Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
File:                     BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft (raw, json)
Hash identifier:          Rer0xlyklczK5Ist2Vz6XihIwzbiq6a3KyvIQaFV5YM=
Subject key identifier:   DC:26:F8:AC:C8:31:55:1B:0B:66:8F:F8:3B:2C:5D:69:2B:EE:0C:3C
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Certificate issuer:       /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial:       019346035A4140C1402679429DBAACDA4E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
Manifest number:          07EF
Signing time:             Tue 19 Nov 2024 20:00:44 +0000
Manifest this update:     Tue 19 Nov 2024 20:00:44 +0000
Manifest next update:     Wed 20 Nov 2024 20:00:44 +0000
Files and hashes:         1: BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl (hash: S+dB8gvFIcTctseToOUDNrg37XktQ614NLQhqgGOZ7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:03:5a:41:40:c1:40:26:79:42:9d:ba:ac:da:4e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
        Validity
            Not Before: Nov 19 20:00:44 2024 GMT
            Not After : Nov 20 20:00:44 2024 GMT
        Subject: CN=dc26f8acc831551b0b668ff83b2c5d692bee0c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:3b:34:e3:63:1f:d1:6c:6b:25:39:78:fd:
                    4f:49:2f:95:ef:3c:c0:b1:53:0a:43:f0:b1:a3:b4:
                    41:c7:3e:96:38:49:ab:2b:b1:ac:e6:2f:0f:4a:e6:
                    2b:6c:a1:99:a0:e7:e8:09:b5:5b:68:f1:23:35:88:
                    1e:0b:cd:c0:b2:4c:f6:17:b9:3b:40:a9:b1:58:49:
                    51:77:53:3f:87:cb:a4:3b:84:38:96:be:29:5e:0f:
                    47:06:c9:fa:c6:c3:6a:d8:1c:99:f6:d2:65:1a:73:
                    d0:47:aa:67:d7:6c:5b:56:57:dd:f9:b3:c9:02:00:
                    cc:52:35:e4:d0:4e:04:3d:fe:04:59:a2:27:78:88:
                    1c:6d:7e:14:7d:21:70:c2:b5:85:a1:1b:24:95:fe:
                    d7:f2:61:93:c3:dd:d3:83:a6:e0:81:ab:55:3c:70:
                    6a:72:9d:b6:65:4a:74:0d:5e:91:f4:bc:8f:02:b0:
                    e5:6f:39:4f:87:59:8a:19:5f:68:fc:3c:b6:8c:bb:
                    b6:b9:9a:2c:11:ae:bb:4f:5d:14:13:e5:0d:5d:64:
                    c8:d6:1a:83:ed:ec:a4:45:d8:2b:58:af:67:2b:24:
                    3d:bc:fb:1d:b6:67:d6:28:4e:75:f2:cc:58:ff:02:
                    0b:f3:a0:44:9d:9e:c0:54:ba:08:e5:40:69:8a:1a:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:26:F8:AC:C8:31:55:1B:0B:66:8F:F8:3B:2C:5D:69:2B:EE:0C:3C
            X509v3 Authority Key Identifier:
                keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:67:2b:3b:2f:56:9a:12:4b:b1:19:33:e9:64:c8:4f:2a:82:
         88:6b:23:26:b5:a7:91:47:7d:ae:c9:da:8d:65:e4:0f:b9:41:
         d3:0f:36:3a:bf:52:4e:df:76:eb:0d:e2:fc:53:1a:cc:80:e5:
         32:d7:3b:9d:ec:9b:e5:25:52:92:86:97:13:0f:10:e6:aa:81:
         fa:c2:5e:13:9a:37:5c:40:e0:16:dd:74:94:47:91:6a:f9:4d:
         92:37:25:d3:67:e4:f8:92:e1:24:81:71:d1:00:b1:8c:d2:77:
         50:03:f2:d5:eb:46:9c:b2:87:ca:90:d3:b8:ce:4f:ee:31:4c:
         f9:e6:f5:09:83:d2:eb:fa:9f:40:1d:27:cf:1f:1b:a9:1d:0b:
         a4:69:6b:1c:27:d3:bc:de:9c:63:d1:8b:7e:55:0e:9d:b0:67:
         d8:ae:92:cc:a2:94:ce:c3:8c:26:9b:11:f5:85:41:35:79:cb:
         1c:58:29:42:9d:bf:ce:61:b9:b1:99:3e:27:72:e7:bc:b7:95:
         7b:66:25:79:2d:d2:30:a1:01:4d:02:40:57:bd:71:89:6c:b8:
         76:ec:57:f6:50:50:f3:e7:a7:35:dc:a9:95:c8:2b:a9:49:4f:
         ba:ea:c8:18:3f:b1:87:5c:b0:a8:91:0c:96:2c:86:ba:4f:a6:
         bb:a9:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----