Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cdd10c-04ac-4db7-8940-9e593b1f2d57/1/uCJyw4q0DonATQldmbq17K_D9CY.mft
File:                     uCJyw4q0DonATQldmbq17K_D9CY.mft (raw, json)
Hash identifier:          cWIr0NirxmA+eLGx7YvRagggSa00o0rKU1jOGZv5k+Y=
Subject key identifier:   78:8F:33:8E:08:A4:9F:BE:8B:68:E3:12:23:02:67:2B:4B:69:7D:44
Authority key identifier: B8:22:72:C3:8A:B4:0E:89:C0:4D:09:5D:99:BA:B5:EC:AF:C3:F4:26
Certificate issuer:       /CN=b82272c38ab40e89c04d095d99bab5ecafc3f426
Certificate serial:       01922F7E283B6BF18B5451C28AE67ADF104F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCJyw4q0DonATQldmbq17K_D9CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cdd10c-04ac-4db7-8940-9e593b1f2d57/1/uCJyw4q0DonATQldmbq17K_D9CY.mft
Manifest number:          0A12
Signing time:             Thu 26 Sep 2024 18:00:49 +0000
Manifest this update:     Thu 26 Sep 2024 18:00:49 +0000
Manifest next update:     Fri 27 Sep 2024 18:00:49 +0000
Files and hashes:         1: uCJyw4q0DonATQldmbq17K_D9CY.crl (hash: /bslAxAMsDKcevnDrQ3KmABjA7WaPh2wo+cFYOj09HU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:7e:28:3b:6b:f1:8b:54:51:c2:8a:e6:7a:df:10:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82272c38ab40e89c04d095d99bab5ecafc3f426
        Validity
            Not Before: Sep 26 18:00:49 2024 GMT
            Not After : Sep 27 18:00:49 2024 GMT
        Subject: CN=788f338e08a49fbe8b68e3122302672b4b697d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:1a:fa:75:91:16:56:17:b6:d3:29:75:e2:
                    75:b7:0d:b0:0c:0a:92:3c:ec:ae:f2:4f:08:5b:61:
                    31:a1:42:e9:f8:57:d5:1d:4e:7a:40:46:66:a5:68:
                    a8:b1:b8:84:f5:c9:81:39:52:cf:39:e9:8a:4c:13:
                    e8:82:06:40:fb:9b:1b:fd:77:0a:2a:2f:82:b5:51:
                    d9:6f:1a:7e:d6:20:4b:52:87:4f:dd:86:a1:9c:d7:
                    cf:96:cc:50:ec:bd:0b:56:5d:b0:6d:c3:af:bd:09:
                    d6:fb:0b:45:29:38:50:2c:f1:c6:23:b7:30:64:97:
                    6e:42:70:52:a2:c0:2b:41:20:80:de:eb:59:c7:c8:
                    b6:7d:14:f7:54:19:f4:1c:64:52:73:a7:36:66:09:
                    58:ff:7b:b5:f6:d8:f3:b3:52:78:62:19:81:ef:c5:
                    90:78:01:89:da:ca:eb:70:39:9c:f7:a0:a2:fa:9c:
                    b8:49:d7:37:ee:46:62:5e:7b:e1:13:52:15:cc:bc:
                    55:a7:70:23:a7:b8:11:5d:ac:ef:ca:76:46:68:0e:
                    b5:6c:a3:48:0a:63:de:ab:4b:d4:36:d0:47:d3:a7:
                    6f:b2:b2:8a:91:4c:36:52:81:b0:e4:d9:f3:43:54:
                    1a:2a:4a:23:7b:5d:df:30:5d:7c:82:0a:27:3e:cd:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:33:8E:08:A4:9F:BE:8B:68:E3:12:23:02:67:2B:4B:69:7D:44
            X509v3 Authority Key Identifier:
                keyid:B8:22:72:C3:8A:B4:0E:89:C0:4D:09:5D:99:BA:B5:EC:AF:C3:F4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCJyw4q0DonATQldmbq17K_D9CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cdd10c-04ac-4db7-8940-9e593b1f2d57/1/uCJyw4q0DonATQldmbq17K_D9CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cdd10c-04ac-4db7-8940-9e593b1f2d57/1/uCJyw4q0DonATQldmbq17K_D9CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:82:ac:72:6a:12:57:87:da:c9:6c:9a:2a:ef:5a:14:68:
         2d:4a:23:8e:32:5b:46:d8:6f:90:8c:6d:68:c0:a8:6e:6a:0b:
         e3:c7:25:7f:c8:74:bc:b6:35:60:64:fa:94:ee:37:37:68:40:
         41:6d:54:41:0f:fd:94:d6:c6:3f:ac:b2:74:89:6b:8f:9c:a8:
         c9:99:b9:9d:3e:a6:3d:c4:b9:40:df:c3:0f:a6:3d:03:a4:d2:
         41:9a:f9:92:87:9e:16:f2:ad:5a:67:5b:70:08:ff:31:12:9c:
         33:aa:80:78:f2:37:5f:27:a7:fc:0b:51:6e:b7:12:1d:87:cf:
         b3:b0:bc:2e:3e:b3:9e:77:0d:2d:cb:fb:2b:5f:f6:31:11:f1:
         3d:36:74:b3:79:f5:a5:ff:4c:cb:09:01:12:2c:e6:85:52:b3:
         3a:07:fb:52:9b:92:ce:18:39:fa:f8:9e:ac:4b:1a:46:34:48:
         4d:96:2a:39:c3:85:31:a9:83:42:cd:d1:2b:a0:62:9b:43:64:
         b3:01:7f:87:20:6b:0f:36:a7:f9:27:c9:84:e0:c8:e3:59:77:
         1e:e2:30:a0:cd:22:a9:a8:0c:4f:a8:8a:b5:8c:67:d2:05:f7:
         3e:27:4c:3a:46:0d:64:0f:1b:91:11:5b:03:3f:63:70:28:c2:
         5e:42:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----