Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2a22e4-3add-4b8b-bf9d-a2767d8ff449/1/0GN6j8nq7m_of7w_jzUWIEXZH3Y.mft
File:                     0GN6j8nq7m_of7w_jzUWIEXZH3Y.mft (raw, json)
Hash identifier:          vi+T77B1yT8N0BGriounj39Vddm3gQRp7iJO3tZuRIM=
Subject key identifier:   4B:FF:3A:B8:12:C6:EC:11:C8:3A:E8:49:C5:CB:C6:48:DB:36:C4:AA
Authority key identifier: D0:63:7A:8F:C9:EA:EE:6F:E8:7F:BC:3F:8F:35:16:20:45:D9:1F:76
Certificate issuer:       /CN=d0637a8fc9eaee6fe87fbc3f8f35162045d91f76
Certificate serial:       018E7FC901CFEF9E6BBA68504FCA0559A372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GN6j8nq7m_of7w_jzUWIEXZH3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/2a22e4-3add-4b8b-bf9d-a2767d8ff449/1/0GN6j8nq7m_of7w_jzUWIEXZH3Y.mft
Manifest number:          A8
Signing time:             Wed 27 Mar 2024 12:01:03 +0000
Manifest this update:     Wed 27 Mar 2024 12:01:03 +0000
Manifest next update:     Thu 28 Mar 2024 12:01:03 +0000
Files and hashes:         1: 0GN6j8nq7m_of7w_jzUWIEXZH3Y.crl (hash: vk5cWhWPP4ovuzG7ldaTmmg1lUl+871lcm1Id6drj4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7f:c9:01:cf:ef:9e:6b:ba:68:50:4f:ca:05:59:a3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0637a8fc9eaee6fe87fbc3f8f35162045d91f76
        Validity
            Not Before: Mar 27 12:01:03 2024 GMT
            Not After : Mar 28 12:01:03 2024 GMT
        Subject: CN=4bff3ab812c6ec11c83ae849c5cbc648db36c4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:40:89:98:28:ae:34:40:04:e7:e2:11:31:
                    35:df:f5:b4:d9:13:74:f1:21:3d:02:55:2d:6d:03:
                    52:f4:c2:ce:f0:3c:68:ed:64:a0:aa:cc:93:14:d8:
                    de:98:32:3c:47:7a:ef:a9:a6:17:2e:b2:de:81:b0:
                    7c:13:e1:27:4a:18:d8:56:4d:e4:fc:51:bd:91:2b:
                    b5:51:96:d3:b0:1b:dc:d5:d7:a3:0b:0c:fc:c7:a5:
                    fe:44:56:58:b7:88:83:e9:51:97:cb:11:2b:ec:b4:
                    b8:eb:44:ba:11:3d:bb:ec:22:8b:7f:79:80:c8:e1:
                    f5:03:d2:63:f4:fb:ca:61:22:fa:ff:6f:1a:c9:27:
                    ae:b2:d7:28:e2:d1:80:6e:89:87:e1:1a:50:3d:15:
                    ac:c3:39:b8:33:a0:a1:48:16:89:29:d8:96:fe:cc:
                    50:b7:d8:c4:67:17:c3:09:fb:28:63:30:9a:6f:0b:
                    26:64:2b:b9:d8:b4:31:c3:58:80:89:68:e5:20:b4:
                    96:2b:fc:98:ce:37:53:7b:1d:ca:31:a0:df:5c:59:
                    f8:8c:86:e0:75:0b:1b:67:26:a8:27:c8:49:52:e8:
                    b2:0b:2d:29:ae:0f:41:c8:fb:69:49:a2:06:c4:06:
                    7e:ff:93:70:7a:16:3e:de:42:07:e9:83:36:db:11:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:3A:B8:12:C6:EC:11:C8:3A:E8:49:C5:CB:C6:48:DB:36:C4:AA
            X509v3 Authority Key Identifier:
                keyid:D0:63:7A:8F:C9:EA:EE:6F:E8:7F:BC:3F:8F:35:16:20:45:D9:1F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GN6j8nq7m_of7w_jzUWIEXZH3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2a22e4-3add-4b8b-bf9d-a2767d8ff449/1/0GN6j8nq7m_of7w_jzUWIEXZH3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2a22e4-3add-4b8b-bf9d-a2767d8ff449/1/0GN6j8nq7m_of7w_jzUWIEXZH3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:61:f0:e0:37:25:dd:bd:e7:ea:bf:2d:52:0c:c5:da:ac:
         c1:90:2f:8b:c3:9b:5c:25:ab:ce:66:85:19:37:56:d6:ac:55:
         d3:96:c2:a9:6b:4b:01:40:66:56:6b:8e:94:94:c9:c3:0c:b2:
         de:c6:35:a9:3c:04:ba:5c:1b:95:cd:5f:53:5c:52:e7:01:17:
         14:fb:59:0e:8d:d7:8b:e6:3f:77:04:86:db:a0:c6:7c:02:c0:
         a3:61:74:88:c7:4a:50:35:1c:49:76:b4:cb:5e:13:ab:67:a7:
         94:6a:13:b0:da:f6:a1:3a:0d:5f:14:0a:1e:18:da:82:35:c7:
         28:74:a7:52:1e:50:79:ab:21:37:4e:ce:cd:02:30:cc:3a:a0:
         ec:78:cf:b3:99:2b:cc:c5:ae:c0:e6:b0:56:24:28:53:3d:6b:
         17:fc:2a:59:9b:be:13:20:91:1b:6a:6b:d8:e3:ef:2b:b1:16:
         47:96:18:a2:3a:89:88:a2:d4:de:d4:15:70:66:3e:97:c7:c8:
         a5:12:f2:81:56:4a:5b:5a:cb:c6:d8:03:af:68:25:fa:b3:b9:
         fa:af:0b:70:31:72:79:21:27:f4:9a:08:3a:4e:1f:ff:d6:ab:
         d2:d6:f0:e4:fb:0f:60:fa:6d:e8:a3:40:03:57:2b:05:88:7a:
         db:18:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----