Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/944cb8-8148-4bd0-8f52-27024cc932a0/1/SbY_XeYNWp-AVdepjoGN2Ifz6lo.mft
File:                     SbY_XeYNWp-AVdepjoGN2Ifz6lo.mft (raw, json)
Hash identifier:          8ag42CT2kHfy+aFqc3EAG5RrQx3mvFRMZ8eO3umaH1E=
Subject key identifier:   29:2A:BB:F0:46:60:A3:A0:1E:86:ED:80:9C:FE:AE:2C:3A:A0:89:72
Authority key identifier: 49:B6:3F:5D:E6:0D:5A:9F:80:55:D7:A9:8E:81:8D:D8:87:F3:EA:5A
Certificate issuer:       /CN=49b63f5de60d5a9f8055d7a98e818dd887f3ea5a
Certificate serial:       0192D1494AC59145DBCB15508D1C4A16A53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbY_XeYNWp-AVdepjoGN2Ifz6lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/944cb8-8148-4bd0-8f52-27024cc932a0/1/SbY_XeYNWp-AVdepjoGN2Ifz6lo.mft
Manifest number:          04D7
Signing time:             Mon 28 Oct 2024 04:01:34 +0000
Manifest this update:     Mon 28 Oct 2024 04:01:34 +0000
Manifest next update:     Tue 29 Oct 2024 04:01:34 +0000
Files and hashes:         1: SbY_XeYNWp-AVdepjoGN2Ifz6lo.crl (hash: LgWAYf6W/BVcZ5es2t4XdM0yQkNfZHmif0QJRBJ5+0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d1:49:4a:c5:91:45:db:cb:15:50:8d:1c:4a:16:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b63f5de60d5a9f8055d7a98e818dd887f3ea5a
        Validity
            Not Before: Oct 28 04:01:34 2024 GMT
            Not After : Oct 29 04:01:34 2024 GMT
        Subject: CN=292abbf04660a3a01e86ed809cfeae2c3aa08972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:ab:92:27:dc:78:bc:d8:01:ba:f4:8a:f6:
                    bf:ef:e5:01:d1:58:ba:ce:04:60:ef:4c:aa:95:61:
                    6d:4d:27:a8:c2:7f:59:75:ac:75:de:78:f8:a4:72:
                    c0:5d:1a:e6:45:87:57:0e:bb:ae:21:50:86:ea:61:
                    3c:13:55:60:7e:3a:5c:57:52:70:1c:e4:9c:91:f5:
                    46:d1:39:43:bd:d8:95:23:3a:9e:26:83:2f:16:61:
                    77:d5:14:da:58:54:da:24:96:fc:8a:1f:1f:14:34:
                    35:7b:dd:af:7e:cb:21:55:23:22:b3:38:93:1d:c6:
                    b7:af:bc:30:42:75:74:79:59:83:27:12:f2:8e:59:
                    c5:b5:28:e1:81:b5:72:48:3a:3b:22:07:68:2b:ea:
                    6e:ac:0c:78:18:f5:32:c9:29:bb:97:7f:a2:f3:c0:
                    71:7c:c2:a3:b4:c4:ee:9a:3c:16:d6:11:11:d4:84:
                    bc:81:db:aa:a0:5c:cc:38:3c:fb:fe:b1:9e:04:0c:
                    ee:61:54:59:cb:3a:6f:13:c0:ed:3b:d3:6f:9c:5b:
                    44:53:cf:63:97:d8:bc:db:c6:ed:a2:06:34:c6:1f:
                    78:b8:5c:1d:8a:ab:c8:e7:63:81:9c:e8:58:3d:9f:
                    e2:bf:47:8f:9c:58:57:66:4b:fd:13:db:f2:c2:93:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2A:BB:F0:46:60:A3:A0:1E:86:ED:80:9C:FE:AE:2C:3A:A0:89:72
            X509v3 Authority Key Identifier:
                keyid:49:B6:3F:5D:E6:0D:5A:9F:80:55:D7:A9:8E:81:8D:D8:87:F3:EA:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbY_XeYNWp-AVdepjoGN2Ifz6lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/944cb8-8148-4bd0-8f52-27024cc932a0/1/SbY_XeYNWp-AVdepjoGN2Ifz6lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/944cb8-8148-4bd0-8f52-27024cc932a0/1/SbY_XeYNWp-AVdepjoGN2Ifz6lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:22:a8:fd:11:23:33:c7:74:69:e2:ad:d3:70:97:7c:de:
         7e:a1:48:d7:a3:7d:28:bb:bd:c5:17:58:78:72:7e:c6:e7:75:
         1d:f2:0f:33:e2:68:14:4f:35:14:3e:cf:e8:d3:fa:26:ea:aa:
         39:e0:e3:86:05:7f:c1:7b:33:d3:70:86:cb:4a:88:77:7a:21:
         ed:36:57:0b:32:a2:3b:22:57:c0:6c:0a:1b:b4:9d:bb:d2:b8:
         28:c5:c7:a8:e7:90:8d:ad:e9:dd:b9:97:0a:d2:a2:c5:01:11:
         93:c4:b3:6a:8a:08:2f:ec:ac:13:b4:f3:a1:fb:08:70:91:8c:
         1d:61:53:e3:ac:02:57:07:eb:ab:49:58:28:71:5b:92:5f:46:
         d8:c7:04:bb:a9:b8:e3:8d:b0:b8:3c:6e:1e:8d:d8:4b:e1:e4:
         ce:3e:82:ab:c0:1e:46:27:08:aa:07:51:5c:5b:ae:8d:36:ea:
         ca:b7:03:46:e4:22:dc:5e:33:5b:45:27:b0:49:ef:ba:b0:f5:
         82:d3:58:91:87:d5:53:f2:d1:51:9e:ee:b0:ca:f8:77:43:e1:
         08:45:fb:b3:70:80:cd:ce:5c:2e:a3:d0:6c:98:d7:52:15:a3:
         87:fb:24:40:84:e1:f6:2b:1d:98:d0:91:54:82:c7:e0:94:6a:
         23:73:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----