Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/dc812a-3a00-48ac-b14f-b62b90576d6c/1/CxPRDNuVwxQdplGl1Tyguh_5Fh4.mft
File:                     CxPRDNuVwxQdplGl1Tyguh_5Fh4.mft (raw, json)
Hash identifier:          TS5QT2AFNqU4VkUB9ig3B3OBEaphT9dRPy7U1MAgvKE=
Subject key identifier:   9C:0E:F7:F4:4C:C0:EF:2E:1A:DC:4A:5B:42:9B:11:21:F1:23:D1:44
Authority key identifier: 0B:13:D1:0C:DB:95:C3:14:1D:A6:51:A5:D5:3C:A0:BA:1F:F9:16:1E
Certificate issuer:       /CN=0b13d10cdb95c3141da651a5d53ca0ba1ff9161e
Certificate serial:       019099F151096EBF6CB5A473CE7341A6841E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxPRDNuVwxQdplGl1Tyguh_5Fh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/dc812a-3a00-48ac-b14f-b62b90576d6c/1/CxPRDNuVwxQdplGl1Tyguh_5Fh4.mft
Manifest number:          0B40
Signing time:             Wed 10 Jul 2024 00:00:47 +0000
Manifest this update:     Wed 10 Jul 2024 00:00:47 +0000
Manifest next update:     Thu 11 Jul 2024 00:00:47 +0000
Files and hashes:         1: CxPRDNuVwxQdplGl1Tyguh_5Fh4.crl (hash: QAR1x0RFT5NWv7aeRU1GYtKb6+K4n0nLgHmP76WXlNo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:99:f1:51:09:6e:bf:6c:b5:a4:73:ce:73:41:a6:84:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b13d10cdb95c3141da651a5d53ca0ba1ff9161e
        Validity
            Not Before: Jul 10 00:00:47 2024 GMT
            Not After : Jul 11 00:00:47 2024 GMT
        Subject: CN=9c0ef7f44cc0ef2e1adc4a5b429b1121f123d144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6c:3e:34:e6:da:53:ed:a4:5e:cf:ec:04:7d:
                    33:dd:dd:1b:d3:03:da:d0:fa:69:52:74:bb:b8:90:
                    d5:04:1a:97:2e:07:83:67:d7:44:d9:bc:6b:c2:43:
                    00:c2:af:9a:43:95:6a:d2:9b:2f:7f:09:27:26:29:
                    f0:bc:07:48:6a:b9:73:58:41:fc:ff:3c:b2:9f:ba:
                    f3:dc:76:3c:7f:af:bc:bb:03:70:72:aa:ad:1d:4a:
                    92:6a:b9:9e:2f:7f:5d:63:ae:09:ca:61:5c:62:e3:
                    cb:bd:d8:0f:a3:ee:59:f3:31:49:a9:0e:88:c5:f9:
                    df:96:f7:98:23:50:95:aa:50:65:7b:72:e3:b1:b4:
                    56:28:00:2f:d9:c6:50:d2:03:51:e8:ed:65:89:a4:
                    a5:19:27:42:c2:10:2c:fa:86:c9:4c:3c:33:f9:c6:
                    37:c4:23:bd:89:19:e2:de:85:cb:b2:ff:a3:5b:94:
                    1c:54:30:e0:a7:d1:dc:97:ac:93:e9:25:28:2d:f3:
                    9b:6a:f7:c3:77:01:e4:1b:b3:57:e0:89:3a:cf:0d:
                    3a:02:d0:f0:5d:cf:86:18:8d:f6:63:9f:3b:cd:15:
                    29:c0:09:ac:01:ad:0f:ff:eb:ce:a7:4a:6f:92:25:
                    0c:0c:86:61:56:10:58:17:6d:e8:0b:5a:fb:65:3f:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0E:F7:F4:4C:C0:EF:2E:1A:DC:4A:5B:42:9B:11:21:F1:23:D1:44
            X509v3 Authority Key Identifier:
                keyid:0B:13:D1:0C:DB:95:C3:14:1D:A6:51:A5:D5:3C:A0:BA:1F:F9:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxPRDNuVwxQdplGl1Tyguh_5Fh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/dc812a-3a00-48ac-b14f-b62b90576d6c/1/CxPRDNuVwxQdplGl1Tyguh_5Fh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/dc812a-3a00-48ac-b14f-b62b90576d6c/1/CxPRDNuVwxQdplGl1Tyguh_5Fh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:a8:a2:4a:91:79:6b:13:00:c7:eb:4a:59:29:9a:42:70:
         70:da:e4:f6:c2:57:e3:3b:8a:e6:91:81:8f:09:f5:e6:66:8a:
         a4:56:74:7f:1d:e6:56:73:25:56:7f:34:b4:ff:13:3a:12:82:
         31:fb:b8:36:3a:6a:a6:b6:c5:d5:8a:83:86:6e:e0:f1:8e:f3:
         88:62:65:dc:93:70:5d:11:da:fe:92:e4:37:72:c7:29:a4:d1:
         a0:3c:82:ee:54:b4:67:ae:15:56:93:35:4f:e9:6c:68:65:19:
         c7:40:21:92:75:a3:9b:e1:41:77:0d:4b:87:35:af:7a:c4:42:
         5c:a8:e9:77:fa:cb:6f:fc:7a:dc:ff:ca:1d:0f:13:20:cc:ef:
         dd:09:ba:6d:e9:3f:57:ee:7f:77:00:5b:52:cd:e5:01:fc:2f:
         23:0f:dd:b3:61:4e:ab:7e:72:40:14:b1:8f:81:1c:17:51:bd:
         8a:86:6c:fc:5e:9f:34:6c:2c:05:f2:b0:53:44:b2:55:e8:80:
         e7:30:30:a5:6e:43:23:92:d4:93:9f:99:41:0a:20:5e:aa:bf:
         69:5b:ce:3b:a3:38:0e:95:cd:fa:4c:46:13:4e:32:11:dc:b3:
         9c:2b:97:66:f2:85:c3:69:bc:0d:90:1b:2e:53:d8:4e:05:f2:
         d8:16:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----