Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.mft
File:                     Jkcs_c05KhhPHwUTILuoBqIExs0.mft (raw, json)
Hash identifier:          vpaYoIGk9OW0/euK0Y0Zl2LSZ4kQl39qkyK2gaXG+50=
Subject key identifier:   F7:C4:DC:B8:3F:D2:49:9E:5E:0F:69:40:87:CF:B8:88:6F:91:00:99
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       018FBCEDB36C55CDF1FD3DF492930DA86CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.mft
Manifest number:          0967
Signing time:             Tue 28 May 2024 02:00:45 +0000
Manifest this update:     Tue 28 May 2024 02:00:45 +0000
Manifest next update:     Wed 29 May 2024 02:00:45 +0000
Files and hashes:         1: Jkcs_c05KhhPHwUTILuoBqIExs0.crl (hash: qx2FNZURbybhUVdkRYS35JDK0Oex0JfcJYBPQ0dlEow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bc:ed:b3:6c:55:cd:f1:fd:3d:f4:92:93:0d:a8:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: May 28 02:00:45 2024 GMT
            Not After : May 29 02:00:45 2024 GMT
        Subject: CN=f7c4dcb83fd2499e5e0f694087cfb8886f910099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:db:0a:1c:49:3b:2d:05:42:dc:44:f8:f3:
                    fe:29:f4:7d:6f:cb:26:1e:22:65:9d:67:6d:32:26:
                    72:56:92:72:99:d5:05:ce:11:da:cf:30:be:f6:df:
                    85:6d:19:ff:ce:ad:89:e5:f0:e4:b1:b4:48:72:1e:
                    5d:5b:2c:22:54:c4:54:59:9c:88:e2:bf:99:19:ac:
                    9f:2e:28:b0:f7:e1:71:e0:b4:09:09:30:a7:51:41:
                    f2:e0:82:14:fa:31:c4:f0:06:d7:df:5a:e8:68:60:
                    f0:cf:43:0c:ce:9e:62:d5:1d:d4:30:81:c9:9b:83:
                    5f:fa:6c:44:8a:3f:5e:47:aa:b1:29:23:39:c4:f2:
                    00:58:73:82:62:3d:bb:61:52:df:52:9a:de:e3:76:
                    ec:84:e9:1e:01:63:9f:43:dd:4d:c7:47:78:cf:1e:
                    c7:1c:d5:6f:25:d4:0c:f4:45:83:2b:23:67:a7:4c:
                    59:71:74:08:4a:43:78:63:85:e8:89:79:7c:b1:ad:
                    f4:ca:cd:e2:08:5c:14:bb:03:df:ed:92:e5:2d:e0:
                    92:d7:09:d0:7c:26:bc:05:5d:46:f6:3f:38:cc:df:
                    14:98:d6:2b:ab:40:e0:b4:28:98:57:a5:54:73:c8:
                    44:cd:ac:8a:f8:7c:fa:ff:74:93:7a:80:f6:a8:aa:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:DC:B8:3F:D2:49:9E:5E:0F:69:40:87:CF:B8:88:6F:91:00:99
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:9e:2b:93:f7:df:b3:b2:8f:3a:59:18:ec:1f:e3:4d:e3:
         f8:56:04:51:c7:19:e2:93:24:80:9c:df:08:6c:bd:37:c5:25:
         d2:2d:7c:e1:22:c9:29:dc:e4:2a:e1:a9:f1:d9:b2:4b:1f:f8:
         9e:e1:2e:a8:8b:cc:6d:72:5c:8f:fa:b7:f1:aa:27:b1:a7:fb:
         d8:cd:ae:22:6c:37:69:7e:88:eb:e9:66:1c:e6:d8:4b:23:66:
         78:6e:81:c7:d3:21:03:9e:11:4f:ca:74:48:8d:02:95:46:af:
         df:04:27:ff:6f:27:a3:05:96:9b:c3:1a:01:ba:21:10:c2:cd:
         2a:ac:d8:57:d8:ab:8e:64:5d:3c:84:60:df:ed:99:8d:6f:ec:
         b0:86:bb:c8:e5:60:cb:20:11:0d:f1:63:f8:19:87:4c:e8:20:
         8d:78:e2:5e:f9:b1:57:a3:f9:a0:38:0f:07:26:b3:f3:ca:78:
         97:7c:c0:e7:92:a1:03:65:14:06:be:8d:c5:f5:00:ca:e7:40:
         b1:92:56:65:a7:70:dc:9c:d3:85:55:43:72:94:76:3e:fd:12:
         64:c7:30:8c:a4:5f:95:e5:de:d1:18:75:c0:24:90:23:09:90:
         93:5f:85:e9:e2:7e:71:13:48:27:6a:5f:2c:ec:b4:fa:25:d3:
         1e:f7:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----