Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.mft
File:                     f2aYBiI0kMdsTbLJdwla_KgiELY.mft (raw, json)
Hash identifier:          cY3r2cIEe0TF1Z03CbhxQhH9EfxNlm7GeZzUkzyzml0=
Subject key identifier:   CA:93:6F:38:D9:66:0B:8C:2E:B9:8D:1E:A3:1E:12:B3:03:A2:E4:4F
Authority key identifier: 7F:66:98:06:22:34:90:C7:6C:4D:B2:C9:77:09:5A:FC:A8:22:10:B6
Certificate issuer:       /CN=7f669806223490c76c4db2c977095afca82210b6
Certificate serial:       0191B008A36B3AEC3DABFD9D52C6A17CB21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f2aYBiI0kMdsTbLJdwla_KgiELY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.mft
Manifest number:          BA
Signing time:             Mon 02 Sep 2024 00:00:41 +0000
Manifest this update:     Mon 02 Sep 2024 00:00:41 +0000
Manifest next update:     Tue 03 Sep 2024 00:00:41 +0000
Files and hashes:         1: f2aYBiI0kMdsTbLJdwla_KgiELY.crl (hash: XVNL2DEuy1bzb6Al5vNrIBeWDHIqYCCtwBbQPrYwyHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b0:08:a3:6b:3a:ec:3d:ab:fd:9d:52:c6:a1:7c:b2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f669806223490c76c4db2c977095afca82210b6
        Validity
            Not Before: Sep  2 00:00:41 2024 GMT
            Not After : Sep  3 00:00:41 2024 GMT
        Subject: CN=ca936f38d9660b8c2eb98d1ea31e12b303a2e44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:68:bb:de:fd:c0:d8:82:4c:42:3b:5c:04:
                    ee:25:cd:e4:5d:1d:8a:db:66:79:1c:b1:3d:01:d7:
                    67:21:c1:e9:81:ec:c4:6f:61:3a:cd:b8:28:0b:93:
                    27:86:53:3f:7f:7e:e5:f2:b8:72:65:09:ea:a7:83:
                    20:0f:79:43:b2:3e:a5:c3:78:5b:7c:c9:2d:b2:eb:
                    e9:16:eb:a0:f0:f0:16:70:00:71:b9:48:53:80:22:
                    11:d8:fa:df:2f:81:e7:7d:11:a7:d6:27:da:8d:7c:
                    4b:c4:cf:9f:20:01:34:ea:87:9a:42:85:84:11:05:
                    54:e0:e7:84:fe:af:f1:8e:9d:3a:03:c3:73:2e:72:
                    bf:11:2f:e7:79:e8:5b:1d:3c:f8:1e:df:fc:ed:ab:
                    ea:b9:2f:f0:dc:ca:e5:e2:6f:ff:02:8a:4c:2d:5b:
                    08:8b:b8:bf:04:37:c8:61:9a:b2:86:39:a4:08:3b:
                    63:9b:30:57:fc:45:be:2f:e9:69:33:28:0c:db:50:
                    1b:df:f5:76:30:ee:c5:0e:a6:34:6e:80:e6:2a:cb:
                    0f:8b:41:80:12:0a:53:0b:37:d0:5a:ea:05:10:a4:
                    d1:db:2e:b5:5d:c1:c7:e7:53:2d:cd:c2:00:9d:4b:
                    6f:00:fb:29:96:15:82:b2:2d:4f:77:cc:73:b7:fd:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:6F:38:D9:66:0B:8C:2E:B9:8D:1E:A3:1E:12:B3:03:A2:E4:4F
            X509v3 Authority Key Identifier:
                keyid:7F:66:98:06:22:34:90:C7:6C:4D:B2:C9:77:09:5A:FC:A8:22:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2aYBiI0kMdsTbLJdwla_KgiELY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:76:cd:e7:df:26:53:45:f8:61:de:a2:c9:a8:8d:86:1b:
         42:0c:0a:e8:72:7d:74:db:52:dc:0e:64:01:ce:b4:cc:be:70:
         06:48:14:0c:65:1c:fb:53:79:c7:58:dd:8a:f5:f6:ac:b4:3a:
         c7:6e:8f:79:5c:12:c5:81:fb:12:4d:af:2b:86:3a:39:0e:47:
         be:b1:6f:23:10:c8:a2:8c:22:1e:3a:3e:b3:c2:1a:17:ce:68:
         1d:a5:9c:cc:50:82:2c:4e:09:e7:ba:e2:ed:29:b5:62:d7:b6:
         e2:e5:e5:62:00:c3:79:b3:b2:c0:69:84:e4:29:07:40:87:e2:
         f9:13:f9:63:45:56:ef:fb:45:83:19:9b:aa:ab:f2:01:c1:ee:
         34:ba:1f:ce:be:a2:44:fa:16:5b:b0:68:2c:3c:41:53:3c:2f:
         3c:ab:a2:78:09:80:04:a6:b8:b5:6d:0d:d7:58:eb:cc:79:40:
         9a:ac:0b:47:2a:7a:26:8b:a2:1d:0f:2f:d5:82:ed:ea:39:c6:
         ec:1a:ca:69:ef:0d:a9:90:80:a5:46:ae:c7:e4:a7:9d:e2:ba:
         8d:26:13:68:3d:96:73:a1:48:b1:f9:25:a3:14:2d:94:b4:b7:
         96:41:a2:2d:2c:08:21:50:fb:2b:94:5c:b8:dc:58:4b:05:d6:
         2a:b3:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----