Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d8e62f-aa86-4d0a-99de-f2d619920bfd/1/rgGgz1VNklR68vvYX1DUAis0wvA.mft
File:                     rgGgz1VNklR68vvYX1DUAis0wvA.mft (raw, json)
Hash identifier:          Ij+ic/rjiuDGUBkGd5jPcL0GHmlJUGdfmy1WBOVlzMY=
Subject key identifier:   71:68:25:01:F5:96:C8:7F:13:E9:42:CF:35:D8:15:0E:27:01:9B:71
Authority key identifier: AE:01:A0:CF:55:4D:92:54:7A:F2:FB:D8:5F:50:D4:02:2B:34:C2:F0
Certificate issuer:       /CN=ae01a0cf554d92547af2fbd85f50d4022b34c2f0
Certificate serial:       01933D36C216CDFE3FB6608F5FDC10A88035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgGgz1VNklR68vvYX1DUAis0wvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/d8e62f-aa86-4d0a-99de-f2d619920bfd/1/rgGgz1VNklR68vvYX1DUAis0wvA.mft
Manifest number:          0272
Signing time:             Mon 18 Nov 2024 03:00:19 +0000
Manifest this update:     Mon 18 Nov 2024 03:00:19 +0000
Manifest next update:     Tue 19 Nov 2024 03:00:19 +0000
Files and hashes:         1: rgGgz1VNklR68vvYX1DUAis0wvA.crl (hash: +yicTNWUCi+ub/+EX1FgesUg1RHwnt2Rvb/ktpMJM5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:3d:36:c2:16:cd:fe:3f:b6:60:8f:5f:dc:10:a8:80:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae01a0cf554d92547af2fbd85f50d4022b34c2f0
        Validity
            Not Before: Nov 18 03:00:19 2024 GMT
            Not After : Nov 19 03:00:19 2024 GMT
        Subject: CN=71682501f596c87f13e942cf35d8150e27019b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:a4:58:42:dc:eb:64:8a:f9:e2:9d:84:7b:
                    09:17:04:f0:73:d9:be:3a:51:8b:23:b2:0f:65:7d:
                    78:03:31:fc:5f:7d:5f:93:c5:26:5f:c5:18:5c:d9:
                    76:ca:29:ba:43:e9:fc:28:58:b4:e4:a1:12:f2:39:
                    00:4d:3e:ae:55:14:a7:20:d8:32:80:64:1e:d4:08:
                    ab:af:b8:d4:f9:1a:19:3e:7a:b1:90:c7:98:ab:9e:
                    94:6a:68:6f:d7:37:e3:72:90:07:ea:0e:8e:b8:b5:
                    32:f1:ef:fe:04:d8:36:90:5b:36:35:ef:d4:db:cc:
                    49:dd:c2:ed:38:82:24:31:a2:02:e2:65:e5:56:c6:
                    a9:1d:76:5b:dd:36:a1:c6:a6:5e:d8:24:5f:76:ec:
                    d2:64:11:14:7e:f2:ed:00:00:57:9d:d3:0b:0e:c7:
                    45:50:92:cf:5d:4e:5f:82:15:26:f7:72:3f:a6:d7:
                    59:f7:b5:c3:dd:26:5b:6b:6d:05:15:87:80:f2:90:
                    da:39:95:86:13:7a:96:77:e2:3a:28:c4:65:15:1e:
                    63:11:ef:33:05:c4:90:33:14:1c:2c:cb:97:65:3f:
                    7d:f7:43:88:e3:b6:83:06:04:be:ee:48:d2:f5:6e:
                    7c:2d:bd:69:5d:12:f1:1a:1b:d7:0d:72:35:d2:cf:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:25:01:F5:96:C8:7F:13:E9:42:CF:35:D8:15:0E:27:01:9B:71
            X509v3 Authority Key Identifier:
                keyid:AE:01:A0:CF:55:4D:92:54:7A:F2:FB:D8:5F:50:D4:02:2B:34:C2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgGgz1VNklR68vvYX1DUAis0wvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d8e62f-aa86-4d0a-99de-f2d619920bfd/1/rgGgz1VNklR68vvYX1DUAis0wvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d8e62f-aa86-4d0a-99de-f2d619920bfd/1/rgGgz1VNklR68vvYX1DUAis0wvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:67:d9:4f:52:5e:f4:19:b1:e5:8f:40:e9:b0:be:bb:09:
         48:01:ea:f2:72:5f:0f:73:36:61:e2:d9:a9:0b:b2:e7:7f:3a:
         cb:4e:dc:e7:c2:41:56:43:55:b3:50:56:de:c8:ae:1b:5a:37:
         40:9a:9a:fc:9a:ee:36:4d:64:22:cd:49:3d:dc:75:dd:a0:91:
         17:6f:b7:06:71:75:94:c4:c2:6b:9c:2a:bf:b9:fe:c5:9a:29:
         4a:4e:c6:fd:6e:2d:ff:b3:be:ad:55:8e:40:44:06:6d:1e:6c:
         a1:a2:5a:d5:29:4a:96:45:94:8a:d2:07:c0:d6:dc:c0:57:ce:
         70:83:94:24:6e:9b:a2:b0:7e:15:d0:27:3d:2f:16:c9:39:98:
         df:a3:23:5a:c7:44:6a:51:09:2d:27:91:70:70:3b:7e:b8:28:
         5b:27:ff:8d:fd:fe:57:b5:75:5d:5e:6a:88:97:da:e2:36:23:
         64:b8:32:e7:a0:0c:86:0a:24:b7:71:e1:53:c7:2c:2d:63:ac:
         43:ab:44:32:cf:2d:4e:a0:cc:07:1c:57:47:53:74:05:86:c3:
         82:d3:df:10:91:f1:b0:14:44:20:07:73:76:ab:7f:15:07:a2:
         ab:9f:c2:d3:a9:d8:2f:b7:2e:4f:0f:76:a2:5c:da:bc:68:e5:
         24:91:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----