Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d1f873-0c16-493e-8008-874c8a57db8e/1/3M0OCPE68618Lj2kWmClZa8CbSc.mft
File:                     3M0OCPE68618Lj2kWmClZa8CbSc.mft (raw, json)
Hash identifier:          aO5KSpV9HhnjXCsPyDzlRgATwDt+bk/7/5Gb0hs8NyM=
Subject key identifier:   FF:DC:A6:EF:48:63:3B:C1:13:1D:6D:42:9E:86:46:EC:23:00:DE:42
Authority key identifier: DC:CD:0E:08:F1:3A:F3:AD:7C:2E:3D:A4:5A:60:A5:65:AF:02:6D:27
Certificate issuer:       /CN=dccd0e08f13af3ad7c2e3da45a60a565af026d27
Certificate serial:       018EFE994592B42525F51DBC305202B261C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3M0OCPE68618Lj2kWmClZa8CbSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d1f873-0c16-493e-8008-874c8a57db8e/1/3M0OCPE68618Lj2kWmClZa8CbSc.mft
Manifest number:          046B
Signing time:             Sun 21 Apr 2024 03:00:41 +0000
Manifest this update:     Sun 21 Apr 2024 03:00:41 +0000
Manifest next update:     Mon 22 Apr 2024 03:00:41 +0000
Files and hashes:         1: 3M0OCPE68618Lj2kWmClZa8CbSc.crl (hash: NyKK/xmcXcgXlTwiPEpbNymOzACo7Kj99/z67tE7V2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fe:99:45:92:b4:25:25:f5:1d:bc:30:52:02:b2:61:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccd0e08f13af3ad7c2e3da45a60a565af026d27
        Validity
            Not Before: Apr 21 03:00:41 2024 GMT
            Not After : Apr 22 03:00:41 2024 GMT
        Subject: CN=ffdca6ef48633bc1131d6d429e8646ec2300de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:3e:6f:02:2e:62:f0:a3:71:64:0c:fb:1f:
                    79:4e:e6:71:86:f7:15:b3:ee:e8:f1:90:e0:80:ed:
                    87:71:4f:08:ac:bb:f9:25:51:35:96:ac:fd:af:60:
                    63:52:70:f4:f2:c7:23:4b:4e:80:6b:20:33:26:6f:
                    f5:32:cf:0a:e2:05:dc:73:45:c2:52:6e:ba:ce:ee:
                    38:83:ff:f6:3e:ca:b4:10:19:11:71:10:bc:df:f7:
                    c5:60:4b:fb:f5:7c:35:00:dc:76:9e:48:d7:4b:ff:
                    bd:21:72:ca:c1:fb:04:5e:a4:39:55:c7:44:2f:93:
                    fb:31:67:e2:e7:ae:12:d5:f7:cb:36:d4:67:7e:3a:
                    69:ce:9a:06:5b:e8:3f:0a:c1:5a:50:f4:29:37:b4:
                    7c:16:8c:b9:e4:d1:af:5e:f6:e7:34:99:e0:10:3e:
                    61:57:43:e4:0c:bd:e4:c5:f6:1e:37:93:a2:f3:21:
                    37:ae:f2:6f:d9:97:89:68:68:b4:92:5c:4f:f4:c9:
                    27:9b:1b:a0:e5:ab:7c:5a:dc:20:ba:92:bf:64:c8:
                    68:c5:7e:d8:67:d8:26:99:c0:74:82:df:cc:3c:dd:
                    29:ab:6b:ff:92:aa:30:52:ea:e7:ff:43:b1:64:dd:
                    84:a2:39:93:bb:d6:fd:ca:38:d0:48:49:bb:58:45:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:A6:EF:48:63:3B:C1:13:1D:6D:42:9E:86:46:EC:23:00:DE:42
            X509v3 Authority Key Identifier:
                keyid:DC:CD:0E:08:F1:3A:F3:AD:7C:2E:3D:A4:5A:60:A5:65:AF:02:6D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3M0OCPE68618Lj2kWmClZa8CbSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d1f873-0c16-493e-8008-874c8a57db8e/1/3M0OCPE68618Lj2kWmClZa8CbSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d1f873-0c16-493e-8008-874c8a57db8e/1/3M0OCPE68618Lj2kWmClZa8CbSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:5a:36:9c:f8:f2:61:c1:03:2b:38:20:07:3c:18:c0:66:
         c9:64:ab:54:af:ba:5d:e8:bf:78:1a:91:5f:4b:ce:36:a4:54:
         5e:55:22:11:a7:3e:f7:c8:73:84:7a:95:70:79:1c:23:46:b7:
         6d:f5:f1:f4:f0:01:1d:51:30:9e:e9:25:da:df:3c:f9:81:b3:
         b8:71:b0:ae:ab:f4:80:49:37:86:19:78:ab:ea:aa:86:88:d4:
         62:20:ed:9a:22:a1:a0:de:0e:a8:8a:55:10:20:07:b9:08:97:
         9c:38:b6:3f:ca:33:1f:2c:79:13:c2:50:4e:d7:51:f1:d1:d1:
         f8:fd:99:6d:c0:31:51:d9:75:44:6f:75:3d:e1:8c:03:58:c2:
         ed:1f:62:65:f1:1e:9f:d4:9c:20:32:84:e3:b9:8d:77:14:77:
         c8:c1:c8:ef:3b:dd:9a:af:7c:f1:49:07:b1:9b:05:f2:b1:75:
         80:10:5d:f2:60:a3:f8:33:c4:e4:7e:e2:24:15:10:90:b4:60:
         63:ae:64:a0:e8:d7:4b:8d:be:9a:41:02:64:6e:bd:06:8f:81:
         df:27:28:bf:df:86:00:1c:8d:fe:f7:8d:5b:85:98:dc:aa:18:
         6f:b8:2e:f3:b4:02:bb:ce:c6:54:76:4d:1f:8f:71:71:96:ee:
         61:8e:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----