Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
File:                     bYNhz6ErMnLKKjGvvwTIID7GI3k.mft (raw, json)
Hash identifier:          RnECjhwRrTHgQCnJ1fcwbvEN5sQetj/yhpadhycMfno=
Subject key identifier:   F7:83:75:C4:40:7E:E0:B5:5A:6B:A1:B6:00:CA:A2:9A:5C:51:A4:D5
Authority key identifier: 6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79
Certificate issuer:       /CN=6d8361cfa12b3272ca2a31afbf04c8203ec62379
Certificate serial:       0193617A1FCB98991347A6BCB0A403FBC8F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYNhz6ErMnLKKjGvvwTIID7GI3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
Manifest number:          25
Signing time:             Mon 25 Nov 2024 04:00:13 +0000
Manifest this update:     Mon 25 Nov 2024 04:00:13 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:13 +0000
Files and hashes:         1: bYNhz6ErMnLKKjGvvwTIID7GI3k.crl (hash: YUtkuG5lk2poNBD7oEjTonC4YuXZ2Zk6EKTjLLfyM0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:7a:1f:cb:98:99:13:47:a6:bc:b0:a4:03:fb:c8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8361cfa12b3272ca2a31afbf04c8203ec62379
        Validity
            Not Before: Nov 25 04:00:13 2024 GMT
            Not After : Nov 26 04:00:13 2024 GMT
        Subject: CN=f78375c4407ee0b55a6ba1b600caa29a5c51a4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:0b:d6:e1:b1:b4:a0:7f:30:60:6a:b8:28:
                    a7:4a:e5:47:35:d5:ce:90:cf:ab:a9:57:92:05:a3:
                    2d:ff:63:d3:b7:a5:3d:c0:53:4f:49:6a:a1:3e:cb:
                    8f:5b:55:33:f1:00:06:7e:af:af:d7:6f:40:0a:c6:
                    3d:8c:32:ee:9f:0f:0e:a9:43:41:f3:8a:a2:17:c9:
                    1f:05:54:c4:35:fc:81:9a:8c:fe:1f:f9:be:30:95:
                    cc:d1:e8:d1:b8:f2:01:ec:f2:36:39:c1:fd:16:fb:
                    f5:37:dd:c6:69:0f:66:c6:fa:60:7d:23:59:a1:51:
                    cb:b6:a9:a0:0f:0c:b6:34:7a:2b:f2:1f:36:97:cb:
                    ee:b4:b1:b0:f4:02:4f:ad:a1:ce:c0:24:86:b7:37:
                    2a:de:62:96:74:ca:38:38:13:5c:f2:2f:c7:77:d0:
                    a6:a2:0c:90:33:2d:be:3e:f8:b8:3a:8b:dc:6f:a1:
                    67:31:c5:83:7b:42:12:20:0a:b9:98:a6:d0:36:5f:
                    79:1f:9c:65:58:75:3a:64:76:28:a2:75:22:30:38:
                    4f:99:e1:1d:02:12:7a:f6:e5:ea:e4:ad:d5:cc:88:
                    ae:e5:71:41:89:34:67:83:a5:da:8c:f6:cd:2d:d0:
                    fc:cd:fe:94:55:7f:3a:fa:63:26:5e:2e:c6:90:a5:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:75:C4:40:7E:E0:B5:5A:6B:A1:B6:00:CA:A2:9A:5C:51:A4:D5
            X509v3 Authority Key Identifier:
                keyid:6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYNhz6ErMnLKKjGvvwTIID7GI3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:01:29:e5:ca:62:1d:65:e0:d5:6a:3d:f7:8a:b5:57:27:
         af:e6:79:d4:4c:29:50:8c:10:2e:be:20:00:45:6e:93:e4:78:
         95:4d:26:c2:5d:87:66:63:b1:81:80:6b:b7:f7:cb:2d:5f:b9:
         de:e2:b3:6d:bf:42:9e:6c:81:5b:1e:7d:02:d2:82:01:94:77:
         e6:ee:0b:78:8a:c7:9a:ff:0f:43:26:83:e0:13:c0:b6:c3:15:
         18:bc:78:ef:29:9d:76:7c:a6:d4:0c:79:16:d4:a2:1c:00:4d:
         72:c3:f0:7a:3f:88:1d:67:a9:8e:d3:5e:1e:cd:a8:45:38:f5:
         4d:11:5b:c7:1d:38:dd:e7:19:58:a2:3d:de:a1:06:d5:0c:ec:
         8c:3a:d4:20:c8:0e:1a:6e:bd:38:e1:2b:92:b2:b6:35:d9:32:
         e1:d2:14:da:fe:b5:82:bc:3b:98:8e:b7:eb:87:67:0c:63:3e:
         e8:81:48:62:6f:fd:36:d1:75:3f:e8:eb:1a:b5:00:6f:1c:82:
         f3:5f:e0:1e:57:60:87:5b:0c:ff:c8:23:f9:6d:0f:0d:4c:23:
         3d:1f:c8:81:5f:a3:c4:fe:ec:fd:e2:5f:48:d8:e6:47:95:e3:
         ca:ce:d8:d9:0e:fe:92:8c:ef:ff:f2:bd:2f:cc:4b:72:93:d1:
         84:f3:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----