Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d56515-6fa5-43e5-89b4-8d5feeeca0a3/1/GitxBLo54Aif8ft1nmpSf0qwvvs.mft
File:                     GitxBLo54Aif8ft1nmpSf0qwvvs.mft (raw, json)
Hash identifier:          wo+8+/POkMq9ecTdqI9TId9wn2ipqoP0nrl7QeAQd58=
Subject key identifier:   29:FC:4E:CB:C6:55:2C:D8:D4:9D:9C:8E:9C:6B:F9:F2:41:A0:53:FE
Authority key identifier: 1A:2B:71:04:BA:39:E0:08:9F:F1:FB:75:9E:6A:52:7F:4A:B0:BE:FB
Certificate issuer:       /CN=1a2b7104ba39e0089ff1fb759e6a527f4ab0befb
Certificate serial:       0188514B43727BB425F31330335F4260E763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GitxBLo54Aif8ft1nmpSf0qwvvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d56515-6fa5-43e5-89b4-8d5feeeca0a3/1/GitxBLo54Aif8ft1nmpSf0qwvvs.mft
Manifest number:          0624
Signing time:             Thu 25 May 2023 05:04:26 +0000
Manifest this update:     Thu 25 May 2023 05:04:26 +0000
Manifest next update:     Fri 26 May 2023 05:04:26 +0000
Files and hashes:         1: GitxBLo54Aif8ft1nmpSf0qwvvs.crl (hash: BZiyzU/WD9KbKq5TtT0F5tsXgoyc6nZHdwRwFYVWlmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:51:4b:43:72:7b:b4:25:f3:13:30:33:5f:42:60:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2b7104ba39e0089ff1fb759e6a527f4ab0befb
        Validity
            Not Before: May 25 05:04:26 2023 GMT
            Not After : May 26 05:04:26 2023 GMT
        Subject: CN=29fc4ecbc6552cd8d49d9c8e9c6bf9f241a053fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:81:73:92:c2:a0:3f:ed:3d:81:b8:35:e7:
                    e8:0c:14:e5:5e:52:1a:2d:1e:24:9f:df:06:82:c5:
                    73:87:55:1a:47:4b:1a:96:5f:8a:0b:9a:40:51:34:
                    52:05:96:0c:6e:f0:0c:6d:1d:34:6b:ff:2e:e1:48:
                    d4:98:05:f6:f2:b6:65:08:37:3c:a7:d5:87:ba:56:
                    53:52:fc:39:2f:2e:45:2a:ac:de:0f:cf:bd:c2:e9:
                    89:4f:2c:d6:e3:a2:9f:d0:74:4f:37:a4:5c:52:57:
                    4a:82:df:bb:b1:45:ef:a8:12:17:db:ba:60:7e:a7:
                    23:fe:50:40:b4:23:cd:60:8e:2f:45:4e:67:5e:e0:
                    e2:73:ad:4d:e6:ae:42:52:7e:f3:ef:34:b6:6d:b8:
                    be:6e:73:09:4d:18:4b:44:2c:5d:65:ca:f2:32:8b:
                    93:81:6d:de:fd:20:7b:7b:6b:de:cd:88:08:6f:d4:
                    81:71:70:7f:cf:ce:2a:50:2e:56:5b:25:af:c3:f2:
                    e8:f2:7e:1c:63:d1:fb:23:5d:15:bf:28:b1:da:5e:
                    dc:58:aa:a3:04:06:33:d8:b7:72:f1:f5:59:0d:4c:
                    3f:eb:af:73:e7:13:aa:cc:9c:60:bd:7a:66:d7:b9:
                    44:60:55:a3:97:9e:be:24:86:f0:7b:a8:5b:6c:7b:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:4E:CB:C6:55:2C:D8:D4:9D:9C:8E:9C:6B:F9:F2:41:A0:53:FE
            X509v3 Authority Key Identifier:
                keyid:1A:2B:71:04:BA:39:E0:08:9F:F1:FB:75:9E:6A:52:7F:4A:B0:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GitxBLo54Aif8ft1nmpSf0qwvvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d56515-6fa5-43e5-89b4-8d5feeeca0a3/1/GitxBLo54Aif8ft1nmpSf0qwvvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d56515-6fa5-43e5-89b4-8d5feeeca0a3/1/GitxBLo54Aif8ft1nmpSf0qwvvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:9b:e2:02:66:36:b2:d8:a3:d3:b3:43:3e:1d:58:a9:a9:
         ba:ce:15:af:66:0d:01:28:34:ca:cb:dd:64:17:13:33:0f:af:
         14:a8:ac:75:f9:39:25:cd:25:53:69:c8:02:50:8f:23:b8:1f:
         5c:d8:5f:49:97:74:43:78:ae:78:26:10:17:13:2a:56:a1:bc:
         86:9c:18:af:6e:c3:3d:59:54:82:fd:a7:fd:e5:78:a6:5d:d8:
         6f:22:cb:df:d1:fd:c4:53:ed:5c:5d:69:84:e2:10:ed:13:16:
         f3:40:3a:9b:9a:45:b7:39:14:de:82:62:a2:6f:a5:9a:31:a7:
         7a:e4:28:58:08:48:96:7f:2c:40:f3:3e:c0:34:f8:13:23:07:
         3a:4c:df:4b:44:eb:a6:5e:22:84:9e:c8:fa:09:d9:4b:a7:ae:
         38:ca:4b:10:d0:76:b1:d2:ec:a2:d3:eb:41:af:b9:7e:bc:ac:
         6a:8a:2e:cf:66:7e:99:52:cb:93:3d:8b:81:8b:34:1e:ac:4e:
         ec:2f:ab:33:13:83:86:c0:a0:2f:83:1d:60:5c:6a:ed:6f:9b:
         33:f7:2f:d0:ec:be:e5:67:2b:f0:c1:32:03:6d:16:33:76:b9:
         89:d9:87:d7:15:c7:79:28:d4:63:03:5b:21:ed:2e:23:7e:4c:
         12:d2:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----