Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
File:                     VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft (raw, json)
Hash identifier:          6jf3dnhtMmAgeN4kmaJK/nP1hQiPq7eFc1mNOnqoTjk=
Subject key identifier:   1B:E0:AA:1D:60:B7:9D:0E:56:40:DC:56:7C:01:A9:AA:D8:EE:08:1C
Authority key identifier: 56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4
Certificate issuer:       /CN=56d53b9d881668044e5dcd09d5d1a04b95388fc4
Certificate serial:       018F9DD07DF329BAE6A4C18D9CB9D3833A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
Manifest number:          1116
Signing time:             Wed 22 May 2024 01:00:37 +0000
Manifest this update:     Wed 22 May 2024 01:00:37 +0000
Manifest next update:     Thu 23 May 2024 01:00:37 +0000
Files and hashes:         1: VtU7nYgWaAROXc0J1dGgS5U4j8Q.crl (hash: emhUof+TV270CxaAg+xqwZrP2WMCUkgDR1GCJsf6594=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9d:d0:7d:f3:29:ba:e6:a4:c1:8d:9c:b9:d3:83:3a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d53b9d881668044e5dcd09d5d1a04b95388fc4
        Validity
            Not Before: May 22 01:00:37 2024 GMT
            Not After : May 23 01:00:37 2024 GMT
        Subject: CN=1be0aa1d60b79d0e5640dc567c01a9aad8ee081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:f1:1b:2b:67:18:e9:13:57:57:5e:46:91:
                    35:29:d5:8f:9e:9a:c9:d4:44:1b:7c:2c:6c:00:5d:
                    b2:af:bd:1b:36:99:2a:37:aa:68:d5:d6:f3:dd:3d:
                    46:95:d8:2f:d4:30:98:1e:7e:fe:b3:ce:c1:bc:99:
                    45:4b:55:46:79:7d:35:4d:c9:68:a9:a1:b8:77:4a:
                    64:f5:01:88:c1:bc:62:a7:44:6d:a2:71:1c:34:c8:
                    5a:75:5e:7b:39:7f:af:27:3c:06:0d:27:45:9b:07:
                    ba:83:d0:17:63:0d:ed:d2:e9:18:9b:08:b9:9c:e4:
                    89:7d:a2:62:9d:97:ce:92:f4:a6:42:d2:7e:66:ac:
                    2d:9b:ea:66:41:60:8d:e3:da:c5:ab:14:1b:14:d1:
                    12:9a:f6:65:d4:6e:7b:06:6a:73:c8:87:68:e4:76:
                    ba:38:f0:a4:fe:c3:e4:9f:40:be:03:a4:32:bd:42:
                    d0:4b:12:5c:cc:12:01:78:3e:3d:0d:e6:fb:c4:a9:
                    e4:1b:05:1b:23:2e:a4:b0:60:39:6b:95:40:14:34:
                    84:da:03:47:d1:e7:92:96:2e:fc:f0:ed:31:2b:83:
                    50:70:10:91:18:56:f0:cf:0e:86:6b:33:ef:9c:c7:
                    4c:38:d2:78:8c:d7:36:ee:02:e9:db:b0:68:58:43:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E0:AA:1D:60:B7:9D:0E:56:40:DC:56:7C:01:A9:AA:D8:EE:08:1C
            X509v3 Authority Key Identifier:
                keyid:56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8e:d5:6d:2f:35:b5:ce:7b:80:3c:b6:d9:43:09:87:72:75:
         5f:54:e7:04:4c:7c:62:05:4d:09:02:df:bb:37:ba:40:c1:2b:
         83:75:34:da:85:74:90:51:4c:78:2c:72:13:ed:53:9f:84:58:
         35:ce:1b:bd:12:49:2a:6e:c0:32:00:35:52:b5:79:cf:09:9f:
         24:b1:c5:a9:c9:eb:22:d7:76:88:8d:fc:d6:4b:d6:ac:8f:c9:
         01:37:9d:d8:db:e6:eb:5c:c9:d7:8a:74:0f:a1:00:cb:fd:8c:
         6f:e8:6a:fc:4c:9e:72:c4:5b:1c:0f:89:d4:49:17:63:73:81:
         81:d1:b6:aa:16:e2:12:25:1a:ed:1c:1f:43:79:c2:25:15:f7:
         7a:49:d5:79:01:db:1c:31:4b:46:7a:ae:f0:b5:96:f9:4f:2a:
         44:76:7b:1a:ff:01:3e:71:3f:35:a8:80:30:d4:c8:c9:ef:f1:
         9b:1f:70:e2:dd:68:15:29:8b:c0:13:a1:ff:62:b2:90:20:96:
         f3:0b:8e:73:c8:45:6c:72:07:e9:3c:02:57:e7:fd:4e:85:2d:
         ce:a9:75:5f:b7:19:d3:cd:65:22:2a:49:f3:73:3f:32:e6:45:
         ae:b4:5a:72:9f:7e:69:7c:2a:86:a2:06:b7:c9:a4:67:c0:37:
         aa:6d:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----