Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/51b7f1-b7ae-41a7-80c4-cb7d5e64fb00/1/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.mft
File:                     bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.mft (raw, json)
Hash identifier:          6AxfJ3iHUvQUtZTsjktfqjsPw/5luZUg/t7UBvEYjok=
Subject key identifier:   6A:3B:D2:EF:95:1A:4F:36:3D:CB:F5:82:9A:95:94:40:19:C5:F7:BD
Authority key identifier: 6D:2D:6F:DB:56:60:9D:5C:66:5D:0B:05:49:0E:86:49:A0:FF:C6:44
Certificate issuer:       /CN=6d2d6fdb56609d5c665d0b05490e8649a0ffc644
Certificate serial:       018EEF265438877802886CC95A36A42BA758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/51b7f1-b7ae-41a7-80c4-cb7d5e64fb00/1/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.mft
Manifest number:          0912
Signing time:             Thu 18 Apr 2024 03:00:50 +0000
Manifest this update:     Thu 18 Apr 2024 03:00:50 +0000
Manifest next update:     Fri 19 Apr 2024 03:00:50 +0000
Files and hashes:         1: bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.crl (hash: be8mW+pCaVxXnqjKQBiZsqJYOlOjVfhyNEbZe9lvnuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ef:26:54:38:87:78:02:88:6c:c9:5a:36:a4:2b:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d6fdb56609d5c665d0b05490e8649a0ffc644
        Validity
            Not Before: Apr 18 03:00:50 2024 GMT
            Not After : Apr 19 03:00:50 2024 GMT
        Subject: CN=6a3bd2ef951a4f363dcbf5829a95944019c5f7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:ea:36:65:35:6a:7b:69:de:c6:96:40:b5:
                    ba:a5:8a:1f:0d:13:10:95:b9:75:ec:78:7a:e5:4c:
                    e4:d9:c6:02:e9:19:c8:b9:41:01:0b:d6:9d:d2:85:
                    48:ed:00:9d:f4:be:6b:39:22:d0:00:9e:62:d4:fa:
                    c4:c7:da:bb:47:25:58:c4:b2:24:87:29:49:a1:9d:
                    e6:b7:05:cf:2d:36:53:11:91:b3:7a:4a:86:52:86:
                    70:d2:af:29:83:9e:3f:76:a7:96:6a:d6:84:c2:b1:
                    72:f6:47:5e:ff:55:52:fe:4d:85:f2:c6:65:d7:5c:
                    f5:b6:bc:be:9a:c4:81:64:13:98:ea:16:4a:2a:b8:
                    29:41:51:7f:23:aa:3c:80:af:17:95:38:e1:b0:9a:
                    a1:e3:f3:8a:5e:d1:43:d2:45:82:92:90:8a:49:27:
                    a1:f4:88:56:51:24:76:1f:a5:00:37:64:97:9c:7b:
                    d3:0e:ca:88:5d:7e:95:4f:f3:57:48:dd:3f:47:54:
                    5d:1f:d0:f0:79:80:8d:0f:e2:0b:bb:ba:e0:e5:b4:
                    a1:4e:2f:be:6c:74:1f:cd:30:df:71:a8:7c:10:c3:
                    bf:2d:72:f8:ac:7e:db:0a:aa:4b:8f:8b:f5:2b:bf:
                    b5:e6:0a:2b:27:7b:85:87:78:4f:4c:d1:c5:e2:d1:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:D2:EF:95:1A:4F:36:3D:CB:F5:82:9A:95:94:40:19:C5:F7:BD
            X509v3 Authority Key Identifier:
                keyid:6D:2D:6F:DB:56:60:9D:5C:66:5D:0B:05:49:0E:86:49:A0:FF:C6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/51b7f1-b7ae-41a7-80c4-cb7d5e64fb00/1/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/51b7f1-b7ae-41a7-80c4-cb7d5e64fb00/1/bS1v21ZgnVxmXQsFSQ6GSaD_xkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:41:47:d0:23:04:00:4b:6a:bb:36:68:ea:d0:72:8e:f8:04:
         34:40:c3:6a:1a:83:40:f1:72:64:83:38:ab:ba:51:92:13:16:
         e5:c3:91:cc:77:de:66:db:73:20:bc:d6:b2:d2:e2:37:3e:6b:
         5e:1a:34:6e:3e:9d:21:52:d2:d4:54:67:43:67:5d:90:df:64:
         33:f0:ee:b7:9b:83:55:a4:ed:ff:75:4c:5a:7e:a4:58:74:39:
         54:69:16:31:2b:a0:ad:4c:d6:f2:e6:7b:37:ee:27:3a:07:6e:
         de:2c:19:1c:68:10:63:ef:6c:a8:29:29:40:20:c6:e1:ee:bc:
         33:50:b7:0e:f9:dd:06:ff:62:96:b5:6f:f4:0d:11:99:18:66:
         4e:c3:bd:cb:ef:ee:e4:d7:6c:4f:5e:d9:bc:01:8f:03:6a:83:
         b1:bf:f7:4a:6a:4d:83:dc:55:43:c3:03:0a:25:51:62:aa:33:
         aa:3e:c1:22:8b:ff:52:e1:31:08:24:a6:98:2d:c7:b8:02:43:
         8a:74:35:43:b8:06:be:8c:21:4b:24:ee:3f:2c:4b:28:11:50:
         93:b7:f1:13:cb:ce:16:79:e0:37:ac:15:a4:f5:21:1c:16:bd:
         71:84:53:7e:e4:fb:fa:07:91:fb:60:fd:12:3e:75:80:1f:35:
         c4:91:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----