Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9978ba-7c39-4c90-a474-2b01d897816f/1/Vw54B1NepcWw0QgMkS94qqNg9N4.mft
File:                     Vw54B1NepcWw0QgMkS94qqNg9N4.mft (raw, json)
Hash identifier:          gWq1VD4XyOrB8VKWzaF1SkN8fq4exDcxIOkeYBEAnjg=
Subject key identifier:   4D:4E:F1:09:30:31:BE:66:49:80:09:D4:8D:48:9D:DF:1C:8D:0E:1F
Authority key identifier: 57:0E:78:07:53:5E:A5:C5:B0:D1:08:0C:91:2F:78:AA:A3:60:F4:DE
Certificate issuer:       /CN=570e7807535ea5c5b0d1080c912f78aaa360f4de
Certificate serial:       018F7F902C2142AC5C8B29E99F5B7D0B97BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw54B1NepcWw0QgMkS94qqNg9N4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9978ba-7c39-4c90-a474-2b01d897816f/1/Vw54B1NepcWw0QgMkS94qqNg9N4.mft
Manifest number:          1172
Signing time:             Thu 16 May 2024 04:01:45 +0000
Manifest this update:     Thu 16 May 2024 04:01:45 +0000
Manifest next update:     Fri 17 May 2024 04:01:45 +0000
Files and hashes:         1: Vw54B1NepcWw0QgMkS94qqNg9N4.crl (hash: HmQLL3nuZ8Gwyjna6qGRzeFTyEe+zjPgUGXa4cS6W74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7f:90:2c:21:42:ac:5c:8b:29:e9:9f:5b:7d:0b:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570e7807535ea5c5b0d1080c912f78aaa360f4de
        Validity
            Not Before: May 16 04:01:45 2024 GMT
            Not After : May 17 04:01:45 2024 GMT
        Subject: CN=4d4ef1093031be66498009d48d489ddf1c8d0e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:7e:80:2b:65:24:70:78:79:49:9e:ee:b8:
                    bd:72:6a:8c:54:bd:92:8a:29:35:50:da:c5:fc:7d:
                    6a:0f:ee:43:12:df:94:b4:86:9c:39:5e:02:e4:aa:
                    9d:26:31:54:96:c7:9a:94:15:41:41:0d:2a:b5:a0:
                    86:96:8f:57:1b:39:c8:d3:4c:6f:93:8c:08:0d:97:
                    f9:7b:99:32:05:87:7e:9e:d4:87:a6:3e:62:0b:9f:
                    51:9b:8c:90:23:e3:67:a1:42:1c:ae:3c:02:c4:9f:
                    32:ed:4a:5c:53:95:ec:e2:72:3a:32:f3:64:eb:2b:
                    41:3f:03:4b:cd:8f:ef:08:60:4b:98:7d:4a:a2:d2:
                    b0:a0:4a:49:0d:a6:f4:2a:05:f8:8b:e3:ff:76:ce:
                    7b:7b:2e:e9:70:8b:5b:87:9d:b5:59:13:a2:bf:13:
                    56:1b:ab:9d:0b:cb:a7:ed:9d:f2:26:35:fc:2f:97:
                    66:6d:c2:2f:01:eb:f6:e3:2a:d1:41:a3:ef:ae:74:
                    26:cb:eb:ec:14:d2:96:8c:fa:d4:89:7b:ef:00:d2:
                    bb:71:dc:a2:2c:e8:50:ce:b4:90:a8:5c:90:11:ae:
                    21:3c:a0:df:1f:8a:9e:95:98:81:08:28:2c:be:7f:
                    87:cc:dd:f7:ac:50:7b:6f:7d:9c:a0:17:dc:57:c7:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:F1:09:30:31:BE:66:49:80:09:D4:8D:48:9D:DF:1C:8D:0E:1F
            X509v3 Authority Key Identifier:
                keyid:57:0E:78:07:53:5E:A5:C5:B0:D1:08:0C:91:2F:78:AA:A3:60:F4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw54B1NepcWw0QgMkS94qqNg9N4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9978ba-7c39-4c90-a474-2b01d897816f/1/Vw54B1NepcWw0QgMkS94qqNg9N4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9978ba-7c39-4c90-a474-2b01d897816f/1/Vw54B1NepcWw0QgMkS94qqNg9N4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:e1:2a:74:68:78:86:e0:97:95:f1:98:46:8b:bc:39:db:
         a1:26:9f:d9:08:75:ab:63:5c:80:c6:61:9f:f3:22:a5:99:94:
         82:6f:bc:bd:42:88:75:4c:3e:4d:30:cd:41:15:a8:7b:24:4d:
         dc:a3:8f:b1:f5:af:f9:b4:32:48:73:3d:42:9d:91:27:ed:90:
         45:4a:12:d5:a4:07:77:3a:1f:32:29:e5:56:d3:fc:36:53:12:
         12:b9:6c:66:a9:38:53:d1:16:f3:38:f8:79:1c:e0:80:b1:cf:
         01:c5:5b:11:e3:2f:fd:1e:d8:19:2b:7f:f1:8b:ee:14:77:3b:
         a6:7a:41:60:c5:10:31:6d:24:13:35:25:4c:c4:cd:2c:03:f2:
         9d:cc:38:2f:17:f0:63:f6:09:b2:4e:e2:4d:2d:a7:b9:97:e7:
         8a:9d:68:a2:d4:b9:0b:9b:00:fd:7a:dd:58:b8:60:03:eb:73:
         d2:ce:65:6d:81:d6:20:bf:2f:66:62:11:d3:5d:66:c5:01:16:
         10:cb:18:6c:2a:d9:fe:75:80:d9:d3:03:33:de:c4:33:29:71:
         07:55:3c:28:33:e3:3e:5c:a2:e0:f7:d7:14:cd:f4:6c:d5:e1:
         b6:9f:4d:be:26:ef:0e:da:0d:9c:3d:25:78:6b:22:09:48:90:
         aa:b3:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----