Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
File:                     UoIehJbfUWAz73YZvsw9VV7MgTI.mft (raw, json)
Hash identifier:          NFexUpujCx+23/VtfXeR8YdkrquP2DiNCkfqYai1olk=
Subject key identifier:   EE:47:11:B1:44:BC:A5:57:95:D1:40:62:A6:79:9B:76:E9:BB:A9:B6
Authority key identifier: 52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
Certificate issuer:       /CN=52821e8496df516033ef7619becc3d555ecc8132
Certificate serial:       018D2205A9557BBBEAE6571636AB1F38584A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
Manifest number:          0B50
Signing time:             Fri 19 Jan 2024 14:00:12 +0000
Manifest this update:     Fri 19 Jan 2024 14:00:12 +0000
Manifest next update:     Sat 20 Jan 2024 14:00:12 +0000
Files and hashes:         1: UoIehJbfUWAz73YZvsw9VV7MgTI.crl (hash: U9b8sRTwdrQj6sh+z/Qv0kFfbUCq3Wv3VT3MnDav+2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:22:05:a9:55:7b:bb:ea:e6:57:16:36:ab:1f:38:58:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52821e8496df516033ef7619becc3d555ecc8132
        Validity
            Not Before: Jan 19 14:00:12 2024 GMT
            Not After : Jan 20 14:00:12 2024 GMT
        Subject: CN=ee4711b144bca55795d14062a6799b76e9bba9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:bf:86:be:65:bf:93:b3:8d:67:e6:21:21:
                    42:35:75:11:2c:13:14:7e:ae:28:77:89:a0:33:ee:
                    60:f9:e7:c2:92:a6:68:60:67:f0:c9:c7:56:95:53:
                    25:74:10:22:35:e2:ac:38:f4:38:3e:49:a0:69:e6:
                    a7:68:cf:cf:0b:09:a0:c8:33:6f:bc:99:a0:60:24:
                    a1:38:0b:42:99:36:29:9b:58:e0:01:8e:8d:ee:5f:
                    cf:8d:a3:3d:04:36:e7:d8:54:b2:95:79:f4:b4:00:
                    12:69:ab:60:f3:6c:0a:ea:24:b0:01:6e:f1:83:5c:
                    30:2a:bb:32:54:3f:cb:d6:07:80:81:b3:eb:5a:5d:
                    16:f5:39:de:f5:95:23:bc:b0:19:0a:dd:93:4a:f0:
                    7e:b8:07:d2:3f:83:50:26:48:7a:29:42:8a:d3:4b:
                    0d:0e:de:f3:49:aa:13:09:08:89:d5:5f:0f:91:88:
                    12:ab:d5:ad:2b:b0:c4:b3:48:7e:6a:b7:95:2c:94:
                    06:fd:34:77:52:d6:c5:a4:3f:40:fc:aa:88:e4:03:
                    81:f3:2a:8a:d0:cb:b1:3d:f4:70:32:c1:a0:dc:3e:
                    24:86:ad:d9:4b:10:8a:c1:2d:da:7f:84:e3:7d:bd:
                    ec:19:dc:ba:7c:d9:a0:df:15:10:b9:70:b7:2f:f5:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:11:B1:44:BC:A5:57:95:D1:40:62:A6:79:9B:76:E9:BB:A9:B6
            X509v3 Authority Key Identifier:
                keyid:52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:58:60:8b:64:2b:cb:6c:d3:2a:3c:74:14:75:e9:33:22:
         fe:d8:77:d8:bf:4c:51:b7:53:4b:9c:98:9e:1c:d7:53:21:c7:
         b6:44:99:57:08:46:a4:9a:d0:24:5a:90:24:34:18:9a:6f:00:
         ed:9c:f3:8e:76:b3:01:05:a6:8c:00:5a:ea:e6:ba:62:bd:36:
         fa:a9:7b:19:c3:18:c5:43:01:6d:25:dc:56:7f:6e:2b:c2:a9:
         3f:83:0c:9d:93:7e:07:28:d7:16:40:4e:5a:3d:96:1b:a2:7e:
         2f:db:44:f2:fd:21:b0:9d:fc:d1:65:f7:b7:7b:d2:92:12:76:
         c3:85:d6:9d:48:47:ac:77:1f:d5:f6:c1:d2:92:f1:a3:45:b7:
         a4:1d:d7:6a:36:d5:91:7c:af:19:02:36:c6:cc:b9:ca:fa:57:
         58:95:8a:e5:ea:4c:09:9a:77:e6:23:53:75:73:03:14:c8:20:
         ca:1c:e3:aa:3e:9e:b2:42:71:73:2e:ba:00:94:cf:b3:c3:f1:
         77:91:cd:61:43:66:51:8d:90:99:6a:77:5e:99:2d:75:8f:71:
         2a:61:19:48:3d:f0:98:82:fe:31:62:49:64:1b:25:e5:01:85:
         29:fa:93:4f:e9:fd:29:e7:ac:2e:3e:55:1d:ec:b2:c4:3e:e2:
         23:85:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----