Manifest

$ rpki-client -vvf rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
File:                     312968D65F7C01F38D23ED8B20F58313B5F2862A.mft (raw, json)
Hash identifier:          dT58bclevt1OhhuUbQVVcrCdwahZURzTe/hLiP3FaSA=
Subject key identifier:   4A:97:B6:53:FD:60:2C:DE:84:3F:2A:93:59:E7:78:DB:40:AC:B5:57
Authority key identifier: 31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
Certificate issuer:       /CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Certificate serial:       49D384B21D2495BA6852C62EB68A6F50223EE561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
Subject info access:      rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
Manifest number:          02D1
Signing time:             Fri 27 Sep 2024 03:31:05 +0000
Manifest this update:     Fri 27 Sep 2024 03:26:05 +0000
Manifest next update:     Sat 28 Sep 2024 06:34:05 +0000
Files and hashes:         1: 312968D65F7C01F38D23ED8B20F58313B5F2862A.crl (hash: MqPlETuJYJCC8F6YcJWxIQ2BFoyKU1mOcSBW+Dw8N3U=)
                          2: AS64457.asa (hash: NBzualMVX12rVB2txEEddtZ41DQyn7KWydAdLdLbJo8=)
                          3: AS202559.asa (hash: BNlwNL/7WPEeaPJ/UrexLTDgmCwNfpKWmzy6VkA8H40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d3:84:b2:1d:24:95:ba:68:52:c6:2e:b6:8a:6f:50:22:3e:e5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
        Validity
            Not Before: Sep 27 03:26:05 2024 GMT
            Not After : Sep 28 06:34:05 2024 GMT
        Subject: CN=4A97B653FD602CDE843F2A9359E778DB40ACB557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:a8:cb:b2:97:95:70:46:00:07:b1:ad:28:
                    d0:b9:c7:60:60:58:ad:42:2b:77:81:ae:32:d6:d0:
                    0f:26:22:4e:7e:20:c4:ca:0a:d8:21:de:84:b3:0a:
                    7a:e5:32:63:75:11:29:3b:92:ac:0e:1a:5e:22:3c:
                    40:f9:36:a4:57:a4:3b:33:06:12:b8:cf:5b:8b:96:
                    c3:d8:04:cb:97:04:88:9c:83:4c:f0:41:62:18:02:
                    8e:0c:5f:4d:79:9f:72:91:ab:5c:93:d8:0f:a6:b4:
                    c5:98:f1:92:b7:d2:fc:77:ec:e7:77:29:23:4d:b6:
                    13:77:05:e8:ab:80:16:70:4d:d8:96:11:c7:ca:3d:
                    2c:ae:a6:3a:fe:87:9b:92:61:14:bd:e6:1e:07:0b:
                    74:7d:25:36:d7:23:c7:75:e7:b0:b3:ea:5d:e4:fb:
                    cf:4e:e3:cb:ca:fb:51:6e:f3:9e:a8:dd:50:ae:13:
                    a2:9f:74:90:eb:89:77:4b:49:8a:50:bc:c2:72:fc:
                    d2:d0:13:17:36:2b:c8:06:e4:52:1b:57:a7:15:f6:
                    a9:e6:30:4b:39:ef:bc:4f:ab:49:fd:84:2e:b3:de:
                    6b:47:6f:47:e6:8f:f5:aa:5c:91:95:9e:2c:c3:37:
                    62:b0:d3:9d:ae:41:3b:1a:12:6f:af:bb:2c:9a:af:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:B6:53:FD:60:2C:DE:84:3F:2A:93:59:E7:78:DB:40:AC:B5:57
            X509v3 Authority Key Identifier:
                keyid:31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:04:68:31:bb:e2:58:9e:3c:93:45:69:e0:f0:ea:3e:e1:
         7b:2b:b7:c8:bb:1e:b5:8e:cb:f2:55:37:ed:e3:8e:92:ae:43:
         45:00:d1:fd:f0:ad:1f:8e:9d:00:3c:08:4b:0d:58:21:3f:22:
         b2:83:8e:b8:57:18:74:6c:be:6c:26:19:30:f0:a1:cd:94:cc:
         45:d5:1f:a0:06:40:7d:a2:26:62:f8:46:b4:6d:f3:70:c0:98:
         cd:3d:54:57:a6:45:b4:26:45:38:a2:d0:e6:2b:f7:20:33:0c:
         55:d2:aa:a7:e8:34:13:49:9e:28:53:84:f7:7f:92:73:8f:84:
         9f:0b:3d:af:b4:43:18:fc:97:51:85:9f:39:f0:49:d1:ec:b4:
         5a:1b:e9:81:25:da:bd:4b:cc:04:d5:58:17:8c:09:94:60:4a:
         f4:bf:e2:8e:3a:04:03:bd:54:fd:2a:f4:4b:96:e4:8f:6e:35:
         a6:df:32:a8:a9:52:2b:5e:df:1e:82:62:7e:9a:2a:0d:0a:54:
         c1:2d:55:2e:60:47:e4:19:99:61:3a:b2:c5:b9:5a:6c:41:b5:
         a4:26:01:70:8a:6a:3b:f6:ea:a1:f7:8d:cb:e3:48:03:e8:fb:
         71:02:bc:be:f0:ca:a7:a1:90:b1:5f:59:91:ba:a4:94:0a:95:
         e4:d3:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----