Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9e6488-3b27-43d8-aa3c-b85451bd9645/1/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.mft
File:                     JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.mft (raw, json)
Hash identifier:          pBOCp1sqRsiiBcsfSAbTYXdbgOTfEo56bADSGFxF3C4=
Subject key identifier:   67:E0:C8:77:AD:FD:2A:62:C0:D5:CD:81:89:D9:74:37:17:B1:57:4B
Authority key identifier: 24:FF:04:28:83:2C:6D:89:BD:FE:2B:83:43:53:9C:EC:92:70:08:80
Certificate issuer:       /CN=24ff0428832c6d89bdfe2b8343539cec92700880
Certificate serial:       018242127FEE2FF94C9444B55DEF2833AA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/9e6488-3b27-43d8-aa3c-b85451bd9645/1/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.mft
Manifest number:          0A26
Signing time:             Wed 27 Jul 2022 23:51:24 +0000
Manifest this update:     Wed 27 Jul 2022 23:51:24 +0000
Manifest next update:     Thu 28 Jul 2022 23:51:24 +0000
Files and hashes:         1: JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.crl (hash: v3PZm20t5oM3467TvdvoB2m1Xm0se5E2xaW+e4Ec6AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:42:12:7f:ee:2f:f9:4c:94:44:b5:5d:ef:28:33:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ff0428832c6d89bdfe2b8343539cec92700880
        Validity
            Not Before: Jul 27 23:51:24 2022 GMT
            Not After : Jul 28 23:51:24 2022 GMT
        Subject: CN=67e0c877adfd2a62c0d5cd8189d9743717b1574b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:21:05:a1:b3:81:24:22:b1:62:fa:bc:7c:
                    f1:0e:b8:2e:72:a3:8b:68:86:52:8a:87:fc:2e:c7:
                    07:4c:76:c9:8e:91:51:b2:db:be:74:ea:3d:b2:de:
                    13:2d:bb:a2:c0:7b:74:fb:06:6d:62:c8:9a:a3:7e:
                    3b:d9:c6:4e:fa:dc:df:54:ed:78:b9:11:d3:2f:02:
                    16:21:58:b4:1e:47:dd:1e:1c:86:d2:47:c4:c2:05:
                    77:cc:a9:7c:00:8b:57:c9:53:11:93:d3:e6:bc:74:
                    17:bb:77:e6:5a:e2:65:be:8a:de:be:9a:6c:03:1e:
                    6b:16:96:3f:bc:27:bf:aa:bd:3b:5d:e4:8c:e1:f3:
                    87:8f:3d:ee:59:69:13:f4:46:de:a6:e4:33:6a:65:
                    45:ee:35:86:d8:12:2d:a3:90:df:a8:8e:b9:7f:cf:
                    bf:9f:1d:3f:91:d2:64:e3:7e:c2:42:cb:32:8a:aa:
                    c8:58:66:26:0d:13:77:ad:3b:b3:bc:a2:26:13:76:
                    78:f1:f8:b7:68:c8:d4:a1:6d:88:54:40:7d:c6:e1:
                    cd:30:ee:93:03:ac:ae:a8:41:ec:41:48:a5:8f:12:
                    d9:1b:df:e9:93:0b:fd:f6:89:73:6d:6a:db:88:12:
                    90:50:f3:79:cb:b9:cd:1c:0d:01:9f:30:f7:08:bc:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E0:C8:77:AD:FD:2A:62:C0:D5:CD:81:89:D9:74:37:17:B1:57:4B
            X509v3 Authority Key Identifier:
                keyid:24:FF:04:28:83:2C:6D:89:BD:FE:2B:83:43:53:9C:EC:92:70:08:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9e6488-3b27-43d8-aa3c-b85451bd9645/1/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9e6488-3b27-43d8-aa3c-b85451bd9645/1/JP8EKIMsbYm9_iuDQ1Oc7JJwCIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:86:00:a9:9d:6f:58:4e:23:02:88:e7:fc:61:cf:ad:b4:b7:
         5b:b9:a3:9f:a4:fb:82:ef:46:7c:3e:db:9b:7d:69:57:d6:81:
         5b:59:5f:85:d3:d8:5c:75:6f:2a:df:ac:da:5c:8c:a7:ed:55:
         51:3d:99:e1:6d:1c:98:cd:f7:6a:a9:f6:ca:d7:ba:88:44:d0:
         fa:24:c3:cd:d2:31:64:05:c1:27:dd:17:e5:ed:e0:c7:51:9a:
         30:53:4d:69:12:13:44:70:14:3d:fc:4b:9a:d0:74:35:99:1a:
         2c:d1:71:75:0a:31:01:8a:a8:c8:0c:bd:a9:35:b6:30:2b:97:
         d7:df:d0:23:87:11:c8:b8:a8:67:db:54:40:a7:44:eb:0d:af:
         05:14:9c:80:66:cc:ae:5f:8b:be:98:db:54:4a:7e:45:27:42:
         22:29:05:64:ce:7d:3e:c2:21:0f:d4:71:c7:38:b7:a9:6b:85:
         f2:90:b5:e8:03:38:0d:05:ee:77:de:54:04:d5:ad:be:cc:e5:
         ff:7d:ee:5a:b5:93:4d:46:d2:bd:ef:53:b1:a3:2e:86:60:f7:
         8b:7a:6f:d9:4d:aa:1f:67:68:84:78:ff:ac:72:f7:5e:83:6f:
         ea:2e:f7:da:bc:c2:98:b9:c6:62:d4:5b:43:56:99:ff:86:be:
         7f:88:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----