Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.mft
File:                     NtDQT18wpUB3MzoFEf_flcKK1go.mft (raw, json)
Hash identifier:          m+JLpgmsWeUnzWA7NPOCpNKSWvgggduy+oUWJQ6LfWo=
Subject key identifier:   28:4B:7F:40:3D:33:77:92:85:AE:B6:83:49:EC:5E:FD:0C:6D:5F:5B
Authority key identifier: 36:D0:D0:4F:5F:30:A5:40:77:33:3A:05:11:FF:DF:95:C2:8A:D6:0A
Certificate issuer:       /CN=36d0d04f5f30a54077333a0511ffdf95c28ad60a
Certificate serial:       018DD3E8A6D0B7F9D6A3FE8FCF8122DF97C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtDQT18wpUB3MzoFEf_flcKK1go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.mft
Manifest number:          05
Signing time:             Fri 23 Feb 2024 03:00:55 +0000
Manifest this update:     Fri 23 Feb 2024 03:00:55 +0000
Manifest next update:     Sat 24 Feb 2024 03:00:55 +0000
Files and hashes:         1: NtDQT18wpUB3MzoFEf_flcKK1go.crl (hash: Rrha3AAma9i/WGEB5fTIzlwzBCmGDw2uAqjFmQuGwrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d3:e8:a6:d0:b7:f9:d6:a3:fe:8f:cf:81:22:df:97:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d0d04f5f30a54077333a0511ffdf95c28ad60a
        Validity
            Not Before: Feb 23 03:00:55 2024 GMT
            Not After : Feb 24 03:00:55 2024 GMT
        Subject: CN=284b7f403d33779285aeb68349ec5efd0c6d5f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:0a:9a:bc:4d:cb:51:c5:f5:31:19:15:51:
                    78:b7:5e:a2:4a:84:da:00:d2:28:07:1a:52:7e:af:
                    c6:9f:dd:3d:cb:03:92:6f:51:4d:26:05:07:93:55:
                    a0:ea:a4:3e:b7:77:72:7c:42:93:a5:cb:e3:04:4d:
                    9c:59:96:77:e4:e3:a3:af:4d:52:f6:02:45:0b:e2:
                    4b:d0:3e:3d:c8:0b:7c:0a:8a:20:60:8f:25:67:39:
                    81:ef:d0:d4:00:55:04:36:d2:99:af:43:34:ad:e4:
                    db:e4:23:ff:55:80:27:40:59:0c:8a:cb:30:1b:93:
                    d9:80:8b:bb:14:60:c4:6c:6f:67:9a:02:d4:90:a2:
                    ac:8f:0d:20:fe:b7:0e:29:57:bc:f4:e0:eb:17:da:
                    94:d9:8f:51:86:af:c3:c1:9f:41:cf:d2:ae:97:fd:
                    a6:7e:f2:b5:0e:d9:d9:5d:55:de:39:9c:d3:dc:31:
                    1c:f2:ca:80:19:42:5a:e2:e7:05:65:d2:d9:01:e4:
                    45:7e:ca:df:57:f6:d7:77:3d:b8:43:79:31:5c:18:
                    63:04:7a:83:51:27:21:c7:ae:18:6c:fe:08:21:4a:
                    dc:13:29:8e:20:cb:d3:58:43:b7:00:f5:4f:86:57:
                    2b:a3:b4:df:ef:6e:f8:39:02:39:39:0c:6a:3e:ca:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:7F:40:3D:33:77:92:85:AE:B6:83:49:EC:5E:FD:0C:6D:5F:5B
            X509v3 Authority Key Identifier:
                keyid:36:D0:D0:4F:5F:30:A5:40:77:33:3A:05:11:FF:DF:95:C2:8A:D6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtDQT18wpUB3MzoFEf_flcKK1go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:ce:b3:c4:a9:18:20:df:2d:75:ec:37:ae:11:ed:04:d2:
         28:6d:d2:0c:d4:f2:1d:c4:de:ca:a5:ff:a8:36:ae:c3:da:c8:
         29:1f:2e:62:2e:1b:9c:1a:91:4d:8a:43:1e:c1:8e:b8:41:70:
         1a:ee:62:81:45:5c:d3:95:49:b1:c2:e3:49:28:1a:cc:f6:c8:
         7c:45:57:d4:7b:da:3c:25:b2:87:14:67:ed:35:ed:22:d6:c7:
         f0:22:44:ab:cc:bc:4f:f6:06:e7:fa:20:92:93:fc:6e:24:e9:
         0f:f3:0f:f1:5b:4d:62:4c:74:5e:43:24:59:47:9f:d5:c7:4d:
         8d:50:08:f1:40:f2:14:57:c2:e2:b9:1a:86:d9:46:9a:04:7f:
         87:e0:9f:4f:78:f1:27:5d:ac:44:b5:78:c0:94:6f:1c:d5:03:
         71:17:1b:24:34:36:6f:3d:22:1e:f8:ac:fc:aa:6d:1d:41:8f:
         d9:0e:d8:67:78:dc:60:0d:2e:c8:65:7f:3c:9e:fe:21:da:fe:
         21:5b:e8:be:e0:e7:ef:02:9f:f1:08:60:ac:bd:5a:91:98:2b:
         52:a8:6e:ad:e5:45:d0:ed:a0:65:2e:c1:ed:10:f5:82:9c:34:
         6a:b2:b7:6a:bb:00:c2:58:7e:1a:84:b1:6d:ba:f0:57:c4:0f:
         b8:cf:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----