Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/DmuO6XbJGDZPUYT_Mc6kUlp501M.mft
File:                     DmuO6XbJGDZPUYT_Mc6kUlp501M.mft (raw, json)
Hash identifier:          mfdp6Rf7HV6d2GV+z697WYWVTzzBnQ2a6AKDdsk50Vs=
Subject key identifier:   A3:03:2C:43:46:D9:2E:C7:38:CE:23:CA:BE:01:B1:EF:44:F6:FC:57
Authority key identifier: 0E:6B:8E:E9:76:C9:18:36:4F:51:84:FF:31:CE:A4:52:5A:79:D3:53
Certificate issuer:       /CN=0e6b8ee976c918364f5184ff31cea4525a79d353
Certificate serial:       018D3A467B7D9269E4CF7B401A87ED27B502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmuO6XbJGDZPUYT_Mc6kUlp501M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/DmuO6XbJGDZPUYT_Mc6kUlp501M.mft
Manifest number:          0AF8
Signing time:             Wed 24 Jan 2024 07:01:53 +0000
Manifest this update:     Wed 24 Jan 2024 07:01:53 +0000
Manifest next update:     Thu 25 Jan 2024 07:01:53 +0000
Files and hashes:         1: DmuO6XbJGDZPUYT_Mc6kUlp501M.crl (hash: A4wGUf6VqQToS8OTsiYk3y90juf4M+dJJlDoNXIsCfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3a:46:7b:7d:92:69:e4:cf:7b:40:1a:87:ed:27:b5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6b8ee976c918364f5184ff31cea4525a79d353
        Validity
            Not Before: Jan 24 07:01:53 2024 GMT
            Not After : Jan 25 07:01:53 2024 GMT
        Subject: CN=a3032c4346d92ec738ce23cabe01b1ef44f6fc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:40:35:fa:8a:eb:8b:8e:70:0e:ab:a7:b7:
                    dd:5c:5d:c1:90:9f:cd:a9:a3:4d:34:f7:c0:53:c3:
                    fc:99:a9:1b:77:95:bd:95:27:50:4d:61:67:c2:b9:
                    3f:2f:09:df:11:34:81:d5:bb:0a:16:b0:86:7e:ba:
                    aa:a3:35:1c:aa:7a:46:cc:50:3d:d1:6b:35:c0:a6:
                    05:5f:b9:6c:15:65:ed:33:fc:74:b4:24:68:cc:bf:
                    1c:67:b0:41:3f:27:ce:6e:4d:3e:93:0b:5f:6a:6d:
                    62:05:b6:de:dc:44:87:9d:4a:ee:fa:24:69:5d:7f:
                    11:be:12:7e:f4:e5:3f:22:d6:c3:79:9a:4d:a1:9b:
                    b4:64:de:83:5e:dd:f8:7f:15:56:15:43:d9:71:a9:
                    da:48:2b:f2:2f:2a:0f:21:03:ac:b9:6a:d9:f8:57:
                    49:32:06:cc:64:02:95:8a:4a:c5:85:0c:90:ca:f3:
                    d8:7d:5f:e5:09:c5:aa:3c:1a:71:7b:67:54:2e:7e:
                    02:96:b4:86:9c:92:9c:da:ce:92:e3:59:38:c1:07:
                    0c:09:dd:c7:d8:5d:42:0d:57:7e:a5:98:1e:0c:1a:
                    83:5c:d8:db:cc:85:2a:78:8a:29:9f:39:af:4a:37:
                    be:c6:5c:e7:c3:47:f3:fa:a5:d3:79:35:4d:42:32:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:2C:43:46:D9:2E:C7:38:CE:23:CA:BE:01:B1:EF:44:F6:FC:57
            X509v3 Authority Key Identifier:
                keyid:0E:6B:8E:E9:76:C9:18:36:4F:51:84:FF:31:CE:A4:52:5A:79:D3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuO6XbJGDZPUYT_Mc6kUlp501M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/DmuO6XbJGDZPUYT_Mc6kUlp501M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/DmuO6XbJGDZPUYT_Mc6kUlp501M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:35:85:87:0f:fc:ac:2d:0d:e7:69:d7:a2:f4:65:c2:17:
         e5:fb:c1:6f:12:81:bf:ac:96:58:60:e2:de:3f:55:3b:b2:e2:
         bf:6b:30:6b:c1:23:09:b9:1c:5a:02:56:07:f3:6d:99:60:0d:
         81:13:5c:59:f4:36:36:c9:07:cc:eb:db:4c:72:57:c9:5e:b4:
         c4:ad:04:a8:d7:5f:d5:d2:df:49:b4:b8:70:c3:d3:4a:45:17:
         64:98:29:ea:2e:fd:81:74:a7:3a:f6:fd:ac:41:ca:09:63:34:
         8a:1c:e7:68:cd:2d:8f:8e:49:ff:5d:8f:df:8d:09:3a:db:f6:
         e2:2c:44:29:d9:53:30:50:16:31:6a:b7:98:0e:d9:4c:3b:4e:
         48:54:15:dd:bf:af:26:c6:8c:7b:0b:75:d3:d8:99:b0:24:21:
         89:4a:df:cb:eb:87:4c:57:3f:81:16:03:0f:a9:37:99:ce:26:
         b5:3a:5f:80:76:06:fa:86:90:58:b6:ca:a4:6b:15:be:82:58:
         86:90:63:1d:2f:26:b4:db:ac:d1:5f:dd:3d:fa:f0:4d:a4:3e:
         16:a5:27:43:64:e5:22:60:ea:0b:71:5b:69:9c:3e:3a:4a:57:
         c3:22:0a:58:9d:ae:97:e1:52:33:8c:2c:9d:10:5a:85:17:27:
         c2:88:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----