Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
File:                     Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft (raw, json)
Hash identifier:          OnqSyvtmVwhdSLGLhd20po44zOQ1pu4Klubmmnwkss8=
Subject key identifier:   61:A0:71:1E:DA:87:FA:0D:F7:0B:8F:67:B3:06:BD:DF:5D:B0:5B:18
Authority key identifier: 15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF
Certificate issuer:       /CN=15fd8ad5d4700b836671ad66114664cf3303b7ef
Certificate serial:       019139CE07F755C618DC40B09B657A83CD5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
Manifest number:          1259
Signing time:             Sat 10 Aug 2024 01:01:29 +0000
Manifest this update:     Sat 10 Aug 2024 01:01:29 +0000
Manifest next update:     Sun 11 Aug 2024 01:01:29 +0000
Files and hashes:         1: Ff2K1dRwC4Nmca1mEUZkzzMDt-8.crl (hash: kzlHg+DU5+unZrPzcvrQWQkPaP0JqeHyo3KS4628XMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:39:ce:07:f7:55:c6:18:dc:40:b0:9b:65:7a:83:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fd8ad5d4700b836671ad66114664cf3303b7ef
        Validity
            Not Before: Aug 10 01:01:29 2024 GMT
            Not After : Aug 11 01:01:29 2024 GMT
        Subject: CN=61a0711eda87fa0df70b8f67b306bddf5db05b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:71:31:0e:d6:74:a9:40:9c:e8:5e:0f:58:
                    f9:73:85:76:ae:fa:be:d6:76:b4:fa:e1:b0:58:b5:
                    91:55:e0:e4:74:7e:ce:1e:ec:18:e6:36:6c:23:1a:
                    2d:09:0b:0f:24:97:c5:ec:69:20:07:cd:8c:7e:f6:
                    03:a2:f9:98:67:22:e9:ba:6c:b2:52:b1:cd:b9:bf:
                    ea:6c:f1:34:e3:25:11:80:60:19:0e:94:67:7e:b8:
                    88:07:a6:7e:79:51:35:4d:38:d0:1b:f7:84:2e:3e:
                    2d:90:fc:f7:27:c9:ed:7f:6b:f7:b1:de:e7:87:d2:
                    3a:7e:4a:09:c8:96:d2:2d:74:d5:94:e6:55:52:52:
                    87:a2:53:29:7f:27:1c:58:02:6d:d4:74:09:a7:50:
                    41:1b:bf:52:f0:7f:f9:33:8e:bf:4e:56:4e:03:4c:
                    d8:0b:cc:27:db:60:02:ea:d4:48:39:9b:a3:fb:3d:
                    7a:5f:c9:9f:80:59:3d:de:55:74:d1:75:4f:57:d5:
                    5e:8c:06:b7:b6:fa:bb:65:c3:3f:27:39:c8:4a:14:
                    04:55:aa:b0:d9:29:73:2e:e6:7a:26:49:63:78:8a:
                    c8:aa:78:e4:ed:f7:f5:f0:b6:7e:9a:18:a1:9b:c3:
                    4e:2c:55:72:08:2d:cd:55:25:82:1a:9d:f6:40:35:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:71:1E:DA:87:FA:0D:F7:0B:8F:67:B3:06:BD:DF:5D:B0:5B:18
            X509v3 Authority Key Identifier:
                keyid:15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:ab:d4:b8:8b:5d:ab:7b:a8:71:e5:94:76:dd:b5:4e:c8:
         1a:f0:3e:51:e3:e1:6c:57:a2:46:61:f2:32:8a:dd:cd:8a:9c:
         98:ea:1f:04:5d:56:0c:97:14:e0:91:03:ab:79:cb:1b:f4:20:
         e9:2e:cb:3d:3c:99:34:a3:25:ef:02:db:dd:eb:3d:20:54:60:
         0e:81:67:8d:91:67:9e:d3:6a:7a:7e:a4:69:b9:84:cf:ac:37:
         7e:81:e6:93:62:85:57:98:66:48:f5:2d:74:6c:be:93:7c:22:
         3c:90:7e:10:8e:be:87:d2:66:99:be:97:bd:0b:ee:1b:ce:14:
         b0:3a:af:65:ae:29:c0:af:00:55:72:15:be:6f:d8:7b:65:30:
         23:86:97:43:62:da:ff:ce:b6:e4:20:ac:88:f3:5a:c3:f3:7f:
         8d:ed:81:87:fe:90:bf:7c:a5:d4:4d:3c:40:ba:f0:e7:be:df:
         fb:ff:a4:96:63:ac:fd:5d:70:e6:19:b7:57:e9:57:d2:a6:3b:
         b5:3d:93:f3:70:d4:3f:2f:24:17:93:00:f6:25:6e:f5:9f:8d:
         08:1d:4a:eb:83:be:a4:c4:77:ce:25:ba:84:f1:2d:7a:45:4f:
         79:ab:84:da:4f:82:c3:f9:d1:48:87:cb:c1:68:84:72:ab:cb:
         fc:49:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----