Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
File:                     cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft (raw, json)
Hash identifier:          dG4VOPTKzQRskMmhjKAaqbYgxy5FVKtxGx0c28Ca7ts=
Subject key identifier:   00:F9:58:AB:44:BF:9F:4B:BF:44:53:52:97:FC:CE:79:8F:32:FC:81
Authority key identifier: 72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
Certificate issuer:       /CN=7232a04fc19d91b50d56836793235ece32ac2834
Certificate serial:       01948F63F83750E957098ED37E6B0889F95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
Manifest number:          0786
Signing time:             Wed 22 Jan 2025 19:01:20 +0000
Manifest this update:     Wed 22 Jan 2025 19:01:20 +0000
Manifest next update:     Thu 23 Jan 2025 19:01:20 +0000
Files and hashes:         1: cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl (hash: DkVhi3Spt0Lcnuoc7s2p4WIyfNzcA4rARj1i82JDVio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:f8:37:50:e9:57:09:8e:d3:7e:6b:08:89:f9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7232a04fc19d91b50d56836793235ece32ac2834
        Validity
            Not Before: Jan 22 19:01:20 2025 GMT
            Not After : Jan 23 19:01:20 2025 GMT
        Subject: CN=00f958ab44bf9f4bbf44535297fcce798f32fc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:9d:44:90:87:45:21:aa:20:a2:23:dc:32:
                    b0:13:3c:af:64:18:8d:00:b0:99:f1:fe:c5:6c:2a:
                    ef:b4:86:82:8b:62:92:d6:61:59:ea:07:11:b1:07:
                    22:eb:bb:e9:91:6e:54:83:a8:e5:dc:c1:19:20:c4:
                    7e:6b:8e:68:f2:d5:d0:08:5e:66:93:f1:ea:34:1e:
                    86:d9:7b:68:f8:b9:c8:fe:64:d2:5c:c6:b4:79:56:
                    b1:90:9c:41:ca:8a:ca:1c:d5:5b:ef:72:89:30:62:
                    65:3e:f5:c4:86:83:61:a8:0b:44:69:b2:3a:6c:52:
                    77:49:70:12:2c:51:05:1c:64:5d:ee:e0:14:2a:49:
                    a0:ee:21:78:d2:4f:12:18:d0:7c:79:10:1e:8b:fa:
                    b8:1d:4b:c6:27:6b:4d:b2:b2:37:f0:07:7a:3b:ca:
                    03:ad:88:4f:d4:41:ef:ef:be:8c:a1:2e:4b:64:d0:
                    30:e1:72:bf:e3:58:a2:fd:14:7a:be:1d:62:60:a1:
                    fa:d7:8c:f9:d5:8b:58:12:2a:d4:dc:35:ec:44:32:
                    f3:04:26:85:89:60:b5:50:c3:53:6d:ff:22:25:da:
                    a2:c5:bd:dc:21:89:24:02:96:64:e4:93:b6:8d:51:
                    6f:b9:9b:bb:b5:b2:19:7a:87:58:c0:e6:3c:05:ba:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F9:58:AB:44:BF:9F:4B:BF:44:53:52:97:FC:CE:79:8F:32:FC:81
            X509v3 Authority Key Identifier:
                keyid:72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:7e:ac:3a:6d:6f:9c:53:33:80:64:f5:4d:f7:ce:ff:dd:
         ec:2f:a3:7c:a2:6b:8e:0d:32:c9:52:15:9b:25:eb:0b:e9:c4:
         01:68:6a:45:bf:6a:37:99:45:da:f0:fd:12:5f:6e:e6:40:40:
         e6:93:24:92:12:54:b3:2f:28:f3:d7:d4:01:37:a9:f9:8d:dc:
         68:f0:36:32:7f:cf:47:20:eb:19:e7:2c:c5:79:df:3c:45:b9:
         e0:7c:19:09:ff:a3:b2:97:ec:99:45:03:df:2d:6b:4c:d6:5b:
         b5:29:f4:45:83:f7:b5:f2:8a:0b:ab:1a:88:bb:a9:d8:70:15:
         bd:2f:6b:61:7f:cb:07:fd:af:58:7a:bf:3c:e0:7a:7f:4f:98:
         b2:51:34:c6:aa:57:10:ae:0e:12:fd:5e:07:2d:a5:5a:77:f2:
         e5:5d:b2:ed:80:62:0c:5b:d1:ed:62:81:fe:70:3f:9d:e9:d3:
         19:74:48:20:d5:fb:ee:bd:73:e4:c8:8d:3f:1a:db:22:97:5b:
         40:fd:39:a3:b4:c0:00:16:2a:81:c1:e4:3a:5e:b5:ff:cc:53:
         15:b4:b3:38:55:db:56:b0:79:ba:5c:96:cd:b7:6b:ca:b9:29:
         d3:11:2d:ab:75:eb:6f:62:0a:d4:62:8d:13:e1:00:99:19:f1:
         0d:43:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----