Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
File:                     NMzTjbMcyeLZyMP9nQNvaSTncPA.mft (raw, json)
Hash identifier:          5OZIVCrKPLO28ALG6Tl439c2o5kmxkS0K+z0RMZYpJ4=
Subject key identifier:   D0:D6:32:C1:CA:87:1A:15:01:1E:C6:FC:16:03:6E:B5:1A:6C:C2:35
Authority key identifier: 34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0
Certificate issuer:       /CN=34ccd38db31cc9e2d9c8c3fd9d036f6924e770f0
Certificate serial:       019227C5351E3B28A56E7B030F991C536D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NMzTjbMcyeLZyMP9nQNvaSTncPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
Manifest number:          0792
Signing time:             Wed 25 Sep 2024 06:01:28 +0000
Manifest this update:     Wed 25 Sep 2024 06:01:28 +0000
Manifest next update:     Thu 26 Sep 2024 06:01:28 +0000
Files and hashes:         1: NMzTjbMcyeLZyMP9nQNvaSTncPA.crl (hash: kbVAFcx7MsdSR21JtavRCAxr2HLePMUzh4nZQZPDp6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:27:c5:35:1e:3b:28:a5:6e:7b:03:0f:99:1c:53:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34ccd38db31cc9e2d9c8c3fd9d036f6924e770f0
        Validity
            Not Before: Sep 25 06:01:28 2024 GMT
            Not After : Sep 26 06:01:28 2024 GMT
        Subject: CN=d0d632c1ca871a15011ec6fc16036eb51a6cc235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:a0:b6:f1:48:f0:45:8a:00:b7:61:58:39:
                    96:9e:02:d0:ed:23:e2:a7:26:e4:c9:34:d2:50:63:
                    bf:88:03:75:2f:e9:1d:9a:4f:29:22:fa:b6:fc:05:
                    54:74:b6:2f:4d:cb:57:fb:9b:d6:54:58:79:96:42:
                    9f:62:b0:28:f6:8a:88:d5:5e:9d:ea:0a:b9:c4:49:
                    5b:7a:10:ea:80:b3:b2:b3:4d:f3:e0:6e:e8:6f:2a:
                    54:d8:7b:7c:8c:fe:bd:df:1b:b2:76:f4:bb:61:53:
                    16:2f:c3:48:e8:21:15:83:ed:1e:71:de:3a:60:f1:
                    5b:6c:92:54:5c:ba:02:55:d2:a0:c3:56:42:49:70:
                    77:b3:82:76:9b:56:b6:d3:b6:db:54:65:69:bf:3d:
                    da:eb:12:e1:66:64:cf:e0:2e:75:ad:b8:bd:5e:05:
                    36:7a:a2:b1:34:2f:95:62:9f:5f:69:eb:a0:2b:6a:
                    74:7e:31:4b:c1:6c:ee:9c:8c:5d:a9:01:f1:35:7f:
                    69:00:d9:1b:32:2f:19:77:89:63:bb:ae:d8:97:b4:
                    15:a5:c6:eb:44:55:a1:72:94:89:2c:b1:96:a6:8e:
                    ed:dc:44:7d:db:c9:41:42:de:7d:74:87:76:ef:88:
                    af:57:be:5b:3c:92:0a:4c:40:6b:d9:ad:3e:87:94:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:32:C1:CA:87:1A:15:01:1E:C6:FC:16:03:6E:B5:1A:6C:C2:35
            X509v3 Authority Key Identifier:
                keyid:34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMzTjbMcyeLZyMP9nQNvaSTncPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:4f:72:9f:6c:16:7d:81:81:9a:01:08:62:7a:d9:e9:d0:
         6d:e9:88:47:e0:7b:96:49:24:2a:0e:b5:e0:96:9f:1f:6e:7d:
         1d:ab:6a:17:d1:24:9d:c0:62:80:e6:7e:46:2a:96:51:cd:f7:
         dd:19:5b:67:1e:98:86:fe:54:4b:f5:e2:8a:22:41:a6:85:35:
         4d:eb:ac:f3:a8:68:d9:2b:e7:f3:15:5c:fe:24:db:d2:0c:81:
         69:ae:c5:1f:00:fa:55:65:09:bb:a9:ec:78:fd:74:a7:be:c2:
         84:69:de:92:6f:ba:6b:b7:2a:f2:1c:27:85:b7:6c:4c:97:78:
         af:e3:72:c2:54:e9:03:33:c9:4b:58:ba:1c:ba:5b:9d:97:a4:
         33:2f:38:be:3e:50:dd:e7:28:e9:26:d4:b9:df:14:e5:1e:56:
         6e:db:d2:49:8d:d8:8f:73:be:a1:fd:fa:24:7e:1c:e8:d1:ae:
         e6:f9:e9:11:dd:76:80:b0:5b:e1:5f:be:bb:ab:ae:05:35:f7:
         27:b9:95:2a:24:ff:65:b6:49:bb:cb:e5:94:ea:aa:51:c2:28:
         c4:3e:72:c4:9b:62:66:0e:59:53:b5:4e:e9:8d:a7:9a:0b:ec:
         81:56:ca:db:69:b7:39:f7:23:c0:34:34:fd:1e:ed:f5:a6:d3:
         90:15:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----