Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft
File:                     hqYBzxEBGE2CQ3J-Kfufl95isMg.mft (raw, json)
Hash identifier:          P9cJqJEX4g6Y5UqSOSRpGCWF/Gh7AlsyDb81sxnI73Q=
Subject key identifier:   C8:71:46:31:F9:14:90:91:52:BF:16:B0:C3:20:52:63:C6:0D:DA:62
Authority key identifier: 86:A6:01:CF:11:01:18:4D:82:43:72:7E:29:FB:9F:97:DE:62:B0:C8
Certificate issuer:       /CN=86a601cf1101184d8243727e29fb9f97de62b0c8
Certificate serial:       0190C84A9B039DB55303873ABEBB5237A2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hqYBzxEBGE2CQ3J-Kfufl95isMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft
Manifest number:          0FE9
Signing time:             Fri 19 Jul 2024 00:00:50 +0000
Manifest this update:     Fri 19 Jul 2024 00:00:50 +0000
Manifest next update:     Sat 20 Jul 2024 00:00:50 +0000
Files and hashes:         1: hqYBzxEBGE2CQ3J-Kfufl95isMg.crl (hash: vyX8i+bSIC9i5d49o4gJ0lmwMz4ra42FyUtjvgvmo6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c8:4a:9b:03:9d:b5:53:03:87:3a:be:bb:52:37:a2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86a601cf1101184d8243727e29fb9f97de62b0c8
        Validity
            Not Before: Jul 19 00:00:50 2024 GMT
            Not After : Jul 20 00:00:50 2024 GMT
        Subject: CN=c8714631f914909152bf16b0c3205263c60dda62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:e9:5f:b3:83:0a:08:ce:83:0f:12:c6:f1:
                    d6:16:c8:4f:07:69:54:70:3a:0f:55:b9:04:5f:f3:
                    67:cf:bf:65:28:4c:a0:54:b1:9c:e2:11:a2:81:a7:
                    f1:c4:0c:a8:b7:a0:e8:6f:e9:ef:4e:29:1f:94:97:
                    55:0c:18:23:6b:38:11:4f:b5:36:fa:69:ae:26:d9:
                    0f:3e:b8:7a:61:9a:11:67:b2:7b:02:c6:0e:a7:4d:
                    90:eb:c8:e3:ef:52:00:58:05:cb:fc:66:89:4a:cb:
                    d6:5a:d7:70:63:a7:f2:9f:44:a1:03:b3:69:ca:f3:
                    ad:45:ce:c1:b8:0a:d5:76:ad:ac:df:dd:2b:93:5e:
                    d5:5d:36:68:df:2a:e9:9d:5d:0e:b4:d1:5b:ca:e9:
                    41:6e:10:78:05:3b:1f:4a:10:fc:50:ad:70:e1:12:
                    7f:5e:fb:79:cb:4b:f4:52:c5:0f:88:5d:8d:c5:b9:
                    c8:39:14:1d:62:7c:37:5e:5f:3d:24:ed:29:41:10:
                    68:9f:af:66:cb:34:52:b6:6c:a7:33:33:0a:0b:f5:
                    d0:cd:22:10:b0:12:9a:b5:8e:20:fc:28:2f:a9:ac:
                    46:36:2b:0d:bd:7e:9f:3b:ba:cc:98:45:21:39:bc:
                    09:bc:25:f1:7b:b8:50:09:91:9f:b1:72:86:5b:75:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:71:46:31:F9:14:90:91:52:BF:16:B0:C3:20:52:63:C6:0D:DA:62
            X509v3 Authority Key Identifier:
                keyid:86:A6:01:CF:11:01:18:4D:82:43:72:7E:29:FB:9F:97:DE:62:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqYBzxEBGE2CQ3J-Kfufl95isMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:34:db:82:e8:20:22:7a:94:71:c8:83:a0:a1:78:bf:86:41:
         d1:77:54:91:e3:9b:0a:d4:6f:7c:fd:43:57:c5:17:8b:08:db:
         72:cf:6a:96:2f:d9:9e:47:fb:b2:96:d8:fb:5a:a6:70:e6:83:
         25:cf:da:f7:7d:fa:85:5c:42:b3:be:2a:fe:1e:cc:32:c2:da:
         bc:25:23:1f:26:59:9f:b9:db:d9:c6:d4:df:bc:a7:93:7b:33:
         3f:75:7a:29:75:fa:9c:ac:a2:3f:0e:25:33:c4:84:a0:da:07:
         85:07:6f:0f:fa:46:bc:42:1e:a1:e1:45:e6:53:72:0a:39:37:
         df:85:e2:17:a5:91:7d:91:eb:7f:19:93:d3:98:2c:0a:f1:cf:
         73:ca:91:87:e7:6f:2b:9b:b7:f9:52:87:a9:93:40:31:9e:a1:
         6a:71:06:fd:fa:48:2c:bc:c4:6d:c0:66:6a:29:f4:43:c7:28:
         84:98:13:32:b8:24:61:c5:f7:7d:a9:40:dd:31:55:0f:1f:ab:
         09:b6:1f:3a:5d:2f:65:ca:64:75:e4:b3:47:ba:8a:03:3f:4f:
         37:64:e4:a4:f2:45:64:3b:dd:68:be:b9:5c:c5:7a:08:25:e1:
         2b:7f:7a:5c:29:f6:83:9b:59:90:2b:e9:de:56:17:d8:c1:e1:
         ee:90:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----