bf:10:2d:72:01:f9:ae:76:43:
                    a5:f3:86:98:20:91:53:7a:35:ec:02:cf:8a:6c:24:
                    9c:83:7b:52:c0:80:b5:a7:ae:f8:98:5f:b3:62:eb:
                    bf:86:7a:05:b0:26:26:9a:4a:6a:5e:2f:ec:ab:61:
                    67:0d:a6:a6:40:d4:83:d3:90:63:7e:d6:f5:ae:a2:
                    4d:ff:a5:e4:00:29:cd:3e:d1:81:a9:38:54:63:37:
                    23:2a:0e:e4:34:12:4d:23:b3:42:97:66:73:1d:7d:
                    da:df:7d:ba:ce:06:96:90:3f:32:55:89:2d:48:75:
                    6a:5c:54:5a:0f:25:d9:7d:19:fc:f8:78:e3:37:60:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:D3:D8:0E:95:F1:67:E0:B9:54:D5:01:25:FD:52:5F:CC:BE:7A
            X509v3 Authority Key Identifier:
                keyid:40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:22:9d:5c:02:37:0e:ed:07:d0:d7:6d:6b:d6:93:46:56:
         c1:0d:ae:8c:ad:e7:49:82:c9:33:9c:55:51:20:17:d2:97:e3:
         f2:b6:25:72:04:5e:56:96:33:63:cc:07:53:80:b9:9e:e3:3f:
         60:b0:a5:2e:3f:f8:c7:3d:a4:ce:3c:1f:c9:87:1b:73:e1:df:
         1a:02:92:28:f7:9a:16:97:41:1a:c5:8e:d9:75:3d:20:9a:a8:
         fa:e0:f3:b4:0b:d0:ee:0f:29:44:63:c4:63:95:4b:e2:b4:47:
         e7:3f:bd:e9:9f:dd:6d:d1:94:ed:4d:18:1b:43:72:8c:37:4e:
         55:7b:f9:7a:e8:e4:b9:5f:5d:24:ba:08:69:7e:ba:15:23:95:
         ba:87:75:c5:f1:af:0f:70:34:96:8a:8b:23:d4:a7:0b:2d:0f:
         e8:40:72:c0:bd:33:67:13:98:ef:8f:48:09:73:1d:00:02:64:
         c2:7e:94:66:b7:4b:87:82:50:7e:c0:6a:11:a5:12:79:0d:a0:
         a4:39:94:f3:c7:b8:c4:7f:7c:2e:1f:0b:11:fc:69:fb:10:f5:
         ae:28:71:5a:0b:7c:48:30:56:8d:c8:b2:11:cf:8a:d6:6d:47:
         2a:69:5d:e9:7d:9d:df:95:5a:f5:69:e5:74:d2:b4:11:10:84:
         1e:cd:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----