Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft
File:                     ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft (raw, json)
Hash identifier:          wY82HH5s1BGF74bSJLEf6Jz2eBv5QEy7P1jlsj7denI=
Subject key identifier:   08:7F:8D:96:8A:DF:92:18:8E:B2:B1:88:0D:9B:9B:7B:4B:36:1E:10
Authority key identifier: CA:C5:91:EA:46:49:C4:1E:FE:6F:7C:7C:61:08:0A:22:43:3A:0B:88
Certificate issuer:       /CN=cac591ea4649c41efe6f7c7c61080a22433a0b88
Certificate serial:       0192B82E83524B7F6012114F9520FDD4F7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysWR6kZJxB7-b3x8YQgKIkM6C4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft
Manifest number:          1319
Signing time:             Wed 23 Oct 2024 07:01:48 +0000
Manifest this update:     Wed 23 Oct 2024 07:01:48 +0000
Manifest next update:     Thu 24 Oct 2024 07:01:48 +0000
Files and hashes:         1: ysWR6kZJxB7-b3x8YQgKIkM6C4g.crl (hash: m9FeEPjDVRryCdtgR0j9+EWN0C9+8jryL7gCfUOxgkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b8:2e:83:52:4b:7f:60:12:11:4f:95:20:fd:d4:f7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac591ea4649c41efe6f7c7c61080a22433a0b88
        Validity
            Not Before: Oct 23 07:01:48 2024 GMT
            Not After : Oct 24 07:01:48 2024 GMT
        Subject: CN=087f8d968adf92188eb2b1880d9b9b7b4b361e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:6e:c0:3a:68:71:41:b4:08:98:af:45:43:
                    c6:8c:96:7b:50:f7:d0:c1:c8:13:24:c6:2e:90:49:
                    f1:dc:f4:de:4a:55:45:1b:13:85:a4:0f:a7:05:e6:
                    b6:01:d5:49:bc:63:ee:10:62:df:2a:42:91:70:23:
                    2f:17:bc:b7:08:d8:fe:bf:3d:bf:6c:04:06:10:47:
                    8a:ea:24:d9:95:b9:cc:57:93:e8:f0:e3:2e:b0:2e:
                    dd:25:83:c4:26:63:c2:b7:2d:10:b0:8a:24:d8:b6:
                    d0:60:ab:f9:66:54:af:f5:b0:98:7f:99:82:05:88:
                    3f:91:86:b2:6b:ad:c5:17:06:a4:fb:e6:c9:ab:c6:
                    b5:6c:5a:8a:ce:60:b5:9f:d6:6c:63:1a:78:36:36:
                    50:4a:84:40:53:4e:a8:f6:1b:30:39:f8:ac:80:7e:
                    93:76:53:11:8c:13:13:e6:d8:5c:ef:93:9e:6e:af:
                    10:d5:84:81:85:5d:97:25:c2:60:01:9d:c9:71:5f:
                    4f:78:b1:ff:17:dc:c1:ee:7f:49:3f:e6:59:97:57:
                    59:1f:22:a1:1b:bb:06:53:45:5f:09:fc:f5:7e:0c:
                    3f:d8:b8:ec:01:ec:eb:5b:22:5e:33:71:7a:2a:91:
                    e6:e1:6d:74:01:8d:9c:cd:55:69:25:ce:cc:bd:71:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:8D:96:8A:DF:92:18:8E:B2:B1:88:0D:9B:9B:7B:4B:36:1E:10
            X509v3 Authority Key Identifier:
                keyid:CA:C5:91:EA:46:49:C4:1E:FE:6F:7C:7C:61:08:0A:22:43:3A:0B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysWR6kZJxB7-b3x8YQgKIkM6C4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:bf:35:4e:c7:16:7d:9d:c7:95:9c:46:2b:7d:c4:1c:24:
         6f:7c:6a:a6:f6:87:f0:3e:94:88:2f:13:b1:23:cb:fe:59:64:
         30:40:2a:86:52:1e:62:da:bf:d4:af:8a:95:86:77:03:15:64:
         b9:a3:9a:32:80:56:58:03:22:a4:a1:b7:06:a0:70:78:db:42:
         b3:20:52:2b:d2:50:f7:bf:bb:42:3d:a5:50:23:c9:0f:39:96:
         92:d5:0c:78:2e:a8:e9:16:14:80:b4:a7:bb:77:43:9a:ac:7d:
         a4:a5:3c:7f:8b:24:76:09:16:ae:6d:d7:48:3c:fd:f6:00:7f:
         a2:a1:5c:f9:5e:9f:02:4b:c0:b5:e6:2e:bb:3c:fa:63:49:09:
         9f:86:de:ac:43:72:16:f2:8a:e0:1a:79:45:bb:02:80:95:94:
         9f:0d:42:78:74:0e:bc:98:9b:8d:5d:67:58:5a:f2:09:7e:c4:
         19:c3:24:d2:9f:6d:94:55:1e:22:e7:bd:5e:af:a6:ae:06:44:
         b7:d3:9e:d4:75:2a:92:82:48:16:a9:44:b8:03:85:8f:aa:98:
         c7:9b:1d:70:0b:a9:a5:04:a4:5e:9f:f8:4f:cb:f2:5d:8d:8c:
         33:f7:4f:34:ab:3e:25:9b:e3:c3:d2:66:1b:f1:d1:fb:4a:6c:
         ac:9e:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----