Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
File:                     8Oen7AhMfvq_Zmijd5MsNqs62A0.mft (raw, json)
Hash identifier:          7USTmFx2yDphByy2W+l9T4VohCa9ZldJ7ZVUHJosbgs=
Subject key identifier:   13:49:1D:B5:49:56:0B:67:68:F0:4C:52:C7:F4:75:09:BD:D2:4E:7A
Authority key identifier: F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D
Certificate issuer:       /CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
Certificate serial:       019292D84823751DC7C007ECDE88CCD13C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
Manifest number:          0814
Signing time:             Wed 16 Oct 2024 01:01:40 +0000
Manifest this update:     Wed 16 Oct 2024 01:01:40 +0000
Manifest next update:     Thu 17 Oct 2024 01:01:40 +0000
Files and hashes:         1: 8Oen7AhMfvq_Zmijd5MsNqs62A0.crl (hash: m4tEKJyeyVYFsPhqG0MY8JWKk6tOnzlnCKQP5d2UyQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:92:d8:48:23:75:1d:c7:c0:07:ec:de:88:cc:d1:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
        Validity
            Not Before: Oct 16 01:01:40 2024 GMT
            Not After : Oct 17 01:01:40 2024 GMT
        Subject: CN=13491db549560b6768f04c52c7f47509bdd24e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:3d:58:21:05:54:55:f7:56:35:1d:95:04:
                    fe:bf:0d:92:25:26:d3:ab:36:1b:57:29:df:1a:30:
                    a4:48:a5:f0:90:56:b8:99:3c:84:0a:76:17:64:52:
                    35:55:3d:63:61:92:cd:0d:b4:05:47:35:9e:b5:3b:
                    46:67:e6:df:3d:4b:f8:c2:3c:c6:2c:3d:44:e2:a5:
                    33:1b:6e:1a:c5:ae:ae:50:6b:1b:38:fa:f1:11:cc:
                    e0:d7:eb:f2:ab:cb:d3:89:7b:0a:41:64:e9:49:4f:
                    6f:2e:e6:55:7d:60:62:67:7c:b2:78:40:fe:c8:cd:
                    87:1a:15:b2:af:9f:4a:2c:0f:5f:1b:b4:ad:a7:6f:
                    92:4c:bf:fc:fa:48:37:50:7e:d3:48:99:cd:f7:0b:
                    d7:b9:d6:9a:a9:93:ea:3c:c4:91:1f:1b:2b:95:38:
                    fa:65:4f:eb:db:cb:a6:a7:23:da:5d:a0:49:ae:74:
                    8e:58:69:ed:4d:79:f4:f0:af:d8:19:b7:7c:29:2f:
                    0a:8c:82:67:8c:a7:7d:26:5c:29:de:d3:30:ce:df:
                    8b:39:69:96:4e:52:9d:ee:38:40:52:88:38:98:d7:
                    37:f0:4d:bd:3f:c8:7d:e1:a8:a1:97:67:02:6d:54:
                    3b:f0:14:0b:77:ce:3c:83:d8:9f:08:e7:df:f6:94:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:1D:B5:49:56:0B:67:68:F0:4C:52:C7:F4:75:09:BD:D2:4E:7A
            X509v3 Authority Key Identifier:
                keyid:F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:38:56:a6:3c:97:c6:c1:a0:7a:ea:6d:a5:ec:8b:58:aa:9b:
         2c:38:8b:ed:d5:ea:a9:e4:8b:42:82:dd:24:44:c9:00:63:16:
         cc:64:4a:d9:c4:29:00:c5:1d:61:a6:6e:5d:92:0a:58:c8:a3:
         0f:3b:84:ab:ad:69:21:ed:a8:2c:db:1b:36:19:78:25:51:7d:
         94:ff:2b:cd:59:27:d0:a4:72:ca:99:b4:c0:7a:03:56:89:86:
         33:74:37:ee:c0:71:a1:d7:8a:fc:f7:1d:79:71:49:30:a9:24:
         c2:fd:5b:be:34:f4:5c:2e:61:6d:ab:d9:50:54:1d:d9:cb:a8:
         2c:93:5b:34:f1:fe:50:dc:59:05:92:1d:31:06:9f:c4:f2:96:
         c9:e6:04:d8:bf:83:bf:a1:0e:0d:22:23:95:69:09:c1:06:6e:
         ff:fc:5b:79:f7:cc:4f:90:0f:79:74:1e:a7:17:a5:d6:c5:19:
         9c:13:e2:f2:a2:d1:1f:52:d6:cb:c9:f2:35:41:4b:12:09:0e:
         26:40:70:f5:32:18:e3:f9:08:f3:8d:9c:e0:23:02:53:eb:60:
         7b:78:4c:2d:97:b1:c3:dd:d4:c5:80:3d:17:c1:0c:15:e2:a2:
         db:80:9e:95:72:3e:50:f1:30:04:57:31:98:72:2a:18:3f:e2:
         74:d5:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----