Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/168046-5e8b-4f5a-a009-6c9ff8218c94/1/qpPwEs4SRJVqnJwwfUINEdo28xs.mft
File:                     qpPwEs4SRJVqnJwwfUINEdo28xs.mft (raw, json)
Hash identifier:          Bj6KwGQVSv/mxtzz3PK7zckfKy12TY/Fpz+XLjPQIgM=
Subject key identifier:   71:54:14:42:E7:A0:8F:34:DF:01:E9:CA:71:0A:CD:C9:8F:12:F7:8E
Authority key identifier: AA:93:F0:12:CE:12:44:95:6A:9C:9C:30:7D:42:0D:11:DA:36:F3:1B
Certificate issuer:       /CN=aa93f012ce1244956a9c9c307d420d11da36f31b
Certificate serial:       0191B26507650A335912752F2488127E6091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpPwEs4SRJVqnJwwfUINEdo28xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/168046-5e8b-4f5a-a009-6c9ff8218c94/1/qpPwEs4SRJVqnJwwfUINEdo28xs.mft
Manifest number:          0E
Signing time:             Mon 02 Sep 2024 11:00:50 +0000
Manifest this update:     Mon 02 Sep 2024 11:00:50 +0000
Manifest next update:     Tue 03 Sep 2024 11:00:50 +0000
Files and hashes:         1: qpPwEs4SRJVqnJwwfUINEdo28xs.crl (hash: w+oLDDz4lJPurqAo9bnNZOIDM2unY7LRFcQAYuhbNPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:65:07:65:0a:33:59:12:75:2f:24:88:12:7e:60:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa93f012ce1244956a9c9c307d420d11da36f31b
        Validity
            Not Before: Sep  2 11:00:50 2024 GMT
            Not After : Sep  3 11:00:50 2024 GMT
        Subject: CN=71541442e7a08f34df01e9ca710acdc98f12f78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:34:a4:e9:2b:fb:b6:f6:ef:50:75:68:ef:
                    ad:6a:a2:c9:c0:65:55:3b:fe:c4:4e:c5:39:ab:ee:
                    1d:06:35:30:60:43:38:2b:af:0e:c7:e7:8a:ea:50:
                    b5:82:e4:51:0a:d0:11:7f:98:b2:08:4e:c9:fc:f9:
                    f5:dd:1c:bb:0c:59:c3:ac:1b:4e:e0:d3:61:46:d1:
                    e3:d3:86:78:8d:ff:18:ce:1a:41:ef:3e:41:69:8f:
                    33:2e:cd:e1:b5:88:aa:eb:2c:fd:79:b9:34:05:27:
                    58:00:f9:7e:e4:a6:6a:17:d0:c7:98:32:29:cb:68:
                    8b:e7:6f:2f:84:ec:c6:e9:20:9c:b9:dd:34:4b:a9:
                    cf:5e:8f:50:1b:7a:59:14:35:c0:ee:35:e1:e3:65:
                    d0:20:4c:98:10:5e:e3:dc:95:4b:26:28:3e:78:16:
                    6d:a5:d3:11:a4:22:2d:d3:2e:51:57:ab:69:18:c5:
                    f4:e9:96:f8:4c:c7:6c:4e:1c:10:54:de:4a:59:48:
                    d5:37:a8:63:3c:0b:ad:22:92:bb:39:bd:13:a7:7c:
                    6e:55:a0:91:39:f5:5c:8f:0c:fc:1b:f9:97:3f:e0:
                    d4:b2:cc:be:cb:d2:26:5d:fa:11:3b:6f:bf:a6:47:
                    30:6e:ae:f7:95:a8:ee:ec:ff:b0:18:c3:d8:aa:ab:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:14:42:E7:A0:8F:34:DF:01:E9:CA:71:0A:CD:C9:8F:12:F7:8E
            X509v3 Authority Key Identifier:
                keyid:AA:93:F0:12:CE:12:44:95:6A:9C:9C:30:7D:42:0D:11:DA:36:F3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpPwEs4SRJVqnJwwfUINEdo28xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/168046-5e8b-4f5a-a009-6c9ff8218c94/1/qpPwEs4SRJVqnJwwfUINEdo28xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/168046-5e8b-4f5a-a009-6c9ff8218c94/1/qpPwEs4SRJVqnJwwfUINEdo28xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:5d:6b:59:30:2b:18:22:a5:20:dc:87:fe:16:03:8e:03:
         5a:a6:04:96:32:59:37:19:7b:d6:dc:12:83:f8:14:07:88:b6:
         9f:25:24:24:48:94:72:c7:a0:87:84:8c:d6:01:c3:8b:51:23:
         f6:be:20:0e:5d:eb:8d:81:6e:36:0e:3b:17:bd:2f:c4:2c:25:
         92:75:d3:6e:c7:25:5b:e2:dd:e2:39:3a:51:69:87:d4:8f:6c:
         0f:76:31:df:35:3c:94:18:2e:af:38:db:6a:ec:8a:6a:3d:e3:
         7d:d7:17:d6:42:90:8f:6d:b1:9c:a0:4b:5f:cf:e6:66:fb:9d:
         1a:0e:72:f2:e7:0e:be:f0:cc:07:e1:b1:2f:2a:cd:41:83:2c:
         fd:84:94:b8:85:69:70:8b:17:ff:77:07:10:34:60:79:bb:93:
         2e:db:c8:c0:ae:9b:03:a3:5a:08:5f:a0:d4:d6:89:a6:2e:11:
         ba:0e:2f:c7:1b:02:41:34:80:cc:f2:ef:c3:55:91:46:70:81:
         4f:74:ad:82:69:dd:3f:46:38:dd:c3:ef:c5:fd:7e:ba:f8:3d:
         27:ed:b8:e5:ab:fa:50:44:b0:49:6b:fb:10:27:bc:bd:ac:39:
         14:3b:c2:6d:cd:52:2f:88:d3:be:4e:bd:4f:67:0b:11:90:01:
         f7:a1:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----