Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
File:                     JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft (raw, json)
Hash identifier:          g0lSz/yvDV6o3INLcjwmjFIilIHW2W8uCVj06+EB2Cc=
Subject key identifier:   73:72:A6:A4:47:D0:03:3C:37:68:A1:44:FC:A3:4F:25:74:2C:60:4C
Authority key identifier: 24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD
Certificate issuer:       /CN=24cbd753717d07491a7f7cabaa113ebaa568d2dd
Certificate serial:       018EA7455E59563182C807410BCE923AB1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
Manifest number:          0904
Signing time:             Thu 04 Apr 2024 04:02:04 +0000
Manifest this update:     Thu 04 Apr 2024 04:02:04 +0000
Manifest next update:     Fri 05 Apr 2024 04:02:04 +0000
Files and hashes:         1: JMvXU3F9B0kaf3yrqhE-uqVo0t0.crl (hash: 7YwhT89U6bFe2bcvPVqHfwBle9+31FODp9nUOoKikCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a7:45:5e:59:56:31:82:c8:07:41:0b:ce:92:3a:b1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cbd753717d07491a7f7cabaa113ebaa568d2dd
        Validity
            Not Before: Apr  4 04:02:04 2024 GMT
            Not After : Apr  5 04:02:04 2024 GMT
        Subject: CN=7372a6a447d0033c3768a144fca34f25742c604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:b6:70:c0:54:a8:29:38:b8:94:12:09:84:
                    a0:84:8a:ec:12:a6:e8:62:b2:cf:c0:41:99:ca:9d:
                    21:2c:77:f3:d5:0b:4a:e3:6c:48:08:f7:6d:2c:bd:
                    45:28:13:cf:27:e9:c2:ef:90:8a:0b:99:e9:4c:3b:
                    06:51:33:68:ab:fd:fa:82:1e:9b:a7:45:60:2f:84:
                    16:08:6b:58:45:a6:64:b3:42:64:c6:1b:8f:4d:dd:
                    c8:01:d8:33:ec:20:3e:4c:bb:53:79:2a:2a:22:ce:
                    74:31:19:1e:04:e3:7f:43:e9:88:b1:c4:e1:04:ce:
                    f2:4b:8d:cd:00:25:cb:37:b0:6d:89:9d:c1:ce:fe:
                    cd:c9:d0:6d:c9:47:5a:ab:2f:df:d1:30:ea:22:3a:
                    0e:83:2e:53:ff:f5:8e:49:69:25:3c:03:90:48:61:
                    d8:40:16:b3:3e:9b:9f:31:c9:ac:e3:9d:02:75:fc:
                    3e:94:80:fd:c8:ab:73:61:47:3b:4c:bc:69:68:2f:
                    80:21:cc:c9:04:fd:a8:9a:b4:f7:2d:a1:04:df:5e:
                    40:bb:47:ec:77:08:97:ba:cc:09:3e:35:5f:42:1c:
                    e5:c2:eb:6e:c6:e0:9d:61:f2:84:d7:86:69:0f:9a:
                    74:3c:bc:c1:e0:f1:1e:9c:ec:11:1b:69:04:3b:d6:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:A6:A4:47:D0:03:3C:37:68:A1:44:FC:A3:4F:25:74:2C:60:4C
            X509v3 Authority Key Identifier:
                keyid:24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:cb:76:70:d9:81:14:26:11:e2:16:0d:6d:bb:5b:62:cc:
         9e:01:76:9c:b4:b7:04:fb:aa:d9:c8:d8:5f:ff:53:78:4f:79:
         b1:62:1d:d8:77:b3:b9:aa:95:40:ba:16:95:c3:ac:5a:c9:7f:
         2c:27:67:e3:11:3f:04:d5:e6:cd:63:f5:20:5c:02:c6:5b:fb:
         02:30:c8:48:2d:45:74:c1:4e:de:c9:5a:c8:eb:d9:90:47:4c:
         48:f9:bd:e5:17:16:37:71:53:ad:bb:6b:4d:6d:06:ea:9d:2e:
         d8:81:f0:83:ec:90:06:1d:ce:5e:54:e8:71:06:3b:e2:7c:81:
         51:ce:2d:40:06:e6:69:d2:b1:a9:6b:0e:88:78:39:e7:e0:3e:
         f7:39:25:90:5f:e1:e5:32:34:51:a3:38:25:82:7a:e3:08:51:
         75:03:44:55:99:c6:db:bc:c5:a1:9e:5c:ee:16:1b:5a:95:0e:
         3a:e8:c2:92:96:bf:4c:a7:76:ca:a6:4e:68:fd:ce:94:0c:1e:
         1a:d1:32:af:8b:cc:a5:00:63:7b:5b:48:af:69:9a:ab:b7:7a:
         30:fc:40:c5:8a:3e:22:15:b7:2e:67:6d:10:f7:83:f8:3d:88:
         94:cc:d8:2d:56:b3:c3:83:36:af:02:a0:62:e8:08:69:a9:94:
         5b:74:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----