Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/21044b-191b-40f4-a1e7-24e463f840d1/1/xAHY5L67PUyIJTdhGFnBYs8M9Tk.mft
File:                     xAHY5L67PUyIJTdhGFnBYs8M9Tk.mft (raw, json)
Hash identifier:          ZUFePeWn9fNz0UNCwxVeXoZwCo0+k78qlBtFnfr068I=
Subject key identifier:   CC:A4:FF:2A:49:10:61:1C:4C:63:4F:E3:C5:93:15:A2:B4:65:D5:C4
Authority key identifier: C4:01:D8:E4:BE:BB:3D:4C:88:25:37:61:18:59:C1:62:CF:0C:F5:39
Certificate issuer:       /CN=c401d8e4bebb3d4c882537611859c162cf0cf539
Certificate serial:       0192D5C9EBE41A5F87AE58CEAF7061A222E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAHY5L67PUyIJTdhGFnBYs8M9Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/21044b-191b-40f4-a1e7-24e463f840d1/1/xAHY5L67PUyIJTdhGFnBYs8M9Tk.mft
Manifest number:          02
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
Manifest this update:     Tue 29 Oct 2024 01:00:32 +0000
Manifest next update:     Wed 30 Oct 2024 01:00:32 +0000
Files and hashes:         1: xAHY5L67PUyIJTdhGFnBYs8M9Tk.crl (hash: r9boGdk7w8Gp6ZBUoFc/x92N8EPOGD71GGzZrSX1Ilg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d5:c9:eb:e4:1a:5f:87:ae:58:ce:af:70:61:a2:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c401d8e4bebb3d4c882537611859c162cf0cf539
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Oct 30 01:00:32 2024 GMT
        Subject: CN=cca4ff2a4910611c4c634fe3c59315a2b465d5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:3d:76:cf:cf:35:31:82:ea:c1:ee:88:bd:
                    7e:b9:0c:39:47:3b:51:23:7a:64:9b:86:c7:c5:61:
                    49:60:5e:57:dd:19:4b:bd:c9:91:b3:ca:3d:73:9d:
                    72:02:0f:b1:73:d0:b2:57:52:51:21:d3:82:3c:b9:
                    25:67:20:6f:fd:22:b1:83:31:7c:03:5c:4d:a5:6b:
                    83:38:e8:a3:99:49:dd:94:e4:0b:97:b1:9b:bc:e3:
                    e6:4b:a0:26:fe:e1:54:34:2c:21:06:5c:1e:1f:c0:
                    3f:a7:99:70:1d:5d:a0:db:48:6a:c5:e1:e2:33:c7:
                    92:01:f2:e5:5e:ab:09:bc:1b:4b:cc:22:b9:52:41:
                    77:c9:24:f0:e8:fc:72:92:20:e4:83:53:11:f9:34:
                    69:df:1b:9f:68:89:b8:d8:3b:49:37:ab:f0:36:09:
                    ec:dd:2b:12:69:bf:5e:38:3e:ed:ff:a1:ec:f0:c1:
                    34:56:39:a2:6a:fd:32:ef:b4:c7:66:0b:07:03:79:
                    02:4d:56:2e:20:9a:be:55:54:a7:e2:94:9e:08:8d:
                    17:26:8b:44:d8:01:d4:56:12:0a:a1:99:d8:c8:c0:
                    8e:ea:19:27:85:72:1e:3a:78:6d:69:fe:c1:32:0f:
                    d8:33:3b:a2:f0:41:d6:4b:1e:ab:95:c0:05:10:58:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:FF:2A:49:10:61:1C:4C:63:4F:E3:C5:93:15:A2:B4:65:D5:C4
            X509v3 Authority Key Identifier:
                keyid:C4:01:D8:E4:BE:BB:3D:4C:88:25:37:61:18:59:C1:62:CF:0C:F5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAHY5L67PUyIJTdhGFnBYs8M9Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/21044b-191b-40f4-a1e7-24e463f840d1/1/xAHY5L67PUyIJTdhGFnBYs8M9Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/21044b-191b-40f4-a1e7-24e463f840d1/1/xAHY5L67PUyIJTdhGFnBYs8M9Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:77:53:9e:fc:90:07:6b:29:f9:4a:0b:c2:38:51:04:48:
         f5:29:a2:43:05:38:18:ae:c3:e4:8f:11:63:c3:b1:ff:55:b2:
         59:15:27:a2:1d:9a:f2:d6:5d:fb:48:38:e9:13:29:69:2d:ba:
         94:90:c4:b8:b8:3d:4a:05:9a:7b:56:e3:1b:77:51:ce:58:ad:
         99:0f:2e:11:ce:bb:74:fc:20:b4:9a:2f:b5:24:11:90:d1:0d:
         e2:51:c9:26:25:9e:8a:8b:95:c8:cc:f7:c7:7c:ac:f1:d8:f3:
         50:cd:cb:87:49:07:6e:6a:d6:ed:de:4a:5e:9c:3f:26:46:13:
         fc:80:39:9e:0e:e2:18:f7:46:bf:89:0f:62:97:c7:0c:35:6a:
         ee:3d:2f:57:a7:48:8e:1a:a0:ea:79:a6:cc:6a:20:4c:c8:24:
         69:a9:35:04:92:8f:d6:d1:56:01:0d:84:1c:24:9f:40:53:8f:
         84:2d:65:52:29:8e:2d:46:24:37:48:d1:86:2b:c8:f6:dd:b3:
         b1:cf:d7:fd:99:73:98:9e:a4:ae:39:c0:87:3c:57:16:0f:4e:
         37:a2:69:88:f2:61:bb:f4:f6:73:d6:92:a9:03:a9:17:e3:75:
         ac:c4:9e:d7:33:3a:11:d7:e6:09:c6:01:72:54:00:31:41:eb:
         7a:9f:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----