Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ad5a90-d7e7-4538-b75b-64e2cbfb9857/1/W8AaoZF6GsUdO0Fsh--U-XyaaUI.mft
File:                     W8AaoZF6GsUdO0Fsh--U-XyaaUI.mft (raw, json)
Hash identifier:          WCCGz+snMyMg8A8q6/oWYRP15Qdih1/UpXPjWsHjiXE=
Subject key identifier:   6B:EB:FC:57:D1:88:F4:32:FD:29:98:EE:1E:A7:95:69:5F:62:5B:58
Authority key identifier: 5B:C0:1A:A1:91:7A:1A:C5:1D:3B:41:6C:87:EF:94:F9:7C:9A:69:42
Certificate issuer:       /CN=5bc01aa1917a1ac51d3b416c87ef94f97c9a6942
Certificate serial:       0192DB958F63CA6AAC67A2830EAAAB0255F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8AaoZF6GsUdO0Fsh--U-XyaaUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ad5a90-d7e7-4538-b75b-64e2cbfb9857/1/W8AaoZF6GsUdO0Fsh--U-XyaaUI.mft
Manifest number:          03
Signing time:             Wed 30 Oct 2024 04:01:04 +0000
Manifest this update:     Wed 30 Oct 2024 04:01:04 +0000
Manifest next update:     Thu 31 Oct 2024 04:01:04 +0000
Files and hashes:         1: W8AaoZF6GsUdO0Fsh--U-XyaaUI.crl (hash: nSRqby/p400rO9vk5uMcF8pmwxzRl0OdoqO1cNjKcyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:db:95:8f:63:ca:6a:ac:67:a2:83:0e:aa:ab:02:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc01aa1917a1ac51d3b416c87ef94f97c9a6942
        Validity
            Not Before: Oct 30 04:01:04 2024 GMT
            Not After : Oct 31 04:01:04 2024 GMT
        Subject: CN=6bebfc57d188f432fd2998ee1ea795695f625b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:33:7f:cb:53:db:95:c8:9d:24:41:8a:08:
                    17:05:9f:f7:46:11:d8:16:ab:ac:cd:bf:ae:81:0a:
                    38:1a:a4:78:87:fc:0c:54:96:a6:1f:8d:5e:a2:87:
                    86:75:5f:77:b5:63:d9:30:71:c7:ea:e5:de:58:50:
                    72:80:14:1d:68:ac:6d:40:05:f0:96:da:42:30:df:
                    55:85:af:85:b6:3f:d3:1b:2f:24:91:85:5b:72:02:
                    33:22:67:c2:81:b3:5b:8e:f2:d3:69:e1:d7:0c:67:
                    e6:c1:be:9f:42:8c:38:f8:b5:4e:4b:75:9f:b0:54:
                    b1:e2:72:82:30:ac:42:65:ae:7e:82:66:0b:09:cc:
                    28:04:3c:8f:2d:6c:ef:18:27:e7:16:88:0c:11:8e:
                    63:d0:49:b4:3c:78:9c:b5:9c:eb:ed:fa:a7:b9:2b:
                    90:b6:df:61:fc:20:e4:59:c3:0c:0a:1e:11:3f:e9:
                    fa:56:24:02:82:a5:64:4e:59:fc:92:b5:bd:b7:43:
                    12:ee:8c:75:4e:58:ce:4d:f4:8e:e7:25:08:42:2e:
                    73:2c:a3:db:9d:2b:89:78:71:b9:d0:50:99:19:c0:
                    02:1b:bc:1f:78:44:b7:bd:bd:db:99:56:de:6c:3f:
                    ce:18:91:03:ce:5f:75:6d:fc:8f:65:18:92:65:53:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:FC:57:D1:88:F4:32:FD:29:98:EE:1E:A7:95:69:5F:62:5B:58
            X509v3 Authority Key Identifier:
                keyid:5B:C0:1A:A1:91:7A:1A:C5:1D:3B:41:6C:87:EF:94:F9:7C:9A:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8AaoZF6GsUdO0Fsh--U-XyaaUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad5a90-d7e7-4538-b75b-64e2cbfb9857/1/W8AaoZF6GsUdO0Fsh--U-XyaaUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad5a90-d7e7-4538-b75b-64e2cbfb9857/1/W8AaoZF6GsUdO0Fsh--U-XyaaUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:6d:c4:c8:7a:38:cd:6d:a1:83:da:31:a8:f1:33:4e:c8:
         79:16:30:23:e3:16:ed:32:d2:cf:ae:60:ed:53:c9:a4:31:7c:
         29:d2:73:6c:d4:f1:f2:5d:93:52:70:bc:b5:48:ce:8d:d7:b3:
         df:b6:8f:77:16:d5:15:3e:a1:bb:52:0c:96:3a:16:7f:ad:7b:
         97:f0:93:4b:01:bf:3d:5b:9d:f0:50:95:2e:7d:c6:18:c4:b7:
         0c:f6:3b:36:30:12:ae:d8:fe:a7:e3:6d:b5:fe:72:00:bd:22:
         0e:48:b8:60:5f:3a:54:a0:a8:7a:ec:3c:90:a0:bb:b7:34:33:
         5f:80:98:09:7c:e2:e0:69:bb:39:11:0e:a9:22:f1:ae:61:d0:
         92:9c:e7:9e:63:cf:33:67:cb:c3:f4:fd:dd:80:35:48:b1:1e:
         2a:96:16:5a:3f:67:f2:bd:f5:0d:49:32:91:04:fa:a9:b0:69:
         b2:c3:40:7d:99:bf:d1:6a:49:61:e7:8e:dd:12:1d:46:4a:4d:
         1d:59:77:8b:82:dc:5e:6c:45:9a:b6:1a:80:23:14:43:4e:eb:
         dc:81:b4:14:ae:d1:69:35:f5:92:72:57:be:a9:c7:df:9b:dd:
         62:bc:4b:ca:43:8c:0b:58:01:12:94:0a:62:da:c9:df:2c:36:
         db:c1:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----