Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft
File:                     ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft (raw, json)
Hash identifier:          CF7oqCXpeObVqnV0Mwe1oJ3vECD+JQD6DjXcyMfi1v8=
Subject key identifier:   33:D6:55:16:5C:C9:F3:7C:D0:02:22:92:76:E5:E3:9B:A5:FD:DA:0A
Authority key identifier: B9:F2:84:56:80:2A:8E:EB:ED:30:5F:6A:43:F7:2E:CA:32:61:CE:23
Certificate issuer:       /CN=b9f28456802a8eebed305f6a43f72eca3261ce23
Certificate serial:       0190FB92CEC900E885C4005F7A0709D01EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufKEVoAqjuvtMF9qQ_cuyjJhziM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft
Manifest number:          0A
Signing time:             Sun 28 Jul 2024 23:00:20 +0000
Manifest this update:     Sun 28 Jul 2024 23:00:20 +0000
Manifest next update:     Mon 29 Jul 2024 23:00:20 +0000
Files and hashes:         1: ufKEVoAqjuvtMF9qQ_cuyjJhziM.crl (hash: R79h12z3DkqYocitLNdYyBhFdqyloE/iWGOKh0mk9C0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fb:92:ce:c9:00:e8:85:c4:00:5f:7a:07:09:d0:1e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f28456802a8eebed305f6a43f72eca3261ce23
        Validity
            Not Before: Jul 28 23:00:20 2024 GMT
            Not After : Jul 29 23:00:20 2024 GMT
        Subject: CN=33d655165cc9f37cd002229276e5e39ba5fdda0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:90:79:5e:43:06:b6:ea:04:14:7d:a1:b6:
                    21:f8:54:75:b7:d9:79:65:f8:34:71:e3:45:63:7e:
                    2f:89:5d:6c:3c:52:c9:84:61:ee:31:30:52:12:e0:
                    57:b6:4a:75:2e:01:68:4e:da:10:45:f0:d1:1f:c3:
                    57:fe:5a:9c:4b:c7:c1:74:1b:38:fb:55:df:e3:28:
                    3c:74:80:d6:d2:41:cc:75:9c:d0:d9:62:de:28:37:
                    84:02:2d:b8:e9:c8:73:f3:e3:c0:ea:81:53:fb:6a:
                    41:59:37:df:0f:04:f6:52:84:82:97:71:ce:6f:2f:
                    6e:a2:a6:5d:79:14:65:cc:15:18:fe:41:df:f8:70:
                    ea:7a:8a:5f:98:33:20:2d:61:3e:18:a5:37:0c:93:
                    91:4b:9e:eb:dc:9e:f3:69:04:20:19:6e:cc:a3:08:
                    c8:ed:93:d4:c4:5d:c9:27:9f:d2:9e:b0:dd:e3:cd:
                    68:b3:92:a5:d4:33:78:08:fb:4f:dc:85:5b:d4:a2:
                    19:8e:0b:b2:d5:f5:6f:ed:1d:32:a9:f9:f8:56:e6:
                    b6:85:6f:d3:05:d0:a2:c6:8e:d5:d8:6a:a8:30:c7:
                    b5:cb:b5:3b:cc:d9:c9:2d:53:9f:05:5d:80:65:ce:
                    e4:ed:3e:9f:1d:b9:d1:4f:77:30:84:2b:e9:77:c8:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:55:16:5C:C9:F3:7C:D0:02:22:92:76:E5:E3:9B:A5:FD:DA:0A
            X509v3 Authority Key Identifier:
                keyid:B9:F2:84:56:80:2A:8E:EB:ED:30:5F:6A:43:F7:2E:CA:32:61:CE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufKEVoAqjuvtMF9qQ_cuyjJhziM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:5d:9b:f1:59:a2:d3:0c:70:d0:28:e7:69:62:5b:5b:81:
         7d:01:b1:15:5b:25:55:46:62:bd:de:03:5f:3d:03:2a:dd:97:
         48:e2:c0:a7:aa:a3:f2:23:cb:b8:d6:c5:6c:d2:9b:b9:23:02:
         0e:e6:29:ec:9e:93:81:9c:ab:c6:0a:d5:38:7d:75:5e:fa:a1:
         be:c7:aa:8f:02:8a:64:43:b2:83:62:51:a6:fa:75:1d:63:71:
         62:bd:27:89:41:52:d3:62:76:f1:90:79:31:de:96:8d:61:40:
         9a:03:d4:5a:66:c2:57:b5:34:f9:63:d3:e2:55:dd:29:2b:54:
         c6:86:6c:79:a9:59:17:fe:d1:ea:c4:e3:ff:f0:76:9b:18:cf:
         3e:28:db:6b:a1:ff:0a:05:5f:b9:86:5e:d8:44:ba:e3:5c:61:
         03:15:74:14:e9:c0:3a:2b:01:cd:85:09:2d:dc:62:41:46:1e:
         6c:e7:f9:09:00:fe:9f:d8:55:7a:3a:fe:4c:d5:96:e4:69:e1:
         60:74:37:ac:af:1d:59:e0:10:b2:12:26:ee:62:86:db:c7:b1:
         29:61:26:d8:4c:ec:92:f7:92:f7:b7:a0:a1:00:72:84:92:b8:
         44:72:0e:40:83:fc:23:aa:d6:b4:bb:e4:99:6e:7a:9f:7b:cf:
         61:8e:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----