Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d5d348-1ba1-4e68-86b4-138dca36bb5f/1/wIgjdxpRukwtXrQx6Zj7HinHkVg.mft
File:                     wIgjdxpRukwtXrQx6Zj7HinHkVg.mft (raw, json)
Hash identifier:          wGhge/b9VwqE3tFK5+ql2NL2R2+cygGS9wBgMUwfiWI=
Subject key identifier:   8B:90:34:0C:7A:36:BA:62:3F:95:8A:92:EB:48:10:CB:F4:06:6B:91
Authority key identifier: C0:88:23:77:1A:51:BA:4C:2D:5E:B4:31:E9:98:FB:1E:29:C7:91:58
Certificate issuer:       /CN=c08823771a51ba4c2d5eb431e998fb1e29c79158
Certificate serial:       018FA6E23E43506BF88B5E5C550CF80BF139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIgjdxpRukwtXrQx6Zj7HinHkVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d5d348-1ba1-4e68-86b4-138dca36bb5f/1/wIgjdxpRukwtXrQx6Zj7HinHkVg.mft
Manifest number:          01
Signing time:             Thu 23 May 2024 19:16:35 +0000
Manifest this update:     Thu 23 May 2024 19:16:35 +0000
Manifest next update:     Fri 24 May 2024 19:16:35 +0000
Files and hashes:         1: wIgjdxpRukwtXrQx6Zj7HinHkVg.crl (hash: 8VAaWgMW/khb1ZiF5HJ90WGMKYazHzwMw5I3A7EGsHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a6:e2:3e:43:50:6b:f8:8b:5e:5c:55:0c:f8:0b:f1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08823771a51ba4c2d5eb431e998fb1e29c79158
        Validity
            Not Before: May 23 19:16:35 2024 GMT
            Not After : May 24 19:16:35 2024 GMT
        Subject: CN=8b90340c7a36ba623f958a92eb4810cbf4066b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:1d:0b:96:cd:f8:c0:63:10:39:16:2c:a6:
                    f8:85:12:ef:fe:00:94:5e:f5:f4:ab:94:a0:02:39:
                    32:64:0b:ba:7b:49:99:ef:d8:28:58:c4:91:97:45:
                    68:04:3f:0f:f7:e1:43:37:1f:d6:e8:9f:9a:2a:fa:
                    a9:ec:a1:f8:8b:01:06:46:72:16:28:74:9c:f4:95:
                    50:4c:3c:33:f9:c8:8a:78:17:f9:e2:81:98:b8:09:
                    d3:f6:b6:12:f6:29:15:e9:5c:fe:a8:2b:57:51:00:
                    5f:44:c6:40:f9:77:f6:db:23:e8:77:b4:02:bd:fd:
                    df:de:b8:7b:2e:44:b5:af:f2:d8:bd:35:c9:61:75:
                    2c:01:17:49:48:25:b8:f1:5b:19:53:5e:87:29:55:
                    f7:5a:dd:67:9c:45:da:45:f1:08:b0:44:a0:16:3d:
                    dd:65:2e:ee:b0:6c:c6:93:84:27:78:37:a1:a5:90:
                    c8:de:0e:10:99:45:75:78:19:06:8d:73:b4:0f:c1:
                    9c:c0:75:4f:f3:90:2a:e1:05:7e:c6:f9:0d:a6:57:
                    9e:4e:ec:c0:97:eb:c0:f5:52:81:8e:19:de:1c:ac:
                    75:cf:0f:95:66:7a:72:75:e5:ee:52:10:d7:6b:a7:
                    54:09:4e:42:b9:96:f9:1a:71:b7:3f:55:23:22:b4:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:34:0C:7A:36:BA:62:3F:95:8A:92:EB:48:10:CB:F4:06:6B:91
            X509v3 Authority Key Identifier:
                keyid:C0:88:23:77:1A:51:BA:4C:2D:5E:B4:31:E9:98:FB:1E:29:C7:91:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIgjdxpRukwtXrQx6Zj7HinHkVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d5d348-1ba1-4e68-86b4-138dca36bb5f/1/wIgjdxpRukwtXrQx6Zj7HinHkVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d5d348-1ba1-4e68-86b4-138dca36bb5f/1/wIgjdxpRukwtXrQx6Zj7HinHkVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:70:0a:44:fb:c5:bc:3a:00:7b:92:ee:a9:24:58:60:2a:21:
         fa:28:9c:f8:71:2e:be:3c:a9:3c:bf:b9:d9:fe:70:03:d7:d4:
         0f:65:d2:69:87:a2:32:0a:88:f5:49:81:21:22:ea:fa:aa:ad:
         e3:16:5a:54:5e:3a:0b:55:d1:29:63:39:fe:f8:a0:36:9c:f9:
         a6:2c:28:4f:0b:e0:da:20:f9:aa:30:ae:8f:05:3f:1b:f2:c9:
         e5:92:2e:88:5a:1b:56:91:25:ef:77:0f:c4:9e:53:e7:4f:54:
         de:e2:2e:d7:bf:57:fd:73:cf:0d:5a:af:83:26:b1:16:bc:b6:
         29:6b:84:78:0f:6f:52:cb:a8:10:aa:66:80:fb:c0:98:29:ca:
         fc:78:a3:45:75:e3:7b:4f:74:57:9c:be:34:91:5b:d1:e9:b7:
         70:96:04:47:2b:53:d2:63:ca:2d:73:65:65:e0:19:f5:90:9d:
         9e:33:3e:d9:2c:81:e8:57:7a:10:6c:24:80:ad:be:19:23:3e:
         a9:04:20:4b:0c:9c:c5:03:c3:67:c9:30:4c:bb:c1:55:6f:d3:
         a6:4b:f5:d5:45:0a:84:c3:e0:5a:5e:50:e7:88:1e:30:e1:24:
         b4:cd:d7:37:d3:ef:f9:42:b2:a4:ba:cd:0c:3d:09:4d:df:d8:
         c9:ba:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----