Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
File:                     4DGcxo0CrzwGK842pc0na2lwdyg.mft (raw, json)
Hash identifier:          O2n0hTB3LjM6m9bCVhyNRLJfFj3lDEBDH37mgmdiiY0=
Subject key identifier:   FB:5F:49:F3:77:19:78:10:4A:0F:A9:61:13:80:F0:5B:A4:A9:91:A1
Authority key identifier: E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28
Certificate issuer:       /CN=e0319cc68d02af3c062bce36a5cd276b69707728
Certificate serial:       01918C32E0768F6E3C5129670983FC0E2313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
Manifest number:          0E15
Signing time:             Mon 26 Aug 2024 01:00:30 +0000
Manifest this update:     Mon 26 Aug 2024 01:00:30 +0000
Manifest next update:     Tue 27 Aug 2024 01:00:30 +0000
Files and hashes:         1: 4DGcxo0CrzwGK842pc0na2lwdyg.crl (hash: +PxsgQA3hVMuZSw2/Y//z48spgxPVozWhl82Taayj54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8c:32:e0:76:8f:6e:3c:51:29:67:09:83:fc:0e:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0319cc68d02af3c062bce36a5cd276b69707728
        Validity
            Not Before: Aug 26 01:00:30 2024 GMT
            Not After : Aug 27 01:00:30 2024 GMT
        Subject: CN=fb5f49f3771978104a0fa9611380f05ba4a991a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:6c:1c:42:46:1a:23:25:68:b0:05:2b:76:
                    a8:04:0e:ba:ce:cd:32:ba:17:9d:7c:d0:9f:57:b7:
                    66:2f:1e:7b:d5:56:28:3a:5b:fb:43:ed:52:e2:fb:
                    59:ef:03:b8:2f:ac:ab:1b:70:d8:12:5b:2b:3f:35:
                    3d:d4:44:58:ac:a2:e4:0e:d3:4c:2e:1f:4b:12:3b:
                    80:d4:b7:e7:4a:a8:bc:a5:13:a8:c2:02:26:16:09:
                    4e:d5:8e:17:43:a5:b0:99:be:2c:b2:8b:0a:9a:4f:
                    86:57:9f:26:53:e5:02:6b:7d:97:5e:b6:12:af:04:
                    6e:f9:17:6c:d7:bd:67:30:ae:b6:be:99:20:e3:d5:
                    ef:95:38:3a:c9:a0:04:79:90:46:92:be:21:b2:f6:
                    e0:aa:60:cc:85:d1:b3:89:6d:b7:be:7d:50:44:9c:
                    47:00:01:be:54:60:b2:28:1a:86:03:2b:c5:99:9f:
                    69:51:1a:f5:1c:a9:68:f8:92:1c:d7:cb:c1:e2:d2:
                    d8:88:c8:32:f5:f8:eb:a5:54:94:2f:b7:7b:58:c7:
                    42:51:4b:50:f4:0f:71:2c:c3:54:d0:50:31:8d:f9:
                    9d:ac:c1:c3:a0:1d:66:7b:b9:12:3e:1f:62:3f:fb:
                    7f:85:83:52:c6:4f:bc:16:c5:4c:f9:76:4d:9a:ee:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:49:F3:77:19:78:10:4A:0F:A9:61:13:80:F0:5B:A4:A9:91:A1
            X509v3 Authority Key Identifier:
                keyid:E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5d:17:c1:73:88:91:0e:71:62:38:dc:dd:ee:43:86:51:72:
         bb:b0:a0:9d:3d:38:10:70:2a:40:58:1c:4c:4f:84:33:37:09:
         25:7e:2e:38:14:58:5e:ce:bc:d1:8b:c4:de:70:10:1a:be:a6:
         6d:91:dd:68:dc:cd:ae:9d:14:94:ae:4f:b2:1f:0a:b8:11:fe:
         dd:75:2b:95:db:b8:d7:29:03:7a:a9:9b:b5:4e:5f:43:3e:f7:
         2b:af:18:cc:b9:14:8f:1c:29:43:e7:a7:36:14:75:bb:1e:4f:
         cc:c1:db:4f:d2:91:c7:51:99:60:73:97:62:9a:f2:c2:53:a4:
         0d:0e:c4:15:5c:d8:be:57:7d:1d:b4:0c:b9:10:9c:2e:62:32:
         f4:db:c8:ec:49:12:83:d1:01:11:18:95:f3:4f:42:85:ff:9d:
         29:6b:69:8e:17:28:44:e9:c0:61:79:eb:6b:8d:00:71:f9:57:
         35:2a:94:2c:ad:b8:86:7e:ef:66:97:a5:e4:0b:c1:48:8d:89:
         93:c9:a4:1f:17:b6:d9:cd:dd:52:6b:7c:fa:1b:48:e9:d4:97:
         49:ef:19:d6:5d:82:85:ae:52:6e:43:bd:db:97:ce:60:8b:8b:
         21:ed:a8:55:81:9a:eb:69:8f:46:ed:d3:e4:42:d1:6a:ea:2d:
         0d:36:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----