Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft
File:                     g8nUIWdz620v5OSPOxocKDT-y9s.mft (raw, json)
Hash identifier:          NCsOw6tIRmBql4rt8od+/pvVe0UktgNck+DPO/9HiBQ=
Subject key identifier:   65:B8:1B:63:BC:AF:9B:1C:17:63:D4:50:AD:60:B7:FA:BC:A5:A3:E9
Authority key identifier: 83:C9:D4:21:67:73:EB:6D:2F:E4:E4:8F:3B:1A:1C:28:34:FE:CB:DB
Certificate issuer:       /CN=83c9d4216773eb6d2fe4e48f3b1a1c2834fecbdb
Certificate serial:       019483CDCDA7B889B4684F74C7736B695CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8nUIWdz620v5OSPOxocKDT-y9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft
Manifest number:          095C
Signing time:             Mon 20 Jan 2025 13:01:30 +0000
Manifest this update:     Mon 20 Jan 2025 13:01:30 +0000
Manifest next update:     Tue 21 Jan 2025 13:01:30 +0000
Files and hashes:         1: g8nUIWdz620v5OSPOxocKDT-y9s.crl (hash: c5XKpDxRROBIoXo8OYV0HNlqkPvavnWmL9N7x+NTvbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:83:cd:cd:a7:b8:89:b4:68:4f:74:c7:73:6b:69:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c9d4216773eb6d2fe4e48f3b1a1c2834fecbdb
        Validity
            Not Before: Jan 20 13:01:30 2025 GMT
            Not After : Jan 21 13:01:30 2025 GMT
        Subject: CN=65b81b63bcaf9b1c1763d450ad60b7fabca5a3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:27:c2:9a:60:42:5e:db:c1:9a:1a:46:f6:
                    a0:31:84:ba:69:e6:80:7f:3f:32:1a:f8:b0:53:fb:
                    b6:18:f8:06:f0:93:b9:ba:2c:bd:75:8d:98:cf:2a:
                    54:e5:f1:08:b0:a9:9a:e3:d5:f9:2d:10:a7:f6:37:
                    e5:7f:e8:5e:dc:d9:dc:51:dd:72:df:18:f2:47:64:
                    06:4d:ef:8c:e7:bf:66:7d:86:eb:ba:6e:b9:be:ab:
                    ff:4b:b4:77:c2:30:c9:5b:c0:dc:5b:00:1b:78:41:
                    e8:98:b8:5b:ef:6d:6c:00:78:6c:e2:83:4b:97:bd:
                    d9:ab:d1:db:69:d0:7f:73:45:c1:d2:8e:ff:49:a1:
                    54:ce:5f:b4:6d:f9:28:5b:9d:a7:7c:4d:57:f2:d8:
                    1c:23:0e:31:03:ad:d9:b0:0b:dc:a6:d3:b5:4e:99:
                    64:ac:82:f4:2e:c2:df:a2:c5:89:66:07:e8:92:43:
                    83:5e:7b:be:a7:ce:c2:34:45:1a:03:0e:fe:7e:98:
                    e2:71:f5:c3:da:61:7f:54:00:3f:8d:da:83:78:37:
                    d5:1a:2d:1a:41:b1:8d:b5:4e:6d:5a:a4:11:6c:dc:
                    ca:bb:f6:21:d5:3d:c7:15:39:d0:7e:af:8b:c0:25:
                    23:08:36:78:73:dc:79:f5:2a:d7:f8:25:a0:d1:18:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:1B:63:BC:AF:9B:1C:17:63:D4:50:AD:60:B7:FA:BC:A5:A3:E9
            X509v3 Authority Key Identifier:
                keyid:83:C9:D4:21:67:73:EB:6D:2F:E4:E4:8F:3B:1A:1C:28:34:FE:CB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8nUIWdz620v5OSPOxocKDT-y9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:57:f1:64:8b:96:f9:6a:3f:d3:59:78:f4:98:7b:9a:0b:52:
         92:58:95:32:09:06:31:93:ec:42:d4:55:21:15:3e:ff:77:ce:
         b1:92:af:05:8b:bc:ca:85:80:40:08:53:e4:fc:38:11:c0:0f:
         72:cd:22:f0:f6:be:e4:bf:17:a5:bb:61:d1:ec:17:4a:80:c0:
         f7:25:54:f2:3c:7a:60:b4:02:a9:33:a8:0b:62:38:71:b6:48:
         cd:c5:1d:54:02:5e:08:bd:bc:7f:59:c1:9c:5a:e2:d9:a7:e7:
         68:cf:97:2d:98:66:21:57:8e:7d:91:38:58:39:dc:6e:2b:a0:
         32:74:ce:5a:c1:69:39:6b:e4:19:be:97:7d:f9:c9:d7:19:cf:
         44:fd:12:67:c2:f9:38:b3:80:70:0f:40:c0:ee:b3:df:2e:7b:
         0e:83:89:c5:e7:9a:ed:33:2c:b6:19:cc:5a:3f:ad:25:cf:46:
         2d:f8:2e:1e:a6:f1:61:ec:a6:bb:c1:cb:6d:06:d7:21:27:8f:
         0d:02:0d:23:c0:d4:b1:8c:0a:64:ad:93:ac:60:61:80:ed:ff:
         79:03:2c:e4:4f:81:d0:9e:3c:75:0b:7b:3d:bf:4f:c7:7d:8f:
         bb:c5:39:5d:73:d0:a9:71:24:72:11:a8:06:2f:a6:0c:3d:db:
         7b:e9:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----