Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2c97c4-922c-4170-bcd0-e747112c7c8e/1/DDhjtJj2VXzhy9MpRUu5YRaG9gM.mft
File:                     DDhjtJj2VXzhy9MpRUu5YRaG9gM.mft (raw, json)
Hash identifier:          WOaJyldTTWm1C/ak9Irv98t2kb717t3MO1tilKNvY4E=
Subject key identifier:   22:F0:ED:E6:67:BC:0A:AC:6C:74:4F:A6:B7:F3:6D:E9:53:F2:68:3C
Authority key identifier: 0C:38:63:B4:98:F6:55:7C:E1:CB:D3:29:45:4B:B9:61:16:86:F6:03
Certificate issuer:       /CN=0c3863b498f6557ce1cbd329454bb9611686f603
Certificate serial:       019072E452A71B42167FC59D2CC02F405691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDhjtJj2VXzhy9MpRUu5YRaG9gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2c97c4-922c-4170-bcd0-e747112c7c8e/1/DDhjtJj2VXzhy9MpRUu5YRaG9gM.mft
Manifest number:          03AE
Signing time:             Tue 02 Jul 2024 10:01:24 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:24 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:24 +0000
Files and hashes:         1: DDhjtJj2VXzhy9MpRUu5YRaG9gM.crl (hash: oMTSwYi8o0ZKgh8luBDBouaxxrBNG9XTPDuO/5/mrCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:52:a7:1b:42:16:7f:c5:9d:2c:c0:2f:40:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3863b498f6557ce1cbd329454bb9611686f603
        Validity
            Not Before: Jul  2 10:01:24 2024 GMT
            Not After : Jul  3 10:01:24 2024 GMT
        Subject: CN=22f0ede667bc0aac6c744fa6b7f36de953f2683c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:b2:c2:87:4a:ee:1e:a7:76:d8:e0:ee:e3:
                    ef:3c:fb:9b:43:46:51:a4:b2:40:aa:d0:5b:49:61:
                    b6:31:a9:d5:ed:25:ef:cf:d7:26:d4:fc:5a:10:9e:
                    0b:1e:a0:34:9c:75:8a:90:30:28:3a:54:02:1c:0f:
                    93:5c:1f:6c:ff:9d:b1:4f:b1:ae:58:4c:78:34:78:
                    93:a9:b1:c3:fd:eb:88:d8:58:48:2c:a0:76:25:98:
                    fb:c3:7c:d2:a5:fb:86:71:3e:d4:bc:20:eb:0c:fe:
                    6b:c1:b3:2e:1a:af:bc:ea:75:53:48:9c:61:4c:99:
                    5e:59:3c:9f:26:91:16:43:e5:b3:80:88:8e:55:e6:
                    f1:c0:37:c0:f1:05:71:67:90:0b:ff:f2:85:97:5c:
                    37:01:d2:32:07:76:00:91:77:1b:a2:f0:14:f3:c5:
                    0c:19:db:6e:e8:aa:85:13:60:31:bf:05:8d:9d:72:
                    b6:4e:d9:0e:33:b7:97:fb:f1:fe:b4:f9:9b:e6:2e:
                    34:1f:b2:69:be:c8:20:23:10:de:c6:84:ef:3f:43:
                    9b:7e:d4:de:88:13:75:87:d6:69:5f:61:f4:4d:7e:
                    f4:94:db:6b:96:d8:b6:53:12:21:f3:e3:90:c4:f2:
                    78:ce:78:05:78:0b:c7:65:c3:50:36:4b:31:2c:e1:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:ED:E6:67:BC:0A:AC:6C:74:4F:A6:B7:F3:6D:E9:53:F2:68:3C
            X509v3 Authority Key Identifier:
                keyid:0C:38:63:B4:98:F6:55:7C:E1:CB:D3:29:45:4B:B9:61:16:86:F6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDhjtJj2VXzhy9MpRUu5YRaG9gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2c97c4-922c-4170-bcd0-e747112c7c8e/1/DDhjtJj2VXzhy9MpRUu5YRaG9gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2c97c4-922c-4170-bcd0-e747112c7c8e/1/DDhjtJj2VXzhy9MpRUu5YRaG9gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:31:b9:34:04:5d:67:57:25:b2:c4:d6:0e:2b:ab:68:5b:
         f1:01:28:55:b7:9b:6d:fd:34:a6:da:3b:53:94:2b:33:79:81:
         62:bb:7f:16:7f:60:22:15:92:a5:5c:d3:e8:16:24:3f:7d:66:
         b4:82:c8:1b:69:8d:31:07:fd:9d:d7:05:ba:fe:06:55:b2:4e:
         d9:bc:14:fe:c9:c5:8f:dd:f8:2d:77:c2:e4:68:ec:00:88:37:
         98:13:e4:3a:52:08:b5:82:6c:ae:2c:dd:6d:16:29:21:9d:4f:
         cd:4b:d4:f7:4a:9f:3b:1d:af:cf:83:21:dc:e0:f9:b7:a2:e6:
         06:e6:44:c3:b6:1b:4e:1c:02:5b:b6:af:ba:24:6f:0e:4d:8b:
         18:f1:ec:09:04:f7:be:8f:61:78:17:63:6e:bb:a7:ba:3f:4e:
         5b:14:24:b7:fa:6e:d8:39:91:96:4e:64:7a:2e:72:da:0b:09:
         8a:8c:d0:8d:b7:66:8d:ca:d0:c6:7b:4e:0e:9f:e2:f2:9a:0e:
         c1:d8:58:9b:e6:c0:91:e4:78:e4:99:a2:ea:5d:cd:e6:1d:2d:
         67:69:61:7c:e4:f5:2c:9b:f4:82:2c:ee:94:a0:93:ad:c5:d8:
         6e:e5:e7:1f:d4:ef:b3:c5:d0:1c:ae:9e:3d:10:d3:99:6c:8b:
         e2:da:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----