Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
File:                     IeeliPB1m6j2WLPz1o5VvP6cW74.mft (raw, json)
Hash identifier:          pAM++La6XLb9pB7J4ds7kKGaT89WOoHkQoVCcINPabA=
Subject key identifier:   DF:28:BF:0E:05:1F:4C:A4:EB:07:CA:2A:D5:79:D4:64:98:9E:5B:D2
Authority key identifier: 21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE
Certificate issuer:       /CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
Certificate serial:       019347164248BE56EE0928BDCC727D5CECEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
Manifest number:          133E
Signing time:             Wed 20 Nov 2024 01:01:01 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:01 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:01 +0000
Files and hashes:         1: IeeliPB1m6j2WLPz1o5VvP6cW74.crl (hash: PRjRVSiea8sjmV8dbgsA5U7J45cVcZdxk4Y2MjzWFqQ=)
                          2: iWtSv40w_08b2FJsgbh6iQGqAyY.roa (hash: pCvIXTliTljxFktkIXBCxZkuQXViaRS8Xh63iuSpHwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:42:48:be:56:ee:09:28:bd:cc:72:7d:5c:ec:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
        Validity
            Not Before: Nov 20 01:01:01 2024 GMT
            Not After : Nov 21 01:01:01 2024 GMT
        Subject: CN=df28bf0e051f4ca4eb07ca2ad579d464989e5bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:93:99:50:ad:84:81:96:24:04:a4:bc:c4:
                    14:4e:63:3a:73:f4:88:87:aa:dd:fc:08:7e:82:97:
                    c2:a4:cc:6a:a1:2d:4d:fb:cc:b2:33:95:92:1a:89:
                    17:4b:32:85:fc:d0:ec:6a:82:8f:ad:38:0d:ba:26:
                    e5:e8:75:3e:93:7d:4a:56:6c:a2:8e:7d:e7:b5:b2:
                    71:a4:c1:a6:5d:a9:17:36:7f:ba:b9:7d:54:ab:9e:
                    97:e8:83:05:0d:12:56:55:66:70:96:8a:c1:ed:9c:
                    f8:e8:59:f0:f5:46:26:f0:af:c7:cc:92:9f:4f:68:
                    e9:2a:40:c0:0a:68:1d:79:47:ac:20:c7:be:0c:81:
                    ba:ef:07:83:b8:cb:8a:04:32:ce:7b:2c:9e:87:67:
                    6b:3d:7c:a5:d6:15:25:be:be:14:d8:cb:7a:96:12:
                    fa:31:13:53:cb:31:d8:44:9d:9a:7e:13:2d:fc:91:
                    f5:c5:a3:6b:bd:fc:ca:c5:26:3c:5c:39:8e:37:59:
                    61:7d:db:b6:ba:8a:b4:d1:88:65:6c:68:f2:2c:9f:
                    2d:82:d1:75:fd:9d:3b:10:78:70:c2:35:1d:be:95:
                    00:57:1d:57:48:fc:f9:77:48:1a:11:33:d7:3b:28:
                    64:12:cf:cd:37:e4:0c:99:24:34:eb:08:2d:4f:66:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:28:BF:0E:05:1F:4C:A4:EB:07:CA:2A:D5:79:D4:64:98:9E:5B:D2
            X509v3 Authority Key Identifier:
                keyid:21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:04:df:47:16:ae:c6:10:43:05:15:dc:69:ef:53:c3:91:a1:
         c7:30:ea:90:1b:63:69:7c:c0:5f:1c:85:08:84:0f:bd:ad:fb:
         49:0e:e2:55:2f:a2:e3:27:56:ee:bf:05:d3:43:95:29:fc:7f:
         e4:1b:19:4f:19:df:ec:cf:a1:14:0c:c7:d2:20:7f:df:b9:d7:
         cc:db:ed:7c:82:69:eb:34:31:39:00:67:b9:b7:7e:36:3d:19:
         45:14:ae:65:ee:26:78:83:8c:69:a1:90:dc:f8:11:9f:55:1c:
         63:6b:be:f8:a2:ee:e0:0c:5f:df:e8:b9:1b:86:36:5a:bb:12:
         f9:a0:64:f1:a8:56:35:8e:33:48:ca:f3:87:9d:34:39:4d:ee:
         72:95:01:50:29:91:cb:31:e1:4e:bd:dc:98:5e:ab:b0:25:94:
         86:50:b8:d0:9d:11:48:d8:e2:c4:93:19:7d:be:92:1a:da:97:
         32:92:7d:43:12:9f:78:d0:ff:47:3e:02:e9:3a:64:29:82:88:
         cc:b8:41:05:5e:42:79:16:33:f3:21:47:24:8f:9c:29:2c:be:
         0a:f4:a7:e0:e0:bf:26:40:14:36:ba:7a:dd:95:ae:51:ec:ab:
         1d:0e:21:75:6f:4d:64:c1:cf:b3:34:ff:6c:2f:b5:f6:b6:da:
         29:68:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----