Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.mft
File:                     v4xkNQoN_WigQ7Ih8YYLSArjUt4.mft (raw, json)
Hash identifier:          ika843gmF/rOVRhEsUu8arxMPYbkJj1Bpk2gHyxRuEg=
Subject key identifier:   4F:2E:C9:71:7D:C5:1C:F7:2E:D0:1D:B8:4D:FE:8B:FB:C3:95:CC:FB
Authority key identifier: BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
Certificate issuer:       /CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Certificate serial:       0191B3974B54C7569DA9B12E0C5C3B530A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.mft
Manifest number:          0B38
Signing time:             Mon 02 Sep 2024 16:35:22 +0000
Manifest this update:     Mon 02 Sep 2024 16:35:22 +0000
Manifest next update:     Tue 03 Sep 2024 16:35:22 +0000
Files and hashes:         1: v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl (hash: VsXRNLdKdJYQyqnKKwgVjLNUwlYVFpYra2JPEsG/bQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:97:4b:54:c7:56:9d:a9:b1:2e:0c:5c:3b:53:0a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8c64350a0dfd68a043b221f1860b480ae352de
        Validity
            Not Before: Sep  2 16:35:22 2024 GMT
            Not After : Sep  3 16:35:22 2024 GMT
        Subject: CN=4f2ec9717dc51cf72ed01db84dfe8bfbc395ccfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:e7:4b:00:73:9e:76:f7:b1:1f:d3:8d:f4:
                    d9:0f:c5:9a:97:5f:a5:bd:8d:0e:7d:0b:bf:10:b8:
                    8e:1e:4c:ab:81:ee:b9:33:b7:c2:f7:07:f0:4c:e8:
                    57:1f:a3:3a:13:85:99:29:9a:ae:55:92:20:4f:91:
                    75:87:27:c6:05:03:50:87:c0:44:7a:23:37:2f:61:
                    ec:66:ed:c0:a4:a2:83:a4:f7:56:02:fa:c7:eb:29:
                    5d:d8:b0:91:c0:67:e6:21:60:56:6f:5c:9a:7e:bb:
                    56:bf:67:2f:82:12:c9:31:3a:ee:e0:f4:aa:2d:40:
                    95:3a:36:b7:08:6c:06:d4:d1:3e:e6:ce:d2:73:05:
                    f3:37:14:93:fc:c9:a0:97:fb:a3:56:59:17:dc:1c:
                    a0:a7:6b:a4:5a:92:21:4b:d6:86:84:cf:01:ab:6b:
                    51:ed:22:eb:ab:89:6a:d2:b2:dd:59:c9:4b:f7:c7:
                    d1:a7:63:28:d8:9f:9b:32:42:03:af:75:78:80:60:
                    66:4d:f3:a9:fc:ff:6c:26:9c:0e:01:94:bb:a8:01:
                    2a:97:e6:c4:62:fd:90:89:8e:b4:e5:9f:d3:29:38:
                    11:f8:2a:68:a3:34:57:69:2c:e9:e5:c2:86:36:f2:
                    fb:7e:24:fa:c1:f3:52:de:c2:95:0a:37:5f:83:6e:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:C9:71:7D:C5:1C:F7:2E:D0:1D:B8:4D:FE:8B:FB:C3:95:CC:FB
            X509v3 Authority Key Identifier:
                keyid:BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:7f:ba:d3:c4:78:ff:63:8a:7a:fd:23:b3:d3:8e:e6:f3:
         70:45:b2:12:39:c2:f6:20:4a:2b:4e:93:cf:49:a5:aa:af:80:
         73:05:d3:4d:dc:b5:d6:47:fe:0d:18:3e:68:c3:2b:cd:db:84:
         ce:3b:fb:2c:89:4d:e5:2d:e2:12:f3:b5:04:47:69:c6:df:c7:
         37:92:34:81:2f:60:94:fe:6d:ce:5e:de:24:7a:44:29:6d:2c:
         02:cd:53:e9:fd:b1:c4:66:bf:36:37:f6:0e:06:fc:31:22:75:
         93:b0:36:8b:b7:6e:17:e7:89:54:ef:9d:25:05:83:1d:00:ee:
         b7:f3:24:4f:5c:30:c6:60:57:73:0d:fd:9d:d2:cd:78:bf:01:
         80:9f:cc:81:ea:a8:a9:45:0d:25:98:bb:04:ed:06:28:b4:52:
         3d:11:f1:06:0f:2a:9a:b3:54:d7:53:fc:88:db:cc:21:a5:9e:
         72:99:fc:e1:73:c9:f8:e1:2f:75:da:fd:38:dd:90:39:8f:cd:
         df:d7:40:8b:1a:95:3a:23:6b:21:53:71:70:8a:3b:c2:99:84:
         9f:6d:71:b6:0d:8f:b2:5d:1d:bc:9b:ec:9a:ef:e7:1e:4e:18:
         ab:53:d8:8d:d3:e6:af:9f:33:73:5d:9a:b1:bf:4f:7d:dc:65:
         96:e7:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----