Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
File:                     BmTWaI0BWWgFqVshZE17KB8mPiQ.mft (raw, json)
Hash identifier:          bKM8NljIXfnVa4vpPPZjrwXZkwxIybwmG6aYnOBlXow=
Subject key identifier:   84:82:53:8A:C8:57:F3:60:09:4E:75:40:A6:A8:FD:2C:9D:8E:C9:0C
Authority key identifier: 06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24
Certificate issuer:       /CN=0664d6688d01596805a95b21644d7b281f263e24
Certificate serial:       01921DB15A8FF54B3E07E4538DAC8DCEE9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
Manifest number:          0730
Signing time:             Mon 23 Sep 2024 07:03:35 +0000
Manifest this update:     Mon 23 Sep 2024 07:03:35 +0000
Manifest next update:     Tue 24 Sep 2024 07:03:35 +0000
Files and hashes:         1: BmTWaI0BWWgFqVshZE17KB8mPiQ.crl (hash: HDF8FNacNYV//h2vHJUkDl/laak4lxkDs+DIEfwiu1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1d:b1:5a:8f:f5:4b:3e:07:e4:53:8d:ac:8d:ce:e9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0664d6688d01596805a95b21644d7b281f263e24
        Validity
            Not Before: Sep 23 07:03:35 2024 GMT
            Not After : Sep 24 07:03:35 2024 GMT
        Subject: CN=8482538ac857f360094e7540a6a8fd2c9d8ec90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:17:0a:8c:b4:02:e0:1d:80:da:d6:57:69:
                    07:23:49:59:5a:28:42:ed:a1:02:d2:04:b6:19:84:
                    37:82:aa:bb:45:d1:88:80:d5:28:e8:fd:62:4c:1f:
                    9f:ce:32:7a:a3:d3:92:17:06:c3:89:0b:55:b5:ab:
                    36:53:0d:3a:1b:12:c2:b1:19:83:19:c0:e8:fc:ca:
                    c0:b9:76:c7:54:ba:ee:79:49:c7:af:64:3c:67:ad:
                    c4:d5:52:58:80:35:db:f4:5b:70:fc:a0:2e:d5:f9:
                    58:41:ef:d0:31:8a:37:23:32:f9:6b:66:51:a8:a8:
                    c8:ea:a4:71:4c:f6:6c:cd:de:d0:f3:36:40:34:0a:
                    78:68:26:7b:c6:83:b3:ce:e5:0d:0a:a4:26:b7:68:
                    19:0a:15:12:b6:00:f8:9c:a6:d9:50:d5:e3:ce:00:
                    0d:e2:22:7b:c7:21:f8:bb:5a:28:72:8b:01:6f:60:
                    f8:3b:4f:0b:70:ee:39:84:ad:db:fe:da:73:b8:0f:
                    47:de:83:ae:c1:87:e9:ec:4b:54:db:b3:74:79:0d:
                    dc:7b:47:25:37:75:2d:54:10:c4:c5:97:bf:d3:8a:
                    4b:a8:3a:3b:37:05:f1:34:8b:3a:05:a9:7c:68:0c:
                    b6:4f:cf:b1:66:ad:31:99:c1:22:f0:7d:5c:60:e1:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:82:53:8A:C8:57:F3:60:09:4E:75:40:A6:A8:FD:2C:9D:8E:C9:0C
            X509v3 Authority Key Identifier:
                keyid:06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:60:11:a0:66:63:6e:a6:d4:86:e3:5b:3a:83:58:a1:a1:ea:
         f6:73:f9:53:9c:c9:11:c6:2c:c1:55:3a:2e:01:be:08:7e:a2:
         57:a1:7b:e5:7b:5e:e0:22:d3:6b:35:79:23:0d:61:90:dd:4b:
         23:25:1d:d6:f2:63:44:7a:8e:04:8d:a3:f7:90:10:ab:4d:dc:
         ec:f8:fa:05:ae:55:d1:8e:e7:d5:50:4a:d4:a9:17:20:fe:85:
         7b:ae:d1:27:9a:d9:17:56:cd:21:36:2b:9f:1c:6a:97:d9:45:
         80:4a:0d:f7:6b:47:93:3f:be:56:b1:b4:e2:83:23:89:e5:b0:
         9f:3d:60:18:c4:66:44:e5:7a:ee:68:ad:78:06:9c:ef:e8:e6:
         62:05:61:1c:15:3a:59:2f:a8:0a:2c:c9:c1:f3:45:5f:3f:6f:
         72:fc:63:48:57:b4:5c:b7:2b:4c:e9:4a:c8:61:f1:40:05:0f:
         71:b0:36:01:c8:5a:cc:c2:d7:13:c3:bb:4d:da:4e:99:50:79:
         6d:6f:de:6d:42:ce:89:db:7d:ad:79:7f:06:62:9f:8c:6b:7e:
         74:a7:d1:20:29:b6:fb:df:47:88:7e:4c:5e:b3:6d:b4:24:44:
         62:fe:12:38:d1:8f:b3:e2:1d:9a:f1:96:34:50:0c:15:e1:8f:
         f9:d9:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----