Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
File:                     gMGC8Jzf20wXzTGwpYkaidYTx_w.mft (raw, json)
Hash identifier:          ayaJVhT+j+sZRuZyo+Edad9mqRy9YhxA4IY9tQijdQ4=
Subject key identifier:   38:14:8E:31:99:FA:83:17:D3:9F:5E:78:17:68:BA:C7:2A:16:F2:95
Authority key identifier: 80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
Certificate issuer:       /CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
Certificate serial:       01922F12A85DC56C4776EB7D4E82404B33B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
Manifest number:          044A
Signing time:             Thu 26 Sep 2024 16:03:24 +0000
Manifest this update:     Thu 26 Sep 2024 16:03:24 +0000
Manifest next update:     Fri 27 Sep 2024 16:03:24 +0000
Files and hashes:         1: gMGC8Jzf20wXzTGwpYkaidYTx_w.crl (hash: gzNQw/g8Vw0eQ/MsX9EdMGuDkDe8IgtA3w+xkGsr1bM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:12:a8:5d:c5:6c:47:76:eb:7d:4e:82:40:4b:33:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
        Validity
            Not Before: Sep 26 16:03:24 2024 GMT
            Not After : Sep 27 16:03:24 2024 GMT
        Subject: CN=38148e3199fa8317d39f5e781768bac72a16f295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:19:94:26:2f:46:d1:14:8f:4c:43:98:9a:
                    f5:65:81:54:59:3c:d5:68:2f:07:7d:00:5a:2f:bb:
                    c9:ad:97:9c:1d:e3:97:49:ed:1e:17:20:55:1a:5e:
                    1a:2a:7f:38:b4:07:4d:90:d7:09:f5:b4:3f:8a:c8:
                    40:ef:b1:ff:92:e0:84:93:02:ce:80:b2:2e:4d:d3:
                    c3:e4:e2:12:2d:f6:a2:e9:5a:81:69:87:76:2e:fc:
                    ee:13:0c:af:c5:4d:00:dd:74:39:01:ef:c1:4f:11:
                    99:fc:c6:18:8f:ea:8b:5a:f7:c3:89:b8:83:6c:20:
                    47:9d:a3:15:fe:08:b0:1c:09:97:cb:14:1e:e0:6d:
                    d7:b6:f5:3f:f2:ac:45:7c:22:df:26:40:61:a7:48:
                    b8:da:8c:1e:4a:55:44:a5:c8:e4:2a:d0:8c:ee:e2:
                    c0:5b:fd:05:7f:2c:dc:54:21:97:13:a8:5c:b2:f9:
                    06:a4:07:32:6c:36:11:70:c7:a7:11:5f:3b:2a:6c:
                    d5:d4:78:74:ea:25:01:00:74:31:cd:0e:7a:b6:13:
                    68:1f:d6:89:4b:ec:cc:df:6b:e1:ca:b4:c9:b7:99:
                    ce:ce:06:9b:5e:5b:82:48:7e:40:d6:1d:45:40:ad:
                    23:d8:62:ce:53:ca:d3:9e:21:7d:16:0d:79:df:6e:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:14:8E:31:99:FA:83:17:D3:9F:5E:78:17:68:BA:C7:2A:16:F2:95
            X509v3 Authority Key Identifier:
                keyid:80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:95:53:88:91:71:8b:f4:58:2f:e6:ad:6e:c5:20:c7:40:
         9d:df:6b:23:ba:0c:d8:c8:39:7b:6f:93:5f:c5:61:ac:37:93:
         42:de:4e:fc:e1:07:8e:9d:1b:0c:06:71:91:e8:e4:90:82:52:
         36:e9:34:5e:22:f6:3a:07:fc:19:1c:2f:2c:79:41:ab:d8:16:
         ca:ec:9d:f2:ee:c9:78:a6:d9:82:6b:2f:5e:12:bb:5c:c9:d5:
         10:ce:e9:62:1a:31:a8:77:7f:3b:c6:41:22:14:2d:8f:5d:d4:
         97:98:bf:62:c9:09:d2:c2:69:4b:58:f7:34:ec:09:6d:33:72:
         93:93:d2:3f:0d:54:db:1b:5d:1f:09:26:84:d8:87:0b:1a:12:
         59:cf:ed:2d:19:a9:a6:80:1a:42:b4:4c:20:25:3a:8b:4f:2d:
         0a:96:f1:13:af:13:cf:bb:a9:67:91:b8:01:41:c4:f6:0f:62:
         a4:45:a1:27:f4:b1:9e:38:20:a4:d5:d1:1d:8d:af:de:c3:57:
         f7:49:16:e2:31:32:92:9d:87:67:2f:bc:1b:ae:47:be:d2:50:
         2f:dd:f5:b7:b2:d1:2f:f1:a8:f3:43:e2:d9:97:2d:4b:3d:93:
         da:31:4b:37:1a:92:a4:50:bf:de:f2:32:da:43:b6:f3:93:61:
         e1:04:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----