Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/82fb66-2814-4675-8f04-fd89d1d26763/1/9XTcY_7LSf2pv-3motna4LVN0kk.mft
File:                     9XTcY_7LSf2pv-3motna4LVN0kk.mft (raw, json)
Hash identifier:          eLUWHooLESLHNzGzUI0q+cIszhERqlJ4ISV/U7AKjd8=
Subject key identifier:   AC:83:EB:51:D1:FB:74:FA:23:09:B1:58:8C:E2:7A:33:0C:A6:EA:6F
Authority key identifier: F5:74:DC:63:FE:CB:49:FD:A9:BF:ED:E6:A2:D9:DA:E0:B5:4D:D2:49
Certificate issuer:       /CN=f574dc63fecb49fda9bfede6a2d9dae0b54dd249
Certificate serial:       0193D2C6E6BB6065AC5168003C8A774AA226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XTcY_7LSf2pv-3motna4LVN0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/82fb66-2814-4675-8f04-fd89d1d26763/1/9XTcY_7LSf2pv-3motna4LVN0kk.mft
Manifest number:          1385
Signing time:             Tue 17 Dec 2024 04:01:10 +0000
Manifest this update:     Tue 17 Dec 2024 04:01:10 +0000
Manifest next update:     Wed 18 Dec 2024 04:01:10 +0000
Files and hashes:         1: 9XTcY_7LSf2pv-3motna4LVN0kk.crl (hash: hTxut1LWdcFNjyje+0j9jolNWdXDlPJLth5MU+zD/0Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:d2:c6:e6:bb:60:65:ac:51:68:00:3c:8a:77:4a:a2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f574dc63fecb49fda9bfede6a2d9dae0b54dd249
        Validity
            Not Before: Dec 17 04:01:10 2024 GMT
            Not After : Dec 18 04:01:10 2024 GMT
        Subject: CN=ac83eb51d1fb74fa2309b1588ce27a330ca6ea6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:cd:21:f5:6f:8c:b0:52:56:98:f5:b8:83:
                    0e:29:fa:f4:c5:f9:27:4a:3b:75:ef:b2:8b:8f:f2:
                    28:f3:68:d8:5f:b2:fc:35:c4:ce:ae:b1:34:fd:31:
                    3f:e6:63:4c:54:87:ac:d4:c6:3b:c4:04:73:4a:81:
                    1c:e4:cd:70:53:97:16:d2:cb:8a:17:b2:9a:d9:78:
                    40:d2:fe:ab:9f:d4:00:a5:d6:28:e6:58:69:ab:e5:
                    5d:d6:eb:d4:f7:6b:e5:b0:83:20:89:38:65:80:88:
                    cf:cb:8f:cd:c9:91:31:20:15:db:4f:79:c1:41:61:
                    3a:1c:80:5a:96:5b:08:31:ea:75:88:c9:a0:be:4e:
                    16:a6:6c:d4:e3:4b:2c:5f:fb:87:4b:0c:7a:d8:6a:
                    4e:1a:ad:fb:be:4f:6c:99:75:64:09:36:82:74:5f:
                    3e:8d:00:38:0a:d3:f1:26:fa:87:e0:c9:76:e0:d0:
                    8e:51:20:fa:a3:a9:be:35:22:52:6c:e2:a5:ab:53:
                    83:04:8d:9f:81:e1:44:e2:d3:ba:8e:99:d9:fa:ed:
                    11:fc:72:ca:9a:c5:51:02:94:90:4c:37:57:0e:76:
                    2a:93:7a:c8:ff:6f:51:1a:b3:2e:76:b2:bb:52:1c:
                    d7:08:d2:f1:10:45:a3:65:61:68:e8:c3:60:f4:31:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:EB:51:D1:FB:74:FA:23:09:B1:58:8C:E2:7A:33:0C:A6:EA:6F
            X509v3 Authority Key Identifier:
                keyid:F5:74:DC:63:FE:CB:49:FD:A9:BF:ED:E6:A2:D9:DA:E0:B5:4D:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XTcY_7LSf2pv-3motna4LVN0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/82fb66-2814-4675-8f04-fd89d1d26763/1/9XTcY_7LSf2pv-3motna4LVN0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/82fb66-2814-4675-8f04-fd89d1d26763/1/9XTcY_7LSf2pv-3motna4LVN0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:30:e2:f6:77:fb:2d:27:02:e6:e9:0b:75:ce:17:4e:0f:
         f4:5f:26:a7:b6:27:48:f2:94:d8:18:76:5a:59:7c:10:cf:71:
         40:9d:b5:27:f0:bc:e1:53:83:23:65:a0:b0:dc:b9:6b:78:c3:
         2b:89:9f:7e:94:f0:fb:ce:eb:a0:6d:82:1e:17:92:b2:a4:c6:
         73:e9:ce:20:3f:07:51:5d:d9:bc:5c:1a:ea:4b:e6:5b:b2:59:
         e8:d3:78:fa:ac:09:39:ac:35:5c:f4:3f:ad:85:69:cf:6d:38:
         b4:6f:3b:e6:44:a4:8f:88:a1:42:7f:b4:b4:74:ec:a2:3f:72:
         48:06:87:84:49:f3:c0:40:d8:bf:e0:65:4e:74:ef:21:95:98:
         3d:d3:67:a8:ec:fb:8f:32:d8:ad:72:8d:fc:21:38:e2:0c:aa:
         61:ef:30:d7:c3:c8:bf:68:ae:cf:72:0f:1e:89:17:f5:f4:29:
         3f:18:33:b4:c1:80:ce:7f:d4:36:8e:12:7c:b4:5e:bc:95:32:
         74:e9:76:d5:7a:c4:07:da:a6:fb:e4:f8:a1:de:a0:0a:99:e1:
         13:f5:ef:1e:b4:88:85:c1:9e:e9:a3:e6:19:6a:ab:a6:d1:73:
         14:be:2c:55:43:8b:cb:d3:15:85:8d:2f:a2:a6:07:72:76:86:
         de:b8:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----