Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft
File:                     lcnGde82vvDQ_eJerGYU-MWe3JM.mft (raw, json)
Hash identifier:          Y4DERJnAVvDF8KsNld9Nl/SEBgKhZFcFpQgHWRZ1M44=
Subject key identifier:   28:8F:29:EB:3B:58:29:50:9C:71:E7:6E:4C:91:35:93:06:AB:DB:B8
Authority key identifier: 95:C9:C6:75:EF:36:BE:F0:D0:FD:E2:5E:AC:66:14:F8:C5:9E:DC:93
Certificate issuer:       /CN=95c9c675ef36bef0d0fde25eac6614f8c59edc93
Certificate serial:       01928E1F2FE43C09460499EAA1C500CBFFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcnGde82vvDQ_eJerGYU-MWe3JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft
Manifest number:          1043
Signing time:             Tue 15 Oct 2024 03:01:01 +0000
Manifest this update:     Tue 15 Oct 2024 03:01:01 +0000
Manifest next update:     Wed 16 Oct 2024 03:01:01 +0000
Files and hashes:         1: lcnGde82vvDQ_eJerGYU-MWe3JM.crl (hash: JpCq6WYcBqQ3bJbTn0l1jA0oPQaBV6mMsAzvfQmDZqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:8e:1f:2f:e4:3c:09:46:04:99:ea:a1:c5:00:cb:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95c9c675ef36bef0d0fde25eac6614f8c59edc93
        Validity
            Not Before: Oct 15 03:01:01 2024 GMT
            Not After : Oct 16 03:01:01 2024 GMT
        Subject: CN=288f29eb3b5829509c71e76e4c91359306abdbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:13:6a:92:cf:4b:24:f3:be:d8:d0:42:16:
                    9a:a9:10:b8:1a:ae:ea:7a:d3:85:a1:d5:84:25:32:
                    3f:21:43:8e:3b:1c:7d:03:6c:8e:55:ae:64:15:16:
                    69:27:53:cd:fe:82:c5:fe:90:c9:a5:61:d5:8b:15:
                    e9:06:87:c4:cd:97:0e:58:1f:52:39:d2:10:94:ce:
                    55:f1:ac:89:25:95:9c:e4:78:bb:e5:cc:49:57:dd:
                    fe:f1:67:ea:95:9a:ec:0e:6b:96:ca:91:db:42:e2:
                    b3:e4:66:56:aa:c7:55:58:8f:18:80:98:5f:7b:51:
                    73:d5:e7:03:f0:77:ae:27:f5:1e:67:0a:d8:b6:44:
                    ac:ad:11:1a:a6:e0:67:bf:9a:79:47:31:1e:75:24:
                    32:0f:8f:e5:04:d8:1d:31:b1:20:b3:e6:78:c5:59:
                    ad:ff:ba:18:68:c0:15:48:03:2e:f6:3f:68:a5:3f:
                    ec:43:28:74:36:5b:18:66:b5:26:18:d9:aa:d9:ee:
                    55:e8:a2:30:2e:30:b9:8a:6b:ac:2c:6e:d3:fe:c8:
                    a6:40:04:17:22:a5:be:74:c1:00:0a:03:3e:a3:82:
                    d1:a3:fe:f8:a1:43:a2:d8:44:fc:85:a2:f4:87:6d:
                    08:16:47:e8:ad:7c:b8:c3:ce:a2:b4:63:75:15:f5:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8F:29:EB:3B:58:29:50:9C:71:E7:6E:4C:91:35:93:06:AB:DB:B8
            X509v3 Authority Key Identifier:
                keyid:95:C9:C6:75:EF:36:BE:F0:D0:FD:E2:5E:AC:66:14:F8:C5:9E:DC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcnGde82vvDQ_eJerGYU-MWe3JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:09:91:eb:fd:02:c6:9c:c6:e2:97:c1:f4:d4:93:d5:f3:
         83:69:a5:3e:3e:ed:d9:5d:1d:b9:8e:29:0d:37:59:bb:58:97:
         d9:1b:4f:0b:fc:f7:22:41:22:c2:2a:a4:ed:62:39:41:d2:e1:
         a1:04:d0:47:47:92:23:dd:c4:a9:b8:9b:f0:07:f8:80:2b:a6:
         bd:c0:9d:96:6a:4e:0d:1d:72:f8:f8:6b:de:ed:27:cf:33:1a:
         96:32:cb:5b:af:6f:d2:4b:2f:58:a7:25:db:42:13:ac:ca:3f:
         c5:bd:50:aa:65:5f:f1:4c:6d:97:72:b1:a8:71:87:ef:38:bb:
         0c:cc:a6:41:72:12:fb:10:fe:1b:a3:ed:13:a0:47:23:12:53:
         03:0a:fd:c5:79:9c:59:7f:0d:49:fd:e5:0a:4e:de:9d:1f:30:
         a3:f3:ed:64:f6:3f:18:e7:34:b9:81:1a:fa:16:aa:37:4f:4b:
         00:cd:52:c2:85:ec:d1:fc:61:57:87:70:83:4e:74:70:8a:1c:
         e9:d7:a8:4d:16:1f:a3:03:74:a6:6c:19:71:f4:a3:29:27:d4:
         14:8f:f8:92:a5:0c:4f:f8:14:9f:b9:46:04:ad:73:56:2e:ae:
         05:69:1d:9c:78:d3:27:e1:0e:42:87:e3:dc:47:78:dc:2c:4c:
         82:f7:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----