Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
File:                     Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft (raw, json)
Hash identifier:          rPuL/i0Iq6KxQ7DLNonO9xRFn/WC5NvH5XKUu5ZtkiY=
Subject key identifier:   A2:93:4A:F3:FD:08:2E:18:F6:87:19:8C:57:D0:86:F0:1D:00:DD:32
Authority key identifier: 4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA
Certificate issuer:       /CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
Certificate serial:       01923F96168407597B9608B7D7A1DDC22BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
Manifest number:          0356
Signing time:             Sun 29 Sep 2024 21:00:53 +0000
Manifest this update:     Sun 29 Sep 2024 21:00:53 +0000
Manifest next update:     Mon 30 Sep 2024 21:00:53 +0000
Files and hashes:         1: Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl (hash: BhKL0YOaBhcWSPtqNSNCYOxiboZkNn2Na2OomNZRMf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3f:96:16:84:07:59:7b:96:08:b7:d7:a1:dd:c2:2b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
        Validity
            Not Before: Sep 29 21:00:53 2024 GMT
            Not After : Sep 30 21:00:53 2024 GMT
        Subject: CN=a2934af3fd082e18f687198c57d086f01d00dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:52:af:3b:fb:65:11:bc:f1:e0:13:33:4a:
                    29:8c:f2:19:f6:38:52:eb:3b:d7:39:ba:06:75:59:
                    c6:1d:99:5c:9a:64:88:fc:dc:0f:04:d8:7c:f6:79:
                    b1:a5:30:92:61:9b:06:22:8b:2f:5e:a3:c6:44:a9:
                    39:2e:9b:0e:8f:16:a0:55:96:29:50:0b:6d:75:cd:
                    c3:1b:8e:36:2e:57:5e:1f:0c:a6:b2:76:78:25:66:
                    e5:76:8d:95:a8:b5:0f:0c:68:f1:8d:9d:98:8e:41:
                    63:1e:99:88:4c:f8:ea:81:fe:fc:ce:5b:ba:23:ed:
                    56:bf:bd:6c:2c:63:c5:74:36:13:34:be:c6:40:9a:
                    40:48:a9:2e:98:33:73:04:3c:60:14:eb:a6:29:25:
                    e6:e1:1e:43:7f:09:18:cb:e3:d4:2a:e4:b1:4e:3d:
                    d5:b2:cf:ba:de:9b:9d:0b:61:4f:fb:72:d3:5f:70:
                    09:a3:e5:58:0e:45:18:f0:aa:22:a3:e3:63:5f:62:
                    4b:5d:e6:5a:ad:00:98:cb:06:d6:1a:cd:06:54:96:
                    02:ea:cc:32:0b:6f:13:b2:be:12:c3:21:3f:f3:e9:
                    60:91:91:f6:bc:5e:b9:3b:5d:5c:ea:6a:68:9e:aa:
                    da:42:64:7c:c0:46:c7:b1:80:15:39:c6:4f:9a:3a:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:93:4A:F3:FD:08:2E:18:F6:87:19:8C:57:D0:86:F0:1D:00:DD:32
            X509v3 Authority Key Identifier:
                keyid:4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:d5:c4:ce:1b:08:06:1e:cf:18:62:d4:d3:ed:e2:d8:68:
         ad:ca:4e:97:a2:c4:9d:12:36:08:67:d9:68:db:86:5e:76:db:
         21:b7:f0:51:fb:0d:45:58:d1:0d:b4:05:a5:60:39:ac:ad:e9:
         1c:ad:fa:db:f1:69:32:e5:89:93:f0:30:6b:2c:a8:9e:4e:4b:
         e2:ab:d1:f2:4d:59:d8:3f:dd:ea:7f:37:a7:22:d5:55:2a:c9:
         a5:16:f1:3f:d1:7a:b5:af:7b:15:e4:fa:26:ab:a4:ac:ab:be:
         ea:2c:e0:20:db:85:53:0e:fb:8e:b5:23:d0:b6:c2:5d:a9:f4:
         6e:0a:e9:de:4c:e4:c6:7c:ea:c5:92:95:7e:3e:4a:13:67:de:
         4e:8d:fa:1c:09:3e:70:b1:f7:97:7a:e7:31:5f:28:63:c9:87:
         70:f5:ff:88:2b:3b:f0:6f:2b:34:ac:1a:72:0c:4c:67:d6:55:
         41:6d:25:6d:57:4b:60:5d:3a:b4:73:50:48:d9:17:ca:31:26:
         ec:1f:fa:36:9d:f4:b8:00:58:c3:2f:2f:af:ec:60:86:f0:94:
         6f:ae:6f:b0:ee:ea:da:07:80:ea:35:9a:17:a7:93:30:3f:b5:
         56:86:3b:d9:fc:92:a0:56:ad:45:8a:4d:fe:13:06:4b:00:36:
         dd:0e:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----