Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2f29ec-0feb-43ce-ac73-ce22ed3d8e2e/1/S_NAY_HOvdu_voVQRKyIYJOJBWs.mft
File:                     S_NAY_HOvdu_voVQRKyIYJOJBWs.mft (raw, json)
Hash identifier:          sWp8eDH7mY3wqWyDKnayXXFdPEcYMc5mVxIQ9OU19lY=
Subject key identifier:   CD:CE:15:E5:38:EE:F5:99:6C:C0:25:D2:BE:E1:63:64:37:27:C0:8D
Authority key identifier: 4B:F3:40:63:F1:CE:BD:DB:BF:BE:85:50:44:AC:88:60:93:89:05:6B
Certificate issuer:       /CN=4bf34063f1cebddbbfbe855044ac88609389056b
Certificate serial:       01934783E9328F2BBD07333E2098E2F9A6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_NAY_HOvdu_voVQRKyIYJOJBWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/2f29ec-0feb-43ce-ac73-ce22ed3d8e2e/1/S_NAY_HOvdu_voVQRKyIYJOJBWs.mft
Manifest number:          0623
Signing time:             Wed 20 Nov 2024 03:00:47 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:47 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:47 +0000
Files and hashes:         1: S_NAY_HOvdu_voVQRKyIYJOJBWs.crl (hash: WBVw8hGu0mSrJunxplk3QaMfVj5ae2EXcFJ3rmq612c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:e9:32:8f:2b:bd:07:33:3e:20:98:e2:f9:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf34063f1cebddbbfbe855044ac88609389056b
        Validity
            Not Before: Nov 20 03:00:47 2024 GMT
            Not After : Nov 21 03:00:47 2024 GMT
        Subject: CN=cdce15e538eef5996cc025d2bee163643727c08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:d8:ee:ac:8f:2c:d0:98:e8:e8:8a:e6:55:
                    f6:91:e7:e2:0a:0e:71:4a:67:bd:2d:99:a9:a6:7d:
                    77:40:f0:c6:93:45:2c:45:83:30:a7:7a:53:34:e3:
                    19:85:4c:26:82:1e:75:8f:7e:a3:a9:8f:91:83:4a:
                    53:84:ab:de:27:7d:8a:be:79:82:9f:fe:bc:26:e7:
                    5b:8c:0e:e6:dd:4a:e9:55:4a:16:13:fb:98:a7:ef:
                    97:18:9d:1a:30:c5:38:c5:29:90:f8:d0:45:89:e4:
                    28:ad:b5:9c:64:b2:a4:53:cb:86:9f:ae:d8:24:e7:
                    7f:3d:7c:db:6d:af:5e:77:1c:74:01:3a:2a:85:a8:
                    a8:1f:87:3d:ae:34:42:6a:fc:c6:97:2c:97:72:da:
                    06:e2:c1:69:97:2f:33:88:f7:5a:80:9c:50:f1:9c:
                    90:53:86:0e:af:09:92:bc:e7:8d:3a:aa:6c:73:ca:
                    31:1e:27:5f:11:10:15:bb:f7:49:58:e5:f5:9c:c7:
                    4d:67:20:ae:72:ca:16:5b:a6:d7:1f:71:9d:b8:52:
                    b8:08:22:4f:53:af:15:e2:ba:14:70:35:9e:1d:f2:
                    fb:69:9a:8f:3c:f8:49:f3:78:52:c2:62:07:0d:70:
                    ad:aa:f5:fc:1f:2e:f5:8c:40:17:d9:a3:13:c0:10:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:15:E5:38:EE:F5:99:6C:C0:25:D2:BE:E1:63:64:37:27:C0:8D
            X509v3 Authority Key Identifier:
                keyid:4B:F3:40:63:F1:CE:BD:DB:BF:BE:85:50:44:AC:88:60:93:89:05:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_NAY_HOvdu_voVQRKyIYJOJBWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2f29ec-0feb-43ce-ac73-ce22ed3d8e2e/1/S_NAY_HOvdu_voVQRKyIYJOJBWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2f29ec-0feb-43ce-ac73-ce22ed3d8e2e/1/S_NAY_HOvdu_voVQRKyIYJOJBWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:f4:a9:41:77:bd:08:24:28:3d:44:f3:0f:d6:e5:2e:fd:
         90:33:db:3b:26:39:76:c6:46:d0:3b:4d:db:ec:39:9e:58:f0:
         06:b9:69:a4:2d:a1:e5:2a:b2:92:58:26:29:07:7b:bf:df:e1:
         ed:ce:8a:a0:66:85:41:eb:30:01:8a:64:91:01:18:05:48:df:
         1d:42:f1:51:bd:1c:2c:7e:0c:89:6d:c0:ec:f5:33:18:c4:d2:
         88:cb:b1:50:94:da:41:52:ef:fe:0b:08:36:18:cb:a9:e5:b0:
         11:08:b8:54:8f:8e:20:35:93:f0:53:9d:45:47:bf:fc:2b:30:
         81:29:4e:58:7d:f7:b4:90:2f:9a:11:9e:16:c2:c6:49:28:d6:
         4e:5f:e4:ab:a5:9b:a4:d6:30:11:9d:89:ca:5a:18:60:88:27:
         f2:71:04:33:0d:ff:f5:68:60:9f:ee:98:91:65:00:9b:b5:62:
         c4:45:a4:78:0f:ab:3e:e9:ad:e6:22:07:48:ed:95:66:93:c6:
         40:ff:ce:ca:d9:1d:be:42:f5:7a:ac:8e:3b:38:ae:91:b4:b3:
         96:68:2a:97:21:b8:d6:2b:be:a9:2d:9c:8f:20:49:21:a4:03:
         b1:6f:1f:f8:07:77:97:d0:81:9f:05:79:68:40:38:c6:66:5a:
         c9:04:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----