Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft
File:                     1-_Q_6f068rz0unqD8RHmVZEl8_0.mft (raw, json)
Hash identifier:          WXw81RmUUh1MX68fA3kCGL16Q3CfnUJguNPQ+357dxk=
Subject key identifier:   6D:53:F7:A5:0F:F9:DA:4A:65:80:69:08:D7:36:0A:21:28:F7:6D:CB
Authority key identifier: FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
Certificate issuer:       /CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Certificate serial:       0192512F2B9DFA5160A40AADB220DBCD23BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft
Manifest number:          0A2C
Signing time:             Thu 03 Oct 2024 07:01:38 +0000
Manifest this update:     Thu 03 Oct 2024 07:01:38 +0000
Manifest next update:     Fri 04 Oct 2024 07:01:38 +0000
Files and hashes:         1: 1-_Q_6f068rz0unqD8RHmVZEl8_0.crl (hash: M5+0o5M0Ss1Sf6zWk0IJAxLlw4SWJOVuNzvZGWTcUaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:51:2f:2b:9d:fa:51:60:a4:0a:ad:b2:20:db:cd:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
        Validity
            Not Before: Oct  3 07:01:38 2024 GMT
            Not After : Oct  4 07:01:38 2024 GMT
        Subject: CN=6d53f7a50ff9da4a65806908d7360a2128f76dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:7c:3c:81:42:ed:40:0c:9c:09:85:2f:67:
                    f4:87:34:17:d2:33:10:03:2b:36:7c:a1:3c:94:55:
                    69:91:55:a9:fe:8f:e3:6f:ba:dd:d9:4d:fb:fa:d1:
                    1f:c7:b9:54:b0:92:48:0b:22:fa:55:cb:4f:bc:82:
                    9c:bc:e7:87:e0:9b:0a:7c:ca:9a:e9:46:af:52:10:
                    5b:c9:32:f7:88:a8:69:5d:df:06:9c:9c:56:56:68:
                    10:66:a5:d0:7f:61:79:c8:2c:95:bb:02:87:b4:be:
                    9b:ff:db:a8:38:56:fd:b0:7a:19:17:59:81:53:06:
                    bc:1c:b1:c4:41:60:7a:b5:58:cf:48:b1:ae:c7:f7:
                    f1:16:c1:61:52:fc:ac:c0:3d:e9:71:8e:58:d1:ca:
                    87:cd:42:d8:01:38:3a:d6:bb:9e:f8:66:d5:3b:b3:
                    4d:e6:2d:fb:a2:44:1f:f2:aa:c5:7b:35:d9:c8:31:
                    2c:22:a0:45:aa:b5:8d:b4:da:2d:c4:4f:c8:f9:fc:
                    be:67:c2:83:10:df:ab:71:9d:96:a5:22:71:90:bd:
                    f6:ff:94:dc:78:15:55:a5:d4:43:47:5d:c7:b8:16:
                    64:53:d5:fb:8f:7f:74:fc:7b:db:e3:c1:6d:e8:ad:
                    12:ce:73:f1:a8:7d:0d:ce:b1:f3:85:47:94:fc:72:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:F7:A5:0F:F9:DA:4A:65:80:69:08:D7:36:0A:21:28:F7:6D:CB
            X509v3 Authority Key Identifier:
                keyid:FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:e5:05:cd:3d:4e:89:a6:3e:30:da:29:2e:94:f2:1c:62:
         97:f1:4e:ed:e9:23:fb:f9:d9:ef:a8:9d:98:3c:98:70:5e:a1:
         90:10:b9:be:fa:a4:2a:68:df:75:6f:ce:49:93:ec:c9:0d:91:
         e0:1c:e3:c7:df:40:24:49:b9:32:3a:6c:a4:4f:a8:61:42:a3:
         f1:cb:d3:59:4c:c6:d5:74:0f:5c:b3:2c:89:35:85:82:5f:52:
         dd:32:6a:19:69:06:04:78:41:fd:a7:a4:c6:bf:68:cb:46:c4:
         54:2b:3f:07:57:02:b8:2b:64:8b:38:01:7c:92:b2:27:15:18:
         ee:32:12:06:0d:7e:01:f6:86:c2:ab:05:7c:90:85:59:1a:08:
         c7:ac:b9:66:63:a2:6d:5f:52:4d:dc:63:fa:15:45:d2:86:3c:
         00:d3:9e:bd:aa:eb:b6:3c:63:40:22:2e:4e:08:70:6c:82:40:
         19:aa:fe:2c:31:9c:12:7a:00:6a:8a:42:2c:67:17:90:c6:63:
         83:27:b7:98:6e:eb:0c:b0:cc:96:21:f2:13:83:ff:22:a4:4d:
         1d:7f:5b:d7:eb:b1:15:67:76:c7:93:a4:e3:4e:a2:ff:06:a1:
         78:f9:bc:e0:42:5c:7f:2a:a5:7a:15:cc:fb:ea:7e:53:29:7e:
         73:1d:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----