Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft
File:                     IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft (raw, json)
Hash identifier:          YzUoZCg9qkqsK/FV1dOv92dpufHM1xBaj5VJ9h6UMd8=
Subject key identifier:   30:D4:F3:F2:3C:79:7F:4A:B6:2C:6B:6C:48:94:9E:60:2D:C7:FA:C1
Authority key identifier: 20:3C:4E:83:C4:8A:60:D8:C1:85:EA:6E:F2:CA:ED:53:82:32:EA:54
Certificate issuer:       /CN=203c4e83c48a60d8c185ea6ef2caed538232ea54
Certificate serial:       018D3A45EC49090E366F0663182871D036D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDxOg8SKYNjBhepu8srtU4Iy6lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft
Manifest number:          1043
Signing time:             Wed 24 Jan 2024 07:01:17 +0000
Manifest this update:     Wed 24 Jan 2024 07:01:17 +0000
Manifest next update:     Thu 25 Jan 2024 07:01:17 +0000
Files and hashes:         1: IDxOg8SKYNjBhepu8srtU4Iy6lQ.crl (hash: UPsDMEqCqexaVj5F9ekmvV2iF/RwHxUT2RrSVh1413o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3a:45:ec:49:09:0e:36:6f:06:63:18:28:71:d0:36:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203c4e83c48a60d8c185ea6ef2caed538232ea54
        Validity
            Not Before: Jan 24 07:01:17 2024 GMT
            Not After : Jan 25 07:01:17 2024 GMT
        Subject: CN=30d4f3f23c797f4ab62c6b6c48949e602dc7fac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:d0:eb:c8:21:cf:2b:4f:d7:1e:c3:87:e2:
                    f1:43:c4:97:bd:75:8d:80:74:83:a5:4c:f4:04:49:
                    46:65:ee:dd:c2:11:9d:b4:ee:fc:62:71:25:5f:2c:
                    d6:47:f2:b3:70:b8:46:1e:44:75:25:50:22:3a:51:
                    3c:8e:20:8c:f8:a5:c9:cb:4b:64:74:9b:29:4e:24:
                    77:dc:e0:29:b5:7b:41:2a:ed:5a:30:aa:48:5a:c7:
                    d1:19:fc:f5:ba:05:c6:6b:b5:04:34:c0:2f:f2:11:
                    3d:61:6e:aa:68:06:87:76:b0:6d:db:a3:95:ce:ed:
                    e0:5c:92:18:50:18:06:3a:c1:12:b9:79:77:be:6c:
                    de:00:07:d8:6a:a3:b9:bb:c1:98:e8:d6:fd:d9:e1:
                    3a:8e:f7:2f:37:c8:5b:a5:26:e4:b2:a8:bf:da:d1:
                    f2:2d:d6:b8:e5:c4:6b:83:7d:f9:51:87:52:4a:eb:
                    bf:7c:1e:d3:fd:2d:fe:42:fe:d3:24:63:e6:43:26:
                    94:d8:eb:ce:ed:40:f6:09:9f:77:34:74:94:50:e8:
                    80:02:83:c1:37:73:87:07:d0:e0:56:54:e9:ff:89:
                    24:c1:7c:7b:3d:f3:10:b2:80:e4:c5:51:17:9b:c4:
                    0f:07:99:35:57:43:9a:e3:aa:da:69:2a:f1:2f:4e:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:F3:F2:3C:79:7F:4A:B6:2C:6B:6C:48:94:9E:60:2D:C7:FA:C1
            X509v3 Authority Key Identifier:
                keyid:20:3C:4E:83:C4:8A:60:D8:C1:85:EA:6E:F2:CA:ED:53:82:32:EA:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDxOg8SKYNjBhepu8srtU4Iy6lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:32:ca:86:ea:52:4c:3f:04:2e:0e:b6:a8:b4:0d:f9:81:
         eb:72:6d:67:05:62:d5:1c:90:a4:c0:f7:4b:82:bf:12:d6:a5:
         e8:74:71:88:a5:a6:75:18:cc:64:12:ce:94:7b:6a:c7:21:b6:
         e1:a1:64:a8:c1:21:64:13:12:eb:f6:b7:bd:8e:67:d6:0f:0d:
         a7:46:19:fc:16:86:dd:68:52:e4:53:42:a0:e8:e7:0e:0b:b7:
         80:4f:68:4c:d1:0d:2f:8b:85:d4:7b:cc:af:18:d7:f6:f4:aa:
         91:76:55:a3:b2:8b:cf:89:77:c9:c5:f8:82:8e:2d:97:5f:1b:
         97:fd:15:30:4c:d3:95:ac:7a:3c:9d:e3:14:d1:52:1f:8b:9d:
         14:5a:90:e4:4e:d0:9f:dc:07:c2:75:4a:9a:bc:5e:f5:36:ca:
         6f:5a:8b:56:5e:fd:ea:3e:98:43:ac:da:4a:1b:1a:ca:31:88:
         53:3b:59:4d:dc:c1:3a:46:af:75:2f:81:a3:a4:29:dc:cf:bb:
         85:15:3a:f4:8a:4b:5c:93:f5:a7:5c:42:d2:8b:5e:d1:e4:05:
         d5:d7:e1:e1:0a:8a:fb:be:d2:39:50:e9:9c:c5:1a:02:c9:24:
         d5:2b:98:7c:a0:09:1f:ab:0d:87:62:92:a9:4d:98:83:e0:a9:
         9d:0f:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----