Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
File:                     LMO6aVVgj4zLE3VEc8CRfbP76RE.mft (raw, json)
Hash identifier:          KNZi8PC9oO6gcJV1LOlg5wil4dSQzsY7SokCoYYfMv0=
Subject key identifier:   A5:E2:59:90:E0:0D:6F:C3:8F:FA:12:67:9A:FD:DE:83:21:99:6B:F1
Authority key identifier: 2C:C3:BA:69:55:60:8F:8C:CB:13:75:44:73:C0:91:7D:B3:FB:E9:11
Certificate issuer:       /CN=2cc3ba6955608f8ccb13754473c0917db3fbe911
Certificate serial:       0191FDB6A087EBAA8B85BBBCD01AF44535B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMO6aVVgj4zLE3VEc8CRfbP76RE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
Manifest number:          0DE0
Signing time:             Tue 17 Sep 2024 02:01:29 +0000
Manifest this update:     Tue 17 Sep 2024 02:01:29 +0000
Manifest next update:     Wed 18 Sep 2024 02:01:29 +0000
Files and hashes:         1: LMO6aVVgj4zLE3VEc8CRfbP76RE.crl (hash: NUHtzvMaWVZsQK4C0qjFvl+vD5IVzFSvfGWTQDwqmVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fd:b6:a0:87:eb:aa:8b:85:bb:bc:d0:1a:f4:45:35:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc3ba6955608f8ccb13754473c0917db3fbe911
        Validity
            Not Before: Sep 17 02:01:29 2024 GMT
            Not After : Sep 18 02:01:29 2024 GMT
        Subject: CN=a5e25990e00d6fc38ffa12679afdde8321996bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:fe:db:36:b5:72:0b:3d:bf:90:f1:bd:9d:
                    47:d0:0e:8e:8c:88:5d:99:63:c1:6b:f4:b0:9f:07:
                    52:89:fc:6c:48:0f:ce:9c:72:bc:d2:9a:94:0a:ba:
                    1e:a8:5a:90:ff:d0:d7:3e:a8:3f:21:35:73:d4:22:
                    73:9c:63:99:02:a4:3a:b5:66:f4:e2:50:df:d1:41:
                    6b:a8:57:6c:c3:56:65:69:c7:79:e5:22:20:9a:09:
                    d2:ff:0b:e9:a5:7d:a1:93:80:f1:82:de:48:b0:72:
                    59:4f:5d:dd:34:e0:5d:77:40:f7:b6:8b:bf:d6:1b:
                    66:08:5f:7e:2b:f7:97:bb:54:16:69:56:b4:9b:15:
                    9d:98:96:68:00:a7:4d:8b:17:9b:ac:d5:d6:6f:4e:
                    dc:56:5d:cb:aa:48:58:96:d0:6b:86:75:4f:84:c2:
                    2e:cf:bb:09:c2:2e:56:61:20:9f:1e:84:e1:de:00:
                    6b:d1:91:48:c0:0b:a3:87:09:55:ba:56:c9:ff:2a:
                    c7:6f:79:b7:04:3b:c2:05:9e:cd:0f:1d:8b:80:9e:
                    ec:75:62:2b:7a:a9:c9:8f:31:1d:b3:88:5e:27:bc:
                    c8:ce:28:da:d1:13:d4:ac:5e:cf:14:b7:22:39:4e:
                    0f:e9:55:f1:f6:a8:6d:fc:2f:f9:da:fe:2e:a7:6c:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E2:59:90:E0:0D:6F:C3:8F:FA:12:67:9A:FD:DE:83:21:99:6B:F1
            X509v3 Authority Key Identifier:
                keyid:2C:C3:BA:69:55:60:8F:8C:CB:13:75:44:73:C0:91:7D:B3:FB:E9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMO6aVVgj4zLE3VEc8CRfbP76RE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:23:c9:62:6b:c1:55:24:c5:af:63:69:e5:11:95:3f:51:e0:
         ef:0f:d9:69:70:7f:3b:7e:4a:e5:28:42:85:f1:24:15:d2:33:
         6c:9a:d3:30:98:3e:98:55:a9:51:8d:99:d5:cc:07:45:6d:d7:
         9f:2a:32:4f:c9:b3:96:58:b8:5f:b1:7e:6a:7a:92:cb:ae:f1:
         12:e4:8b:ee:57:fb:cf:93:1b:9d:a9:88:af:37:18:90:9c:bb:
         6a:2c:8b:ac:7a:6f:e9:2b:91:c7:4f:d1:c4:59:db:0e:14:24:
         97:63:5a:00:dd:d6:17:8f:e9:ee:12:76:9a:5a:13:e3:59:bc:
         55:bf:97:4f:7f:3d:10:86:3d:52:d4:ce:ec:bb:a9:c5:6b:8f:
         9b:0d:ea:20:8d:e9:16:00:70:a8:d3:a4:21:00:8e:44:d2:33:
         18:5d:60:e9:5f:38:84:75:b8:32:6e:66:47:de:59:ec:51:d9:
         f9:36:ed:d1:24:0a:b2:d6:d6:d0:75:29:dc:0f:c5:f3:70:37:
         d5:7f:de:94:8c:51:4b:74:2e:a2:f9:16:69:bb:0f:c5:78:ac:
         64:56:94:2e:3f:bb:36:4a:b4:09:aa:4c:2c:fa:8b:47:40:5d:
         9e:97:20:63:1a:f9:e5:ee:5d:70:a5:88:82:be:ca:45:74:95:
         16:dc:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----