Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
File:                     8Oen7AhMfvq_Zmijd5MsNqs62A0.mft (raw, json)
Hash identifier:          mr1xlHVeXd9QWWkOFeKm/8VaydSQZwX/HjxxLrV/aW4=
Subject key identifier:   1B:0B:1F:94:2B:96:92:8C:5F:47:6F:0D:ED:6C:B6:E0:F1:18:F5:34
Authority key identifier: F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D
Certificate issuer:       /CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
Certificate serial:       01923059F5EA847B7CE3819821013207FA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
Manifest number:          07E1
Signing time:             Thu 26 Sep 2024 22:00:54 +0000
Manifest this update:     Thu 26 Sep 2024 22:00:54 +0000
Manifest next update:     Fri 27 Sep 2024 22:00:54 +0000
Files and hashes:         1: 8Oen7AhMfvq_Zmijd5MsNqs62A0.crl (hash: NPIguuimTCUuE2m3kE9AYbZoxPXLaZlR4cBnbJ7g1tY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:59:f5:ea:84:7b:7c:e3:81:98:21:01:32:07:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
        Validity
            Not Before: Sep 26 22:00:54 2024 GMT
            Not After : Sep 27 22:00:54 2024 GMT
        Subject: CN=1b0b1f942b96928c5f476f0ded6cb6e0f118f534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:6c:68:e4:39:85:bf:81:82:a9:43:d3:ac:
                    7c:e6:07:25:43:ae:33:c1:e5:9f:87:84:43:ef:ac:
                    a8:fd:88:e4:65:b6:e1:53:0a:70:a7:71:69:90:38:
                    5a:7e:6a:52:fd:10:62:c7:67:d7:9f:55:8c:75:52:
                    3f:94:d9:f3:f8:e1:4d:a4:6e:a9:ff:fa:81:16:a7:
                    02:c8:a7:cf:a1:a6:e9:f0:6c:45:2f:2d:40:74:3d:
                    b7:e4:c0:c2:21:41:6d:55:9d:93:13:a7:24:d8:ae:
                    a5:87:db:60:3a:aa:f7:91:62:54:f0:14:29:0b:35:
                    04:0a:dd:e0:bf:45:0d:29:60:aa:f0:db:ce:16:dd:
                    ae:f0:de:92:da:2d:24:05:5a:8c:99:07:05:f5:8c:
                    46:5c:73:13:e2:ed:10:0d:df:a5:17:24:d9:32:a2:
                    c0:e3:30:d5:79:58:b2:10:15:1e:15:eb:47:aa:f0:
                    80:7d:a6:a7:99:38:38:c7:55:45:d8:0d:0b:99:8c:
                    36:b2:4b:40:1e:da:2a:20:e9:31:ac:53:87:17:2f:
                    cd:e5:07:d6:25:d7:ee:6c:75:1a:d7:51:0b:16:36:
                    2a:79:3b:1d:a0:a6:7c:50:c0:4b:78:51:a5:df:00:
                    a3:fc:9f:5b:d9:90:77:6b:d6:c4:b5:e3:36:cd:8f:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:1F:94:2B:96:92:8C:5F:47:6F:0D:ED:6C:B6:E0:F1:18:F5:34
            X509v3 Authority Key Identifier:
                keyid:F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:b6:02:a3:91:d0:ac:c4:1e:30:c9:5a:e1:39:04:6d:67:
         36:6e:35:a2:81:cf:6e:b4:40:48:72:17:f3:b4:00:0a:af:92:
         4f:39:42:4f:45:a0:79:13:78:b0:e7:2a:52:7b:79:a6:69:10:
         94:91:a6:25:47:9e:dc:d1:19:d7:e9:92:4b:78:83:c1:34:8a:
         2c:25:84:d0:58:63:75:44:32:9a:3a:22:8c:04:a3:86:48:1b:
         98:b9:3b:c7:78:8b:a4:a7:3f:66:55:54:f1:58:43:25:f8:64:
         bb:70:df:2b:b6:18:a4:7a:78:6e:8a:a8:67:bb:cf:dd:ee:02:
         2b:66:13:11:9d:56:98:c3:a9:f8:07:b5:73:8e:14:2d:bc:c9:
         48:1b:35:3a:f6:c2:c8:0d:9f:df:08:a4:0a:86:61:55:8d:7b:
         8f:56:a6:28:ba:56:cc:11:27:e0:01:13:01:93:1e:85:14:28:
         26:e3:c6:b2:84:45:fc:79:16:f6:2e:91:05:c2:81:9f:77:fe:
         99:27:f6:48:85:81:09:cf:0d:ba:68:0f:50:a9:2f:1a:d6:a4:
         8d:b6:5b:ca:15:6a:70:78:3e:02:00:cf:68:61:e7:28:52:6d:
         74:26:12:bc:93:33:4b:4f:cf:ee:3e:34:90:03:ba:5b:5d:30:
         c9:20:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----