Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9901bb-0a31-4e86-9d80-48f11608b1c6/1/_zODjDqc_mwTG-8VK235C0nIO_g.mft
File:                     _zODjDqc_mwTG-8VK235C0nIO_g.mft (raw, json)
Hash identifier:          qZh8twFMXRSIfY5OBRDxALV5demz/LoM6bffs813c0Y=
Subject key identifier:   C8:9C:41:28:EF:6B:74:B3:83:44:45:9E:C6:62:E9:0A:F4:38:42:E8
Authority key identifier: FF:33:83:8C:3A:9C:FE:6C:13:1B:EF:15:2B:6D:F9:0B:49:C8:3B:F8
Certificate issuer:       /CN=ff33838c3a9cfe6c131bef152b6df90b49c83bf8
Certificate serial:       0190FC3779E589C55F4CF73AA0E6EE0F3AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zODjDqc_mwTG-8VK235C0nIO_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9901bb-0a31-4e86-9d80-48f11608b1c6/1/_zODjDqc_mwTG-8VK235C0nIO_g.mft
Manifest number:          01AD
Signing time:             Mon 29 Jul 2024 02:00:12 +0000
Manifest this update:     Mon 29 Jul 2024 02:00:12 +0000
Manifest next update:     Tue 30 Jul 2024 02:00:12 +0000
Files and hashes:         1: _zODjDqc_mwTG-8VK235C0nIO_g.crl (hash: TRUZl3PeyDcPiUXJl/MaWlz5rkxFF3j81k97QPS0bMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fc:37:79:e5:89:c5:5f:4c:f7:3a:a0:e6:ee:0f:3a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff33838c3a9cfe6c131bef152b6df90b49c83bf8
        Validity
            Not Before: Jul 29 02:00:12 2024 GMT
            Not After : Jul 30 02:00:12 2024 GMT
        Subject: CN=c89c4128ef6b74b38344459ec662e90af43842e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:6d:7c:ab:47:89:2f:d1:98:42:10:d0:4c:
                    1d:57:66:2a:11:ce:80:ad:e6:bc:1a:a9:d5:3b:47:
                    9a:cc:8a:04:47:26:98:8e:be:aa:e1:9b:bc:d3:e5:
                    5b:e5:b2:c9:b8:5c:9b:43:fc:00:76:09:da:05:10:
                    fd:5f:30:85:af:60:0a:b5:3b:a3:1a:a4:51:30:be:
                    12:fd:03:99:dd:ec:5a:86:8f:04:0f:c9:06:9c:9d:
                    29:8b:94:12:e2:dc:66:86:d5:95:ce:30:e8:8c:6e:
                    c9:63:3e:b6:2c:f2:0c:a7:0f:f0:c9:85:6c:d0:85:
                    04:7a:a8:00:10:30:93:3b:d2:de:58:37:a4:1a:73:
                    a2:e5:c3:1d:01:7a:99:bb:ee:e8:4c:53:34:a3:6f:
                    64:d4:fb:f3:39:77:d1:ab:67:48:fc:87:36:75:a8:
                    ca:0c:af:db:50:fb:38:d6:f8:4d:6f:60:bb:be:83:
                    4c:01:01:ab:82:0f:83:fa:d4:4e:a0:02:c0:b1:79:
                    4d:80:0c:0a:94:3b:e8:ff:04:ae:b4:49:15:2b:17:
                    96:04:ac:f1:80:28:db:de:aa:8b:f2:e5:94:81:72:
                    31:4b:e0:60:df:ae:4e:ef:ce:ad:b6:60:76:9a:d5:
                    04:ed:15:3c:40:cc:9b:c1:c7:b2:b8:19:ed:22:06:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:41:28:EF:6B:74:B3:83:44:45:9E:C6:62:E9:0A:F4:38:42:E8
            X509v3 Authority Key Identifier:
                keyid:FF:33:83:8C:3A:9C:FE:6C:13:1B:EF:15:2B:6D:F9:0B:49:C8:3B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zODjDqc_mwTG-8VK235C0nIO_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9901bb-0a31-4e86-9d80-48f11608b1c6/1/_zODjDqc_mwTG-8VK235C0nIO_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9901bb-0a31-4e86-9d80-48f11608b1c6/1/_zODjDqc_mwTG-8VK235C0nIO_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:48:44:31:0a:ed:23:bf:55:24:e7:40:4a:b9:ff:f4:51:
         ee:75:ee:4d:05:5f:48:11:49:75:52:2d:d9:b3:0c:6b:1c:9e:
         44:18:a0:18:42:ed:18:c9:13:84:17:21:b3:b1:51:aa:a5:3c:
         43:e2:8d:a4:ee:e4:07:3b:c1:68:61:b7:0d:03:de:9f:81:ed:
         87:1b:b1:4b:d5:57:ba:b8:fd:b7:75:86:72:5b:eb:2b:87:ab:
         45:f3:dc:45:4c:01:9f:d4:61:6f:56:42:75:61:cb:3e:30:e3:
         f2:54:a4:54:10:da:c4:48:44:df:28:db:c9:4e:3e:69:46:65:
         a0:73:08:bf:6f:ec:fc:59:ae:49:94:c3:83:5e:4f:64:21:55:
         72:d3:9d:40:50:37:70:5b:ef:01:5e:7d:19:14:ef:3f:6e:3a:
         d1:1d:0b:f3:77:18:07:5a:b4:55:89:cb:ad:11:42:21:ab:e7:
         af:c0:0c:8a:69:fc:ed:58:1e:ff:f9:9b:ae:97:90:2b:62:48:
         3f:1e:4f:09:89:90:d7:ca:89:5c:b2:65:2c:7a:a3:d7:5a:17:
         1f:06:0c:97:85:aa:3e:f7:ae:18:74:5c:d6:7e:b7:df:b3:23:
         f4:71:57:2b:9f:8c:db:9f:ec:77:d9:f8:b5:71:ce:80:05:9e:
         83:a8:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----