Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.mft
File:                     hwD5tetGXUY5bmDKCv1LAib1Ycc.mft (raw, json)
Hash identifier:          /x8ebYpbPLIRxFYnqQwdqe7REjqtsBs2zbUUh9o1RO0=
Subject key identifier:   BE:A0:3D:19:32:90:85:74:4E:6B:1D:93:64:E5:F0:94:C8:57:7E:83
Authority key identifier: 87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7
Certificate issuer:       /CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
Certificate serial:       0190C7DEFEBD66B69F98FA4CD6B422949281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.mft
Manifest number:          0EB1
Signing time:             Thu 18 Jul 2024 22:03:18 +0000
Manifest this update:     Thu 18 Jul 2024 22:03:18 +0000
Manifest next update:     Fri 19 Jul 2024 22:03:18 +0000
Files and hashes:         1: hwD5tetGXUY5bmDKCv1LAib1Ycc.crl (hash: 9SNH26lkRNyqasNqAbIsJ5/qEFYYFE1+mm4Fuxac/fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:de:fe:bd:66:b6:9f:98:fa:4c:d6:b4:22:94:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
        Validity
            Not Before: Jul 18 22:03:18 2024 GMT
            Not After : Jul 19 22:03:18 2024 GMT
        Subject: CN=bea03d19329085744e6b1d9364e5f094c8577e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:de:e6:55:be:cc:1b:d3:5f:48:72:7b:fb:
                    37:18:0e:a6:77:3a:4f:4d:68:3e:c2:6d:94:a1:34:
                    cc:b8:77:4d:64:52:c2:2e:1a:61:51:f2:42:a7:95:
                    85:9a:47:e6:7f:8a:45:3b:f6:b2:43:93:f0:e8:4a:
                    d3:ac:69:15:00:1d:b2:cb:0e:97:77:49:28:55:c2:
                    40:ec:8f:98:59:a4:13:ab:1b:01:a4:85:ad:93:17:
                    d8:f0:57:36:46:72:3e:09:84:5d:f0:44:07:01:54:
                    41:0a:c4:f2:51:3e:a6:02:3c:67:69:92:2d:04:8d:
                    a4:ec:f3:8e:65:9b:a4:9f:c9:9c:ca:37:41:19:db:
                    b2:07:25:c8:54:c5:6f:ad:7f:b6:63:df:52:d2:55:
                    c3:ff:ed:b1:1d:4c:3d:81:89:97:a9:33:4c:9d:9b:
                    da:dd:35:00:b9:85:e6:98:31:10:9a:5b:db:48:5b:
                    20:50:13:58:07:6a:a8:5f:79:23:af:90:6e:01:01:
                    3c:52:7e:28:f9:16:a2:2b:be:3e:f9:49:b1:11:9b:
                    7f:67:da:4a:c6:f1:cb:46:dd:af:9d:fa:4e:08:bb:
                    0c:82:86:b4:c3:6a:9d:27:92:ec:a9:7f:e7:b3:9d:
                    73:0b:db:c3:ba:dd:68:cf:8b:36:2f:68:49:8c:fe:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:3D:19:32:90:85:74:4E:6B:1D:93:64:E5:F0:94:C8:57:7E:83
            X509v3 Authority Key Identifier:
                keyid:87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:65:55:5f:ae:2e:95:08:5b:b2:b4:5b:ce:c8:ed:78:df:5b:
         a2:1a:d2:c5:8a:94:cd:10:73:e3:2b:c9:53:45:c2:55:1a:e9:
         8d:bc:01:07:1f:bd:55:ab:e8:00:c7:ca:26:43:02:b6:c5:4d:
         3a:86:d0:7f:cd:ae:29:0e:f7:d5:63:ff:d1:f3:88:02:16:af:
         a6:4b:6f:4f:08:80:ca:1e:e2:7a:64:1f:b1:80:b1:0c:83:f7:
         ce:5b:bd:66:8a:0e:43:cb:b6:2c:0b:a7:c6:9e:a5:34:3d:a4:
         e8:b5:a0:99:17:b1:66:cc:8d:6c:f1:a7:64:c7:e8:65:ff:8d:
         f6:54:ab:80:ff:4f:4f:9d:4d:dc:c9:cd:82:7a:40:7a:c2:09:
         12:7e:2b:28:94:fd:41:8f:b9:b2:2c:4f:8d:e3:9f:d2:4a:aa:
         ef:23:1f:4b:13:dc:75:22:4a:d4:16:a3:41:e4:94:8e:53:23:
         4b:2d:ca:c9:d4:52:40:a2:f1:fe:8a:49:7f:11:ba:39:6a:db:
         af:38:90:44:bc:e7:e5:29:56:c5:1b:b4:97:60:ed:58:90:05:
         1b:2c:dd:58:1c:db:ea:cb:19:b4:da:c5:db:ee:9e:39:3b:fa:
         eb:3d:3d:6c:b2:cd:4f:ce:11:68:f7:46:33:2f:2a:99:dc:22:
         bb:16:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----