Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
File:                     gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft (raw, json)
Hash identifier:          lSkFo7l+D+USlRmCuMCrfoKTL/hYqDS+KuvXwtsyrmI=
Subject key identifier:   E1:6A:52:49:4B:BE:B2:F0:D8:A4:57:A4:4C:DB:F1:11:A7:18:F6:3F
Authority key identifier: 81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
Certificate issuer:       /CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Certificate serial:       01934670BAAD7347338097282A56CC29F57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
Manifest number:          1094
Signing time:             Tue 19 Nov 2024 22:00:12 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:12 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:12 +0000
Files and hashes:         1: 74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa (hash: +G3AnBpHm48/4REveTmD9LZAmJDRxkhRBo5R9LKaPpA=)
                          2: gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl (hash: CReMR+EnSExKUx+KQbc9Z5PWfiv5dbpiC/ESHY6tS7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:70:ba:ad:73:47:33:80:97:28:2a:56:cc:29:f5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
        Validity
            Not Before: Nov 19 22:00:12 2024 GMT
            Not After : Nov 20 22:00:12 2024 GMT
        Subject: CN=e16a52494bbeb2f0d8a457a44cdbf111a718f63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:74:85:cf:02:a9:9e:38:06:2c:4d:26:04:
                    38:48:c8:fa:a2:be:f6:d3:00:f4:b2:ab:dc:7f:21:
                    7f:e7:8e:d7:ea:cd:e6:a5:0e:d8:07:c4:e0:3f:e9:
                    bb:4d:2a:6c:3f:91:82:27:0d:bf:43:d5:34:2d:59:
                    c3:d0:9e:dd:ad:f1:e3:99:c2:25:78:f0:14:0f:df:
                    fd:f4:b6:3a:81:a1:bf:68:e2:a2:06:54:32:e6:ac:
                    09:54:32:bc:04:86:24:8b:01:a6:00:b3:f6:af:c2:
                    3f:cd:bc:36:1c:da:b8:e3:e0:d2:6e:3c:12:bd:68:
                    a5:e7:ea:1c:94:fc:94:4c:bc:df:63:f2:6b:66:df:
                    58:c4:23:d3:bc:95:e8:05:e8:94:eb:cf:1f:ba:97:
                    f1:0d:6e:10:1d:b0:3e:08:87:b1:92:46:4c:4d:3a:
                    c4:f3:ad:76:e4:7c:8d:e3:3d:04:32:ee:f3:7c:65:
                    87:bc:86:0d:70:32:92:d4:77:32:8a:58:50:00:36:
                    9b:45:7f:61:06:d0:30:9b:71:8e:d1:13:bb:4f:67:
                    8f:84:e5:4f:28:22:7c:ba:47:d4:09:52:80:2d:6d:
                    66:69:2f:62:55:fb:2a:9f:74:bd:e9:f4:da:eb:8c:
                    fe:93:cd:f1:35:a4:24:0e:38:31:96:99:38:f1:18:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:52:49:4B:BE:B2:F0:D8:A4:57:A4:4C:DB:F1:11:A7:18:F6:3F
            X509v3 Authority Key Identifier:
                keyid:81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:5b:9d:d8:b3:7d:68:ac:dc:d6:92:bb:4b:66:1c:a6:91:
         b6:49:b9:52:f6:83:16:cb:bb:f3:7f:fe:e8:05:30:fe:ff:af:
         a1:73:35:62:75:5a:cf:89:fb:f8:a3:60:da:02:b1:8a:89:56:
         eb:78:97:b4:0c:f9:be:24:dd:0c:4a:f3:99:6f:37:43:81:5c:
         bd:68:90:9c:bb:c6:a6:f5:8c:c7:d7:87:33:6c:57:1e:1c:16:
         c6:8c:48:2e:76:d6:fc:28:1c:f3:bc:4a:1f:46:24:95:84:e4:
         4d:2b:ca:c2:30:72:35:a1:eb:97:dd:ed:b4:3a:40:ad:27:c4:
         e0:79:ee:aa:64:bf:fc:56:cd:53:b3:86:de:16:58:cd:e0:b7:
         4b:32:45:18:ea:28:72:83:5b:19:11:e5:d2:81:ef:2e:9d:78:
         c5:a9:c6:61:ab:cf:2b:70:07:f8:87:79:87:03:61:cf:cb:6d:
         02:68:c5:67:b6:7e:86:94:35:ea:d8:15:02:04:5a:b4:da:0c:
         17:d2:22:97:a7:4d:83:79:fe:a9:2a:e5:ca:c4:4e:fc:da:ed:
         e2:66:04:1e:e6:7c:67:20:95:4e:e2:87:8d:e0:79:17:ad:9c:
         a6:93:aa:8a:49:75:a5:9d:3e:65:b9:d3:ad:fc:89:13:00:e2:
         b2:f7:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----