Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4c1948-4b96-4fbc-a3c1-3d5d626d0865/1/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.mft
File:                     2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.mft (raw, json)
Hash identifier:          0YBBurp/efKq6xDjIKXv0Q1ElgqlxCDL1XJAsGy4MEs=
Subject key identifier:   FB:9B:C4:07:F5:C7:2C:59:D2:1D:08:64:81:29:3A:14:20:A6:FE:C9
Authority key identifier: DB:16:7A:4C:0F:F8:C9:3A:A6:07:A6:46:B8:49:99:75:1A:94:1F:D3
Certificate issuer:       /CN=db167a4c0ff8c93aa607a646b84999751a941fd3
Certificate serial:       0191DF3E5CC489A03647218844747A1142AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4c1948-4b96-4fbc-a3c1-3d5d626d0865/1/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.mft
Manifest number:          039A
Signing time:             Wed 11 Sep 2024 04:01:31 +0000
Manifest this update:     Wed 11 Sep 2024 04:01:31 +0000
Manifest next update:     Thu 12 Sep 2024 04:01:31 +0000
Files and hashes:         1: 2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.crl (hash: nnUpuEYPxZqBXpu8f79OnMbyq/Z/p6cnMKcVjiOcVtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:df:3e:5c:c4:89:a0:36:47:21:88:44:74:7a:11:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db167a4c0ff8c93aa607a646b84999751a941fd3
        Validity
            Not Before: Sep 11 04:01:31 2024 GMT
            Not After : Sep 12 04:01:31 2024 GMT
        Subject: CN=fb9bc407f5c72c59d21d086481293a1420a6fec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:82:be:04:86:d0:7a:e4:2a:1f:7f:77:ed:
                    16:8f:d3:d1:d6:47:f9:17:8c:2a:30:63:8b:f5:9f:
                    8d:9b:b9:1b:20:61:1b:e8:de:e9:96:6e:f4:c6:8e:
                    f1:19:f6:9b:1c:e6:46:a6:61:fb:e2:6c:f3:ba:0d:
                    e5:14:7a:6c:33:95:ea:80:cf:d0:98:01:ea:8e:c7:
                    8f:0e:97:40:d2:b5:44:d4:95:30:4c:72:fc:52:28:
                    90:15:e5:cf:9c:b9:d4:9c:da:bd:5e:44:1b:6b:0d:
                    a7:18:22:1c:9c:9f:16:48:0f:89:c1:d0:bb:ba:1e:
                    77:c5:24:5b:ac:4f:66:d4:42:3c:9e:95:32:e3:fd:
                    6a:84:08:43:14:44:d9:d2:7e:cb:38:5b:f0:e5:6e:
                    f5:31:e5:12:73:15:d8:53:2a:f3:31:6f:af:b6:c9:
                    fb:3f:dd:a5:eb:2d:35:ab:17:89:ad:77:d6:06:31:
                    b1:9f:84:e9:b4:bf:e7:d0:ad:33:42:1b:e2:71:2d:
                    10:41:93:57:96:e9:0f:4a:8e:b3:de:65:53:78:5e:
                    1b:2f:0e:7b:41:8d:cf:a4:3d:c1:49:b1:aa:f2:89:
                    c9:64:54:21:7b:50:b9:aa:f6:1d:e5:5e:da:83:5f:
                    dd:e7:ff:32:99:28:a5:c4:35:67:5e:67:eb:e2:17:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:C4:07:F5:C7:2C:59:D2:1D:08:64:81:29:3A:14:20:A6:FE:C9
            X509v3 Authority Key Identifier:
                keyid:DB:16:7A:4C:0F:F8:C9:3A:A6:07:A6:46:B8:49:99:75:1A:94:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4c1948-4b96-4fbc-a3c1-3d5d626d0865/1/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4c1948-4b96-4fbc-a3c1-3d5d626d0865/1/2xZ6TA_4yTqmB6ZGuEmZdRqUH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:09:b4:f2:4c:47:fe:8d:de:8c:38:3d:6a:05:56:b8:d9:
         37:9f:8a:e5:24:3e:bc:98:cd:ac:f9:19:20:40:34:c5:c1:71:
         42:32:a1:cb:3a:f3:6b:17:dd:db:91:a7:fe:2c:5d:02:ac:04:
         c8:43:37:76:36:6f:c0:1a:79:05:f5:85:6b:2e:b0:67:dd:db:
         0d:64:df:e0:b6:4b:d3:05:19:cf:c9:92:7c:61:cd:30:15:06:
         0e:ff:73:26:bd:49:48:d8:2d:de:de:74:e3:67:cb:14:0a:55:
         08:64:6e:13:0a:f0:8b:b3:b6:47:17:f4:d6:ac:2a:fa:d8:9e:
         9e:1d:65:d1:0d:b2:57:1d:5a:67:43:b8:ce:1b:fa:2f:5e:89:
         71:ab:ff:7b:0c:1b:bb:03:e5:72:c0:95:5b:a6:5f:c2:a4:54:
         52:17:b6:f7:00:3a:a5:1b:bc:a6:ba:2e:1b:1c:67:4c:ae:c0:
         da:1e:89:5d:21:27:fc:99:0b:43:39:84:8e:0d:b9:b9:4e:cf:
         ea:dd:98:62:cc:8a:0f:51:d3:47:46:1f:d7:64:75:f3:5c:64:
         62:cb:32:d1:c5:be:20:d6:fe:1d:08:2f:2a:40:f0:fb:2c:90:
         78:57:4d:3c:59:91:b8:cf:f3:67:ea:68:13:32:b1:0c:e5:89:
         94:9c:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----