Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft
File:                     fqb261IgGBAWg9qKQW1Umj4qTlU.mft (raw, json)
Hash identifier:          tTscH8vBbX849iMGna0wjfgOEvL0yjVzWet9tXbqx1o=
Subject key identifier:   12:67:51:85:0D:BF:94:B6:65:BE:79:0F:4F:3D:3C:6C:3F:86:33:4D
Authority key identifier: 7E:A6:F6:EB:52:20:18:10:16:83:DA:8A:41:6D:54:9A:3E:2A:4E:55
Certificate issuer:       /CN=7ea6f6eb522018101683da8a416d549a3e2a4e55
Certificate serial:       0190A13DC881CF402AC8966642CFEC2E7442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqb261IgGBAWg9qKQW1Umj4qTlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft
Manifest number:          D2
Signing time:             Thu 11 Jul 2024 10:01:39 +0000
Manifest this update:     Thu 11 Jul 2024 10:01:39 +0000
Manifest next update:     Fri 12 Jul 2024 10:01:39 +0000
Files and hashes:         1: fqb261IgGBAWg9qKQW1Umj4qTlU.crl (hash: 6EsGGy4dPlE9S0A31hlj3dtBB+ctboTguaRGVWwzyP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a1:3d:c8:81:cf:40:2a:c8:96:66:42:cf:ec:2e:74:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea6f6eb522018101683da8a416d549a3e2a4e55
        Validity
            Not Before: Jul 11 10:01:39 2024 GMT
            Not After : Jul 12 10:01:39 2024 GMT
        Subject: CN=126751850dbf94b665be790f4f3d3c6c3f86334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:3d:04:c4:f3:29:b3:77:f1:5b:02:c2:e0:
                    c2:74:b6:fe:ef:8b:08:1b:6e:51:be:4d:b9:88:c1:
                    e3:42:fa:01:c5:b8:e4:51:85:ae:ba:fd:51:13:6a:
                    e7:5c:c1:a6:30:dd:e8:cd:c4:61:2e:1e:41:f7:b1:
                    8c:4e:2b:b0:72:64:28:2e:f9:c1:0d:70:a7:75:89:
                    27:e5:70:04:8d:93:f0:82:4f:3d:1a:fc:d9:c4:7b:
                    86:26:5a:13:d8:1d:4a:be:61:e5:90:df:e5:52:fa:
                    24:ad:91:76:5c:8c:30:50:79:21:e2:ce:66:f2:af:
                    a8:2c:d4:d8:67:a1:3c:87:97:61:c2:60:36:ae:04:
                    82:a4:43:a6:e3:08:8d:89:32:a0:fc:11:28:e0:ac:
                    16:ef:1e:59:88:1f:76:72:6c:f7:0c:dd:db:c1:77:
                    41:e6:d9:ef:78:03:2f:d2:0e:9b:4c:eb:f3:3b:c0:
                    49:6e:73:08:6c:c0:cb:00:21:78:b2:7a:d9:a5:91:
                    c4:e0:aa:d4:80:32:fb:ee:33:39:a2:d6:5e:14:0c:
                    f5:73:1d:84:86:21:a1:1a:0b:18:59:a3:25:30:93:
                    10:40:bd:70:e5:01:02:61:c1:a1:87:59:91:fd:6f:
                    36:07:1f:db:0e:24:e3:c1:79:4c:c2:5d:f8:7b:fa:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:51:85:0D:BF:94:B6:65:BE:79:0F:4F:3D:3C:6C:3F:86:33:4D
            X509v3 Authority Key Identifier:
                keyid:7E:A6:F6:EB:52:20:18:10:16:83:DA:8A:41:6D:54:9A:3E:2A:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqb261IgGBAWg9qKQW1Umj4qTlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:ee:4e:15:25:ce:4d:09:72:8a:b0:cb:15:06:bc:47:2d:
         48:25:1a:1e:03:fc:2d:1f:64:2b:71:20:74:d2:e4:3b:ec:74:
         fa:35:4f:79:c3:96:d3:be:c3:c7:ab:69:85:71:eb:7f:a9:cb:
         07:d1:9d:17:ec:13:5b:dc:01:d0:ac:aa:f1:43:60:4a:4d:82:
         db:2f:15:a9:97:ff:b2:63:4a:a8:75:15:0d:87:4b:cd:0a:04:
         2b:38:5a:c2:61:eb:72:1d:8e:8e:d9:bd:37:75:40:00:00:05:
         73:91:77:33:13:da:37:91:2a:7e:79:da:e9:07:a4:e7:3b:df:
         dd:28:f8:6a:b4:41:3e:c2:7e:4a:20:61:9a:1b:5c:c4:45:03:
         14:f7:2f:3c:ac:57:07:62:85:40:fe:b4:2b:66:81:91:06:e2:
         77:06:52:8a:2c:04:f2:10:9d:c2:c0:3f:0c:7c:c5:eb:96:e3:
         10:b1:ab:44:c7:98:e3:a0:dc:2a:8c:d1:11:f9:66:a4:e3:e5:
         b0:0f:6b:fe:9d:41:4f:c3:b5:7b:92:0a:f7:ab:8f:43:41:77:
         a4:c1:93:ef:3e:cf:95:53:b9:b1:d0:e1:e2:a0:2c:8b:62:e1:
         05:bf:f3:63:e3:37:68:b6:7f:db:16:8b:52:71:e1:e4:35:19:
         08:3c:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----