Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
File:                     ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft (raw, json)
Hash identifier:          miPFyVdwg7g9rT5aXbXAIRD3d/UrT3wUTdRngKR92yw=
Subject key identifier:   EF:A5:B2:FE:38:F9:61:FA:82:0E:C3:B3:00:44:ED:05:98:CF:F8:27
Authority key identifier: A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E
Certificate issuer:       /CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
Certificate serial:       01909A967BAF81FE3AAB8A8C1682F6627A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
Manifest number:          10
Signing time:             Wed 10 Jul 2024 03:01:11 +0000
Manifest this update:     Wed 10 Jul 2024 03:01:11 +0000
Manifest next update:     Thu 11 Jul 2024 03:01:11 +0000
Files and hashes:         1: ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl (hash: p/GTSU4cd+LOx1hGPz0qrGgvIdP16wPeA5XoaESYvo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:96:7b:af:81:fe:3a:ab:8a:8c:16:82:f6:62:7a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
        Validity
            Not Before: Jul 10 03:01:11 2024 GMT
            Not After : Jul 11 03:01:11 2024 GMT
        Subject: CN=efa5b2fe38f961fa820ec3b30044ed0598cff827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:13:39:d9:eb:72:1c:7e:51:2e:a2:80:f3:
                    70:87:cd:d3:95:72:e6:d1:06:c3:1e:c8:60:a7:b3:
                    f0:2f:c9:54:78:f3:20:1a:aa:be:a7:7d:93:9c:f4:
                    92:70:d0:1b:d8:79:e9:bd:07:b8:28:9f:17:a9:69:
                    d9:56:c1:d6:4f:fc:da:02:4e:3d:78:49:62:9c:af:
                    65:77:09:82:0b:99:e6:22:28:8e:18:43:33:b0:05:
                    1c:f1:90:a5:76:57:76:de:b5:45:2c:03:69:9e:f3:
                    ef:2b:a7:29:22:16:67:05:d8:8c:f8:bb:99:29:4c:
                    e3:7b:03:a7:a2:80:d5:a4:6d:b0:2d:28:1d:c2:e7:
                    f4:cf:c1:f6:f9:85:44:9d:b8:dd:9a:22:7c:67:98:
                    95:8a:0d:7f:5f:44:c4:f4:b1:38:b3:59:7d:34:95:
                    ed:65:6f:4d:67:cb:f6:03:9a:81:d8:85:0e:80:8b:
                    bf:5f:37:97:44:c9:eb:25:c5:4e:30:62:d1:44:26:
                    54:3c:44:6b:25:28:64:0a:00:10:17:a2:0f:1d:b0:
                    aa:a2:fe:1c:b6:32:63:3b:d2:99:f8:a3:01:01:92:
                    dc:31:79:d4:8f:48:69:84:e5:05:da:28:d7:05:b2:
                    e7:90:9c:9d:d7:4e:16:31:00:d0:bd:aa:13:1b:34:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:B2:FE:38:F9:61:FA:82:0E:C3:B3:00:44:ED:05:98:CF:F8:27
            X509v3 Authority Key Identifier:
                keyid:A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:e9:cc:ee:4d:61:e3:63:4f:0f:fd:71:e2:38:57:b5:b1:
         19:9f:01:2a:5c:42:3e:ca:94:7b:d0:9f:78:2d:cd:15:d6:5f:
         ee:42:c9:89:6a:5a:33:3d:d6:3a:88:94:75:f2:e8:01:32:9c:
         a5:79:43:93:23:81:ff:98:02:bb:9f:dd:74:0d:f7:9f:84:2c:
         d6:31:57:1e:08:72:88:2f:de:b9:95:da:7e:c3:09:df:29:1b:
         23:2a:7e:4f:c2:51:7b:3c:e9:15:72:d3:8e:48:a3:93:aa:3e:
         83:5d:73:75:54:a2:da:bb:31:16:b5:e6:be:7a:07:f8:9c:2c:
         b6:0c:48:f0:69:31:eb:b3:83:17:91:2b:bc:5a:eb:94:7b:4e:
         4b:99:43:91:c1:44:3f:b8:4f:68:8c:6d:e9:04:13:f4:b5:d1:
         32:cb:82:62:06:c2:5e:6d:22:ad:f8:31:6b:07:d1:1a:5a:5e:
         ad:fc:8c:32:3c:0e:6d:4d:c6:1e:1a:39:d8:5f:d2:57:21:c1:
         91:4b:ce:74:c6:d0:6e:48:b8:e4:d2:3b:f6:11:d4:56:83:b6:
         93:12:8f:c3:0d:c1:5e:ac:e9:31:cb:41:14:c8:01:c3:dc:b6:
         bd:da:e0:b6:8c:99:5b:c8:9a:02:7c:28:28:de:c6:e7:e4:58:
         94:fb:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----