Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.mft
File:                     fJxduoPgaBb-asZhO0HNe24vWsk.mft (raw, json)
Hash identifier:          eodyxIW6ufDbY84bkkW9nXiIwiUYEiLX//aR95YB7zY=
Subject key identifier:   64:72:03:7C:2B:A5:CD:C7:8B:D2:5F:14:B7:BB:7A:16:73:63:83:D9
Authority key identifier: 7C:9C:5D:BA:83:E0:68:16:FE:6A:C6:61:3B:41:CD:7B:6E:2F:5A:C9
Certificate issuer:       /CN=7c9c5dba83e06816fe6ac6613b41cd7b6e2f5ac9
Certificate serial:       018E603E57D8398DE84AE152AA11B85F05B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJxduoPgaBb-asZhO0HNe24vWsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.mft
Manifest number:          10DB
Signing time:             Thu 21 Mar 2024 09:01:22 +0000
Manifest this update:     Thu 21 Mar 2024 09:01:22 +0000
Manifest next update:     Fri 22 Mar 2024 09:01:22 +0000
Files and hashes:         1: fJxduoPgaBb-asZhO0HNe24vWsk.crl (hash: fcwCtHNbpHPNXPsmqbRQFS4RHoop5/kRHbjJuMl6+ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:60:3e:57:d8:39:8d:e8:4a:e1:52:aa:11:b8:5f:05:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9c5dba83e06816fe6ac6613b41cd7b6e2f5ac9
        Validity
            Not Before: Mar 21 09:01:22 2024 GMT
            Not After : Mar 22 09:01:22 2024 GMT
        Subject: CN=6472037c2ba5cdc78bd25f14b7bb7a16736383d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:64:78:b7:19:db:ca:1d:a6:29:ad:87:dd:
                    30:2c:a5:51:79:91:9e:89:b3:7e:10:96:8e:22:5c:
                    9e:ed:7b:fc:d1:81:0d:ed:97:ce:c5:48:9c:10:96:
                    2c:20:01:53:69:2d:ea:23:fa:96:45:b2:60:67:c2:
                    c9:f3:42:a7:ad:09:ae:35:6c:c2:a3:f6:ec:dd:61:
                    ca:c1:53:8b:94:ed:3f:27:d7:74:bd:b3:72:93:59:
                    9e:cb:4b:0f:f6:62:1e:bd:3a:e5:cf:2d:c4:e3:ed:
                    57:85:6e:19:91:8d:01:d6:d0:4b:b7:5a:eb:b5:71:
                    8a:20:bd:59:78:4c:35:24:47:0d:a3:25:76:bc:f9:
                    04:5d:60:8b:97:a8:76:44:13:a2:d1:25:82:04:5b:
                    27:9a:2c:2d:16:5b:2d:7c:7d:ca:70:28:d6:89:bc:
                    43:be:f6:89:a5:be:f0:db:26:ec:1a:55:8d:0a:7e:
                    f6:7e:89:a1:32:a6:66:54:7d:4b:3a:74:32:99:26:
                    46:c5:61:1b:a0:4a:72:d7:7f:f0:19:35:8b:a7:42:
                    c0:af:85:58:38:7b:ee:97:f2:59:14:1d:d7:cf:2d:
                    9e:80:f7:db:76:2b:af:75:1b:aa:1a:93:55:c7:7c:
                    4d:2b:f1:00:ea:b1:63:e5:9f:af:18:e9:50:67:9d:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:03:7C:2B:A5:CD:C7:8B:D2:5F:14:B7:BB:7A:16:73:63:83:D9
            X509v3 Authority Key Identifier:
                keyid:7C:9C:5D:BA:83:E0:68:16:FE:6A:C6:61:3B:41:CD:7B:6E:2F:5A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJxduoPgaBb-asZhO0HNe24vWsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:a4:02:d1:87:52:83:92:51:6a:4a:b8:c7:f7:f2:33:56:
         b9:89:8a:a8:0f:bf:30:43:c3:19:a0:3c:9d:fc:95:6d:5b:db:
         f0:6d:ff:73:4a:f9:44:85:e3:f0:7b:c5:f3:0a:f3:aa:a3:a0:
         62:8d:b4:b1:3f:0b:85:84:ca:94:1b:8e:97:64:4d:da:7b:a8:
         4c:bd:35:8a:83:8f:a7:6a:bf:74:44:b1:77:af:61:13:63:41:
         b4:c3:f0:9b:16:38:9b:e7:58:73:b1:5d:fd:02:97:a1:cf:62:
         41:df:42:0f:9b:d1:48:5f:47:f9:e4:91:22:53:8c:cf:18:dc:
         23:8d:7e:34:18:0d:db:32:9d:35:fd:c0:f6:c1:a2:cd:96:ff:
         c3:13:20:fa:f7:b1:49:b1:46:3a:9a:41:8d:ce:d3:e1:60:e8:
         f4:a5:2c:30:4f:4e:10:9f:f8:da:f8:4a:44:e6:7b:e6:1f:e1:
         50:bb:d4:39:60:50:e2:28:4f:e7:46:aa:23:c8:35:ac:0c:f4:
         f9:bb:c1:42:04:4c:77:de:82:47:0c:77:2a:21:fd:32:93:14:
         bb:06:b6:38:e2:48:c6:85:c3:6a:b9:82:e2:a4:db:98:53:69:
         fd:0a:07:9b:c4:74:7d:da:3f:1c:13:30:a9:aa:88:9a:af:06:
         9c:87:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----