Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft
File:                     9feRXSv70QeuOdnp1_1NTqb0G6Q.mft (raw, json)
Hash identifier:          6Q/mdFjBW4MP4NxHdlU9z81fv1FTnHc3A2wJS2OO6Ho=
Subject key identifier:   BF:01:7B:81:DE:A9:25:0C:96:4A:E4:D1:B1:FB:45:98:BD:EB:9A:E3
Authority key identifier: F5:F7:91:5D:2B:FB:D1:07:AE:39:D9:E9:D7:FD:4D:4E:A6:F4:1B:A4
Certificate issuer:       /CN=f5f7915d2bfbd107ae39d9e9d7fd4d4ea6f41ba4
Certificate serial:       01914B306A19F3528A5012245DA5DA8292AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9feRXSv70QeuOdnp1_1NTqb0G6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft
Manifest number:          0D5D
Signing time:             Tue 13 Aug 2024 10:02:29 +0000
Manifest this update:     Tue 13 Aug 2024 10:02:29 +0000
Manifest next update:     Wed 14 Aug 2024 10:02:29 +0000
Files and hashes:         1: 9feRXSv70QeuOdnp1_1NTqb0G6Q.crl (hash: w7wRav6sT6fbgMU/mHNkAn/bNZCW2ldWc12SLUIbZVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4b:30:6a:19:f3:52:8a:50:12:24:5d:a5:da:82:92:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f7915d2bfbd107ae39d9e9d7fd4d4ea6f41ba4
        Validity
            Not Before: Aug 13 10:02:29 2024 GMT
            Not After : Aug 14 10:02:29 2024 GMT
        Subject: CN=bf017b81dea9250c964ae4d1b1fb4598bdeb9ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:33:66:29:bf:6c:0c:35:a8:43:6d:66:37:
                    80:e1:de:26:f5:3e:b6:2d:25:1c:76:2e:38:e7:83:
                    f5:19:c8:36:bb:79:1c:b7:35:7e:b4:cb:e3:46:8f:
                    d6:a5:c4:cb:22:a3:c1:ff:3c:65:ae:bb:6e:2e:a7:
                    d1:1b:b3:18:3a:d7:ff:d7:c3:c4:4a:b4:7f:7c:20:
                    9e:9c:45:c4:c2:98:00:c5:9d:ec:7b:a1:53:44:ca:
                    be:1a:c4:5a:ce:41:e1:b6:d3:9a:4a:56:59:f2:8c:
                    4c:9d:75:6b:8e:d9:c5:aa:ce:7c:2f:74:df:bb:65:
                    2d:f1:31:f1:33:cb:9d:cd:84:10:14:6b:7e:c3:c6:
                    56:ee:62:3a:ee:09:d3:49:da:86:7d:35:c5:b1:0d:
                    57:9b:22:c5:67:a1:27:74:15:ce:9d:16:43:44:6b:
                    9f:21:75:95:83:f2:a6:f3:86:c3:6d:ce:cc:19:8e:
                    0a:da:ba:18:73:14:80:ec:65:6c:3b:32:1c:e3:d7:
                    bb:a3:93:ea:2c:3e:ef:18:9c:e3:a7:20:45:b6:85:
                    ec:ea:46:be:39:ab:65:05:9e:07:82:1d:89:9f:36:
                    09:3e:00:a7:d9:59:f7:0a:92:00:90:fe:9d:43:ab:
                    00:95:fb:d6:70:1a:4e:9a:76:8d:e3:7d:6a:cf:f3:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:7B:81:DE:A9:25:0C:96:4A:E4:D1:B1:FB:45:98:BD:EB:9A:E3
            X509v3 Authority Key Identifier:
                keyid:F5:F7:91:5D:2B:FB:D1:07:AE:39:D9:E9:D7:FD:4D:4E:A6:F4:1B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9feRXSv70QeuOdnp1_1NTqb0G6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:9b:bb:ce:39:13:37:dc:3c:3e:3f:82:5a:33:a5:dd:9c:
         f0:9e:8f:ad:67:59:f6:3c:ca:ef:e0:7a:f0:0a:54:ac:33:f0:
         12:79:19:da:f9:9d:f7:d3:7b:90:46:3a:87:b9:a6:c8:05:79:
         c8:28:dc:6e:d7:06:04:6d:92:8f:65:4a:d9:20:df:22:59:ee:
         ae:6b:aa:f8:bf:7f:0e:21:e2:44:01:ea:2f:b2:97:8a:bb:d5:
         a1:d8:76:71:a4:e5:e2:85:a1:71:50:1f:92:cb:a9:00:45:a3:
         6a:31:68:a4:f8:0f:b1:1c:f7:ba:bd:8d:7b:4e:dc:38:26:00:
         46:f0:2d:90:df:a8:77:48:5d:a5:f9:d5:7d:c3:46:4f:29:9f:
         70:92:e0:29:b0:ea:0d:b3:31:70:5b:9e:ba:e2:38:2f:c5:39:
         d4:21:5e:1b:16:f4:39:59:a4:6b:a8:fc:98:93:39:65:ca:db:
         70:2e:2c:c5:2b:bf:2b:28:ab:5d:44:05:2a:82:ef:22:2e:27:
         a5:81:2c:d9:1d:0e:30:0d:38:61:28:e7:1d:c8:b8:f7:a3:ef:
         d4:d3:af:6d:23:a7:ec:0b:b1:6d:73:0e:cf:0b:ab:2c:95:de:
         25:6d:42:33:a3:f4:76:2d:f1:fd:af:0e:1d:e8:33:2a:72:37:
         3e:33:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----