Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft
File:                     v0WmpZwO_YpD-qfheqFY6cbLnlI.mft (raw, json)
Hash identifier:          GfyTensOaR7l2jrEsEsByZhBoK8uBoIsQouqn6T85gY=
Subject key identifier:   DD:16:C9:70:FC:9C:69:F7:59:A2:D6:C4:07:DE:97:87:5F:39:C9:6D
Authority key identifier: BF:45:A6:A5:9C:0E:FD:8A:43:FA:A7:E1:7A:A1:58:E9:C6:CB:9E:52
Certificate issuer:       /CN=bf45a6a59c0efd8a43faa7e17aa158e9c6cb9e52
Certificate serial:       019230230DD56592FADF427DF7F1F8F0A751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0WmpZwO_YpD-qfheqFY6cbLnlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft
Manifest number:          01C8
Signing time:             Thu 26 Sep 2024 21:00:56 +0000
Manifest this update:     Thu 26 Sep 2024 21:00:56 +0000
Manifest next update:     Fri 27 Sep 2024 21:00:56 +0000
Files and hashes:         1: v0WmpZwO_YpD-qfheqFY6cbLnlI.crl (hash: YxqfBFut5529gY/FqRM043gG6baxTd3zbEFP6q7LTTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:0d:d5:65:92:fa:df:42:7d:f7:f1:f8:f0:a7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf45a6a59c0efd8a43faa7e17aa158e9c6cb9e52
        Validity
            Not Before: Sep 26 21:00:56 2024 GMT
            Not After : Sep 27 21:00:56 2024 GMT
        Subject: CN=dd16c970fc9c69f759a2d6c407de97875f39c96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:6e:12:ad:77:32:e6:c0:c5:e0:e5:90:32:
                    80:9c:02:8e:83:03:91:92:85:ae:81:5f:35:49:96:
                    e2:0a:5d:73:dc:42:b3:b8:aa:b9:b9:6b:b5:ec:92:
                    2f:ae:67:62:41:03:2f:47:3e:cf:93:1f:e3:57:f0:
                    10:50:ae:90:c2:dc:a0:2f:d8:cd:07:e4:8c:c0:fd:
                    99:f0:94:99:9f:7d:aa:15:6d:19:4c:40:eb:05:ba:
                    13:fa:46:41:c0:b1:30:e5:34:b6:b6:6c:73:ae:49:
                    40:2c:98:ce:72:dd:1e:33:9f:31:4e:15:e7:3c:bc:
                    34:50:8c:57:d3:ff:fb:b9:33:c5:4b:c9:16:e3:6e:
                    f2:60:1b:dc:da:6a:59:2c:63:45:e6:60:c8:46:92:
                    d8:77:77:8d:c4:c6:2c:d5:07:7e:a8:00:ef:8c:69:
                    75:a9:76:24:68:5d:44:eb:da:5b:55:25:1c:75:73:
                    2e:ae:dc:61:17:a3:97:c0:1d:ca:c1:50:fd:b5:d6:
                    66:9f:62:31:52:3f:8d:75:eb:e3:d8:f0:c5:1e:bf:
                    27:17:22:af:27:87:c3:01:91:40:38:80:61:d6:b4:
                    04:34:57:56:e1:7b:d6:6f:67:70:61:1d:7f:d0:28:
                    50:dd:76:62:13:db:ae:73:37:73:1d:de:78:d8:03:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:C9:70:FC:9C:69:F7:59:A2:D6:C4:07:DE:97:87:5F:39:C9:6D
            X509v3 Authority Key Identifier:
                keyid:BF:45:A6:A5:9C:0E:FD:8A:43:FA:A7:E1:7A:A1:58:E9:C6:CB:9E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0WmpZwO_YpD-qfheqFY6cbLnlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cac1ef-3414-434e-9d48-4cab024f470f/1/v0WmpZwO_YpD-qfheqFY6cbLnlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:2d:2f:57:cd:2a:b6:ba:72:8a:0e:6b:45:6d:0f:7f:d6:
         b1:81:85:27:8b:db:00:e3:ab:d6:90:99:db:dc:0c:c0:b6:ba:
         d0:2b:97:7f:61:19:21:ae:b4:34:0e:85:94:31:50:7e:68:69:
         ed:0c:d6:39:ea:e5:34:65:1c:a9:47:0f:1b:95:37:30:db:06:
         5c:56:f9:d1:e0:f7:4b:d0:6d:0f:d2:0c:f0:7d:fa:13:f6:a6:
         8a:5a:d8:e4:19:5c:f2:d1:ae:1a:23:49:80:8c:7c:7d:ac:cc:
         f8:04:99:f6:ef:fa:c1:15:26:17:0e:37:3c:ff:77:8b:53:52:
         b3:ee:4f:a3:c5:f4:bc:93:61:13:b2:01:12:68:d1:ac:6a:4d:
         43:e2:ce:4b:7c:7f:9f:67:b1:6a:dc:c3:65:5f:94:8d:c6:3b:
         54:09:42:fb:b3:18:d1:25:3e:0c:3c:90:c6:5e:fe:97:48:a8:
         29:89:57:93:92:b6:15:6b:3f:6f:0f:d6:bc:ec:5c:91:31:69:
         88:4f:35:31:f2:16:a7:77:d9:1c:e0:c5:b6:24:26:37:76:00:
         57:15:7e:65:8e:5e:72:ef:31:d0:80:0e:7b:2e:ec:db:7e:fe:
         b1:98:bb:07:24:95:8a:a9:2c:df:3c:cd:dd:23:87:5f:ce:4d:
         73:05:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----