Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.mft
File:                     EDJ535BdcdKxrxXFq_KPZqsBmi0.mft (raw, json)
Hash identifier:          4ood6U00ZYl43/ZuVg0Y6w8dEspAsZAQRRZ3o6Xz2cs=
Subject key identifier:   76:79:B3:17:6C:55:38:A6:1E:AF:0D:AC:50:E6:6C:37:8A:3C:81:E7
Authority key identifier: 10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D
Certificate issuer:       /CN=103279df905d71d2b1af15c5abf28f66ab019a2d
Certificate serial:       018F26B978F889CCC8652A98CA5EF5ACA2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.mft
Manifest number:          1147
Signing time:             Sun 28 Apr 2024 22:00:40 +0000
Manifest this update:     Sun 28 Apr 2024 22:00:40 +0000
Manifest next update:     Mon 29 Apr 2024 22:00:40 +0000
Files and hashes:         1: EDJ535BdcdKxrxXFq_KPZqsBmi0.crl (hash: hDBfgpmv0igQYSF1AkeLM4/ui+M5vPe2IJwbp+Zu8CM=)
                          2: kSu0jCbkorv460Q0Dc9AY5NHtSs.roa (hash: KFCAL4bi1mKXh/DaYtf9BO6fe+ex+nDmeSXhSzDe4nI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:26:b9:78:f8:89:cc:c8:65:2a:98:ca:5e:f5:ac:a2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103279df905d71d2b1af15c5abf28f66ab019a2d
        Validity
            Not Before: Apr 28 22:00:40 2024 GMT
            Not After : Apr 29 22:00:40 2024 GMT
        Subject: CN=7679b3176c5538a61eaf0dac50e66c378a3c81e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:aa:69:3a:80:a5:d3:b1:21:06:f0:fb:30:
                    00:3a:bf:74:c4:4e:27:f7:d8:57:b2:e4:8d:b2:47:
                    3b:b7:24:c6:a6:d8:86:89:5d:9d:ed:d7:e7:41:05:
                    77:fa:bd:68:62:1a:54:5d:5c:63:4a:94:9f:30:cd:
                    79:c3:15:c2:a0:6b:72:e9:88:23:35:29:d8:40:23:
                    ad:15:6a:61:b3:6d:f2:57:f4:3b:70:7c:78:1a:92:
                    41:02:55:25:34:0c:b6:01:3e:e5:90:e8:45:5f:db:
                    97:6e:f2:f3:58:25:c4:f4:7f:7d:86:ba:a9:cc:96:
                    a4:cb:1b:b2:54:4d:23:10:da:5d:80:a6:7e:89:4d:
                    96:c3:db:04:1b:42:04:93:b5:75:0a:39:e6:17:d2:
                    a8:22:97:0e:bc:76:a9:90:7b:ec:3a:2a:4f:a7:d9:
                    9d:b8:b9:d2:96:19:24:78:03:b6:b8:8b:bf:0d:15:
                    7a:37:3a:1d:68:69:c1:19:b5:38:ca:93:6b:55:3e:
                    8b:88:99:f1:a1:c8:56:65:5b:64:a6:c9:a9:95:3f:
                    a7:4a:ba:14:94:43:90:2a:39:7e:fa:a7:c8:0c:b9:
                    8c:d8:d3:d3:a5:c7:a0:e6:97:8d:44:6f:d5:67:8a:
                    b6:5a:0f:cc:5d:6b:58:0a:8b:01:d4:a9:34:ea:c0:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:B3:17:6C:55:38:A6:1E:AF:0D:AC:50:E6:6C:37:8A:3C:81:E7
            X509v3 Authority Key Identifier:
                keyid:10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:39:f9:fb:90:47:9c:f5:a2:e1:51:71:bd:29:b6:73:72:d1:
         e1:2f:9b:3f:50:45:95:69:7b:0f:a9:a7:e9:92:6e:28:50:5d:
         c4:b7:9b:a6:94:f7:7f:7d:25:37:89:2a:f4:55:13:4a:16:98:
         64:8a:9b:63:ae:0f:26:dc:06:b3:d2:8f:67:a3:de:56:2b:25:
         91:d0:aa:fa:a1:27:54:c3:c3:0a:77:c4:a6:80:b3:5d:4d:9d:
         40:a3:af:5b:17:7e:a9:01:ef:8f:d7:f1:1e:94:58:6a:8e:d7:
         9e:0d:ea:cf:2d:34:34:96:f7:f9:b5:25:92:69:92:62:ee:38:
         fa:2a:b4:93:87:52:d9:7f:9d:24:3c:da:dc:aa:5f:2a:d2:0b:
         a8:21:ce:55:40:0c:f8:44:18:27:bc:68:a7:3c:3b:af:5e:04:
         42:08:2c:81:58:fb:d2:b4:4b:fa:c1:cf:c7:2c:66:81:3d:85:
         d6:86:b7:a6:9e:31:80:5f:f4:f5:b2:a6:08:38:62:4a:87:86:
         ca:fd:e4:22:c4:4b:2b:1b:d8:88:c7:df:d1:b2:0a:9f:b9:8f:
         4b:d1:ca:5c:9e:17:0a:69:a0:58:b7:6a:7e:98:75:53:9e:4b:
         98:bc:86:87:c9:b1:6a:c0:f0:7b:3b:ee:25:1d:08:1f:0a:96:
         00:65:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----