Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft
File:                     kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft (raw, json)
Hash identifier:          9QC5QbK6A+5E17dia7T/ds1NQR8fP8KaC0rFXCjHZMg=
Subject key identifier:   40:EB:79:1C:C9:8B:06:33:C1:5B:9D:25:D9:46:3D:80:79:8F:46:8C
Authority key identifier: 92:33:43:5D:7E:99:4A:65:E7:19:CA:E2:08:88:FB:42:BB:04:74:64
Certificate issuer:       /CN=9233435d7e994a65e719cae20888fb42bb047464
Certificate serial:       01922F12D11476184C4FFCA01165AD095085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft
Manifest number:          0A41
Signing time:             Thu 26 Sep 2024 16:03:35 +0000
Manifest this update:     Thu 26 Sep 2024 16:03:35 +0000
Manifest next update:     Fri 27 Sep 2024 16:03:35 +0000
Files and hashes:         1: kjNDXX6ZSmXnGcriCIj7QrsEdGQ.crl (hash: UohrGHY3NUoUbhRFEPsir8ylsqyRkm+r3Jeaba1lWx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:12:d1:14:76:18:4c:4f:fc:a0:11:65:ad:09:50:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9233435d7e994a65e719cae20888fb42bb047464
        Validity
            Not Before: Sep 26 16:03:35 2024 GMT
            Not After : Sep 27 16:03:35 2024 GMT
        Subject: CN=40eb791cc98b0633c15b9d25d9463d80798f468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:ac:21:fb:9d:d0:d1:89:40:61:70:89:cb:
                    70:a8:0a:9f:43:87:9d:ac:7f:c8:1e:25:c6:d6:7e:
                    e6:7a:95:12:c8:e9:6b:81:1f:10:6e:66:04:7e:fb:
                    59:fb:65:2a:83:d6:3b:12:7e:13:50:ee:c7:ae:5f:
                    05:30:bb:5e:ea:29:60:ab:fe:14:3f:07:cc:ec:fc:
                    41:27:2a:7d:ea:6b:7e:a4:73:9f:7e:10:8f:aa:dc:
                    51:58:98:bc:03:bf:57:0d:8e:d3:a4:04:b2:c5:ea:
                    25:e8:12:4b:67:cc:04:f5:03:d6:3a:59:eb:a4:59:
                    5f:ce:66:e6:6b:07:37:36:9e:ad:5b:46:bc:ef:42:
                    a8:20:a2:6b:54:df:1c:ec:a0:3a:26:ab:5f:1f:9b:
                    ea:52:11:7f:cd:4e:50:a7:c1:62:85:0c:a4:7d:21:
                    52:0e:fd:f3:0e:cc:44:13:51:04:88:ff:4a:f9:86:
                    8a:63:53:34:6c:6e:e4:bd:ef:f5:54:61:66:53:85:
                    df:49:13:64:2c:40:2d:bd:e5:ae:3a:c0:5f:ab:14:
                    e8:52:1e:01:b4:99:45:b3:c0:ea:ca:6d:37:39:9c:
                    03:d8:d7:f3:fc:2c:58:31:a4:30:ae:c3:59:ad:73:
                    a0:2f:c8:89:62:9c:37:64:d9:4a:cf:23:51:08:1c:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:79:1C:C9:8B:06:33:C1:5B:9D:25:D9:46:3D:80:79:8F:46:8C
            X509v3 Authority Key Identifier:
                keyid:92:33:43:5D:7E:99:4A:65:E7:19:CA:E2:08:88:FB:42:BB:04:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:40:35:a2:15:cc:ea:06:ef:6e:75:e4:f7:05:17:1b:43:f7:
         f0:d9:8f:62:28:03:da:85:c3:a5:85:bb:c3:4c:eb:5b:99:22:
         80:64:48:12:9e:f9:b3:24:b0:64:92:ec:86:62:9c:da:65:9b:
         c9:ed:b7:57:dd:65:bc:f0:55:71:e5:ad:32:48:36:93:67:68:
         5a:9c:7b:b6:5e:84:5f:9f:9b:70:04:5e:83:3d:73:0e:d6:19:
         23:a4:50:40:bc:f4:9e:08:2d:a7:5b:2c:d4:dc:1a:31:2d:14:
         9d:7c:b0:d5:77:d6:78:91:1b:7b:30:d8:5c:7b:23:c6:e7:d7:
         a2:59:a3:e9:6f:f2:f7:12:fe:bb:66:ea:ba:0a:ab:2a:6d:7e:
         8f:71:c9:82:c7:dd:17:90:db:2f:2f:0d:4e:5d:b2:36:a3:2f:
         0d:ea:23:94:c1:a6:f9:d2:40:0c:74:4b:4c:ca:06:39:89:0a:
         ed:b4:43:92:f8:a6:d1:44:e8:30:fd:f6:aa:65:2d:96:13:5e:
         3e:ff:9f:6d:e6:06:dc:a4:33:1a:8c:1b:a7:43:fd:36:5c:56:
         fe:83:08:e8:91:70:f8:0f:89:d3:26:fa:3c:08:43:3a:5e:4e:
         98:18:41:a5:ae:63:56:e1:f8:e6:a9:d8:c7:7d:bf:fb:b4:8f:
         84:85:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----