Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
File:                     _pjv555h1dHHiOpVM5rBbHMeJqA.mft (raw, json)
Hash identifier:          APnBIBTmaJkCv/L830GJFOgruPEWVGzGDkQmgVNZLS4=
Subject key identifier:   D9:E6:78:71:30:65:BF:A8:92:EF:D9:6B:3D:CE:20:96:1A:4F:E8:81
Authority key identifier: FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0
Certificate issuer:       /CN=fe98efe79e61d5d1c788ea55339ac16c731e26a0
Certificate serial:       0190C7DD05123390A28BDD24DA1064511B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
Manifest number:          0E68
Signing time:             Thu 18 Jul 2024 22:01:09 +0000
Manifest this update:     Thu 18 Jul 2024 22:01:09 +0000
Manifest next update:     Fri 19 Jul 2024 22:01:09 +0000
Files and hashes:         1: _pjv555h1dHHiOpVM5rBbHMeJqA.crl (hash: LCbAAid1WSEWODyMNVrTrjkrjxwOSNsPx+Hha7m62cE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:dd:05:12:33:90:a2:8b:dd:24:da:10:64:51:1b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe98efe79e61d5d1c788ea55339ac16c731e26a0
        Validity
            Not Before: Jul 18 22:01:09 2024 GMT
            Not After : Jul 19 22:01:09 2024 GMT
        Subject: CN=d9e678713065bfa892efd96b3dce20961a4fe881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:c5:b3:0a:4c:8f:c7:3a:1b:91:37:71:be:
                    eb:46:10:61:c2:06:f7:f2:bb:18:e4:1f:3e:ad:f0:
                    91:73:89:f1:8e:16:4f:4d:3f:e6:a2:3d:15:63:1b:
                    2a:db:64:d1:46:3a:25:4c:4a:93:4a:15:ec:cb:46:
                    b3:5e:8d:86:d7:79:9c:e1:0a:42:fd:d6:a1:61:94:
                    c9:38:cf:06:ac:ee:d8:80:fe:d3:d2:dd:74:cc:03:
                    ac:7f:db:e2:04:ee:53:ca:55:6d:e5:ab:f5:ea:6c:
                    43:6d:25:cb:69:1f:36:3c:4f:03:d4:5b:19:eb:b8:
                    31:58:35:0f:ea:4d:86:93:be:9d:bf:12:56:b6:ee:
                    3b:09:c9:61:d1:3a:6e:7f:78:29:7b:30:b0:af:d0:
                    a1:72:3b:08:90:4c:2d:59:b6:94:ba:e1:2b:d3:7e:
                    f5:fd:f0:12:14:94:a5:d1:cf:38:0c:6d:d7:7d:e2:
                    e5:4f:03:05:f2:f0:b7:cb:a0:64:cb:d4:a0:34:ea:
                    0f:11:12:2b:44:4f:90:a7:ff:4c:e3:b1:aa:88:bd:
                    3e:c4:01:55:a3:74:57:ed:bb:5d:f2:54:0c:e5:ef:
                    3b:3d:50:f3:e9:36:46:23:80:22:4b:f5:51:57:f2:
                    04:7a:68:b3:14:df:b4:ea:ec:d9:e2:6c:d5:e9:1c:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E6:78:71:30:65:BF:A8:92:EF:D9:6B:3D:CE:20:96:1A:4F:E8:81
            X509v3 Authority Key Identifier:
                keyid:FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:72:54:b2:bb:c3:1f:c1:b5:bb:36:9e:12:b0:58:f2:38:
         58:a7:a7:14:d3:ce:f1:f8:9f:c6:39:3a:e2:b5:8d:23:1c:ec:
         4c:c8:9b:3f:38:40:fc:80:83:81:88:4d:d0:ce:d5:cf:8a:04:
         1a:9d:48:68:c0:30:e1:68:e1:c6:39:55:45:5e:68:ef:30:ea:
         59:d1:46:a6:9a:78:41:5e:3c:20:86:bf:34:ed:3f:f5:7d:15:
         e4:18:6d:94:d8:6c:35:ea:b3:05:41:77:c9:51:e1:78:20:06:
         fa:7b:52:27:8c:50:b3:df:e6:a1:3b:6f:9e:31:76:de:f2:aa:
         92:82:97:da:d9:c3:7d:07:42:c8:ca:70:41:f4:2d:9e:34:cb:
         3c:77:2e:b3:13:28:10:2d:76:c7:b2:cb:59:9a:c7:43:f7:23:
         a5:55:db:f4:3b:53:52:4c:28:46:f1:38:c2:ac:ff:02:87:34:
         82:39:ec:66:5a:f4:26:37:b3:d8:64:58:dd:e4:97:18:13:9b:
         5b:20:16:f5:46:b3:83:2d:08:31:bc:3c:7b:c7:db:50:82:e6:
         b0:0a:c1:7a:ce:d9:81:e6:67:c2:bb:30:3c:e7:56:a7:34:cc:
         6d:56:46:f2:d3:db:f9:96:cf:4f:a5:9d:1d:f9:41:10:fa:a1:
         52:6f:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----