Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0879b4-298b-4ec3-af08-a3300bbe2aaf/1/h6rdkfbTF97tGoJo9_2wRWPHbQE.mft
File:                     h6rdkfbTF97tGoJo9_2wRWPHbQE.mft (raw, json)
Hash identifier:          re4efCli0YDXPc1JQ7V1kxj2Uh6+h/sxeb2sjx4GCoI=
Subject key identifier:   3F:BD:9F:AD:8A:41:27:FF:09:FD:A7:D5:F7:CE:33:D2:BA:04:FF:AD
Authority key identifier: 87:AA:DD:91:F6:D3:17:DE:ED:1A:82:68:F7:FD:B0:45:63:C7:6D:01
Certificate issuer:       /CN=87aadd91f6d317deed1a8268f7fdb04563c76d01
Certificate serial:       019196812E87403A317084187A5594449F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6rdkfbTF97tGoJo9_2wRWPHbQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0879b4-298b-4ec3-af08-a3300bbe2aaf/1/h6rdkfbTF97tGoJo9_2wRWPHbQE.mft
Manifest number:          0B4D
Signing time:             Wed 28 Aug 2024 01:02:14 +0000
Manifest this update:     Wed 28 Aug 2024 01:02:14 +0000
Manifest next update:     Thu 29 Aug 2024 01:02:14 +0000
Files and hashes:         1: h6rdkfbTF97tGoJo9_2wRWPHbQE.crl (hash: JRWr0IWYsqTPCWkJY2U1ZvvFIrnCyca3d1ChJOOhJqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:96:81:2e:87:40:3a:31:70:84:18:7a:55:94:44:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87aadd91f6d317deed1a8268f7fdb04563c76d01
        Validity
            Not Before: Aug 28 01:02:14 2024 GMT
            Not After : Aug 29 01:02:14 2024 GMT
        Subject: CN=3fbd9fad8a4127ff09fda7d5f7ce33d2ba04ffad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:0a:27:06:a1:b2:75:a5:db:5e:6e:f3:68:
                    a2:92:a9:cc:da:9d:d3:3d:74:45:35:a2:9d:b6:bf:
                    e0:8a:5e:ff:4b:7a:a7:40:eb:76:33:7a:19:c3:1b:
                    64:d0:30:9b:69:c5:e8:dd:6f:93:2b:30:91:3d:47:
                    16:89:24:90:c0:5d:a9:fa:e9:55:9c:d6:13:cb:7b:
                    fe:9b:23:f2:bb:2a:99:5c:29:12:9c:3f:53:3f:fe:
                    62:7f:12:61:79:33:e5:e2:3e:50:0d:87:5e:a4:aa:
                    05:03:28:d9:b8:70:78:b9:26:d7:bb:85:3c:cd:0c:
                    62:5a:87:e4:9f:88:cd:5e:5c:7e:f3:3b:ed:e5:1d:
                    d8:c2:b0:e0:49:ac:ad:c5:a8:b3:e6:d7:91:10:74:
                    17:5b:45:be:68:a4:e5:67:86:ff:fb:44:89:8c:c0:
                    4c:b6:11:00:dd:01:99:fa:15:51:ca:19:e1:3a:d0:
                    d9:e9:28:c0:dc:31:89:85:de:0c:19:15:ea:32:73:
                    0e:30:8f:91:3c:86:2c:2b:e3:22:d2:2d:50:41:64:
                    d4:cf:d0:b0:f9:28:29:e6:d1:34:74:1f:33:75:7b:
                    f6:ae:58:e7:62:2a:15:57:81:bb:e1:73:bc:58:80:
                    55:b2:31:64:5e:14:b6:87:e9:f5:03:10:e6:1b:46:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:9F:AD:8A:41:27:FF:09:FD:A7:D5:F7:CE:33:D2:BA:04:FF:AD
            X509v3 Authority Key Identifier:
                keyid:87:AA:DD:91:F6:D3:17:DE:ED:1A:82:68:F7:FD:B0:45:63:C7:6D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6rdkfbTF97tGoJo9_2wRWPHbQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0879b4-298b-4ec3-af08-a3300bbe2aaf/1/h6rdkfbTF97tGoJo9_2wRWPHbQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0879b4-298b-4ec3-af08-a3300bbe2aaf/1/h6rdkfbTF97tGoJo9_2wRWPHbQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:be:7f:39:88:9b:b3:db:bf:58:54:0d:d8:c9:5d:f0:de:36:
         cf:5f:85:c3:be:f8:13:b2:9c:f6:8e:73:a2:9b:12:ff:0b:78:
         e9:25:5b:81:91:17:21:12:0b:91:d5:bc:a9:09:f9:d4:de:71:
         75:5a:f5:eb:86:8f:c5:2a:d5:79:d9:16:4e:0c:97:5c:be:f4:
         86:ec:8b:37:4c:ef:ca:ae:b0:05:a6:f1:35:82:96:b8:7e:11:
         82:31:02:86:54:2d:10:22:cf:56:df:a2:e3:c9:28:af:af:d9:
         fd:a4:b3:bc:a8:76:8a:69:0c:b3:e4:be:6d:c6:15:87:62:af:
         cb:34:29:19:67:8e:0c:31:90:69:fe:c4:a9:d4:0c:aa:9f:fe:
         b6:be:26:80:1a:b4:e8:69:e1:bc:cc:f1:9d:77:cf:33:c8:97:
         2f:f1:3e:06:bc:f3:af:59:2c:ab:97:31:90:4b:59:c8:7d:9c:
         31:a3:f3:3b:2c:86:f4:9e:f0:c2:2a:3b:64:c2:f8:a1:e6:c8:
         39:4a:52:b4:b2:ed:55:53:94:29:21:65:35:9f:8d:bc:26:7f:
         bd:c9:cf:86:86:f1:dc:36:fb:36:9e:38:ad:b3:a4:4a:a6:09:
         72:65:d1:52:09:c0:5f:7a:14:47:f2:7d:bf:6b:20:cb:e4:6b:
         86:bb:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----