Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft
File:                     VdqMFndw2OMbHInlF22B1YXpL0M.mft (raw, json)
Hash identifier:          F8F23fl5W8JsvLmS0t4DejdMl+Hv9OAA+fElO8yhKtg=
Subject key identifier:   50:A2:9E:66:7A:0F:15:87:E6:88:28:57:07:AB:26:AC:B1:C3:D2:49
Authority key identifier: 55:DA:8C:16:77:70:D8:E3:1B:1C:89:E5:17:6D:81:D5:85:E9:2F:43
Certificate issuer:       /CN=55da8c167770d8e31b1c89e5176d81d585e92f43
Certificate serial:       018F9CF4D39A2120CB2349042B0E45396C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdqMFndw2OMbHInlF22B1YXpL0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft
Manifest number:          03E8
Signing time:             Tue 21 May 2024 21:00:41 +0000
Manifest this update:     Tue 21 May 2024 21:00:41 +0000
Manifest next update:     Wed 22 May 2024 21:00:41 +0000
Files and hashes:         1: VdqMFndw2OMbHInlF22B1YXpL0M.crl (hash: PNnZEqzxxvao7cSyvb3DikTWn71U0DEfxQfhxSXmVXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:f4:d3:9a:21:20:cb:23:49:04:2b:0e:45:39:6c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55da8c167770d8e31b1c89e5176d81d585e92f43
        Validity
            Not Before: May 21 21:00:41 2024 GMT
            Not After : May 22 21:00:41 2024 GMT
        Subject: CN=50a29e667a0f1587e688285707ab26acb1c3d249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:d2:11:96:c5:ba:65:e1:ba:8e:7b:af:5a:
                    18:e9:8e:09:a6:f9:67:d3:2b:cb:65:49:9e:68:dc:
                    11:26:64:d2:d3:3e:46:7b:ce:2a:a8:ca:74:6a:2b:
                    19:c4:75:c0:31:d0:36:7e:52:59:27:ba:56:e3:5d:
                    13:79:b3:a7:15:da:42:44:8a:c2:fa:cd:44:cb:82:
                    87:51:9e:22:41:63:d5:ca:1f:da:27:31:32:21:1b:
                    33:80:2c:8a:57:31:a5:48:4c:12:cf:c4:12:ec:46:
                    53:9a:c3:2c:d2:63:fc:97:7e:bd:5c:17:41:9a:73:
                    af:7e:aa:89:9d:9d:a6:f8:91:a3:1a:d8:9f:42:94:
                    79:99:77:57:27:d5:75:0f:0e:be:7e:e4:7c:7c:6f:
                    5a:45:af:fa:eb:3a:bb:24:1f:e5:31:3a:f0:1f:c6:
                    1c:9a:f2:fb:ba:4a:49:18:7a:96:6c:f1:6d:f8:4c:
                    49:9c:05:91:15:b6:64:8e:03:5c:a6:b3:45:67:ab:
                    47:16:dc:9a:21:87:c5:98:02:86:2f:0f:8a:a8:cc:
                    f3:7a:08:f4:00:6e:2d:e0:a9:2b:22:c8:86:4d:ec:
                    60:74:ea:fd:59:a3:ab:dc:f0:af:03:f9:f3:93:8e:
                    d1:fc:23:bd:af:81:8d:c9:46:ce:a5:3b:bf:3d:13:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:9E:66:7A:0F:15:87:E6:88:28:57:07:AB:26:AC:B1:C3:D2:49
            X509v3 Authority Key Identifier:
                keyid:55:DA:8C:16:77:70:D8:E3:1B:1C:89:E5:17:6D:81:D5:85:E9:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdqMFndw2OMbHInlF22B1YXpL0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:fb:b2:48:86:6e:c1:9f:4f:7b:75:df:1c:0c:3c:0b:02:
         d5:72:d4:22:e8:96:34:9f:22:04:d6:31:6b:54:d0:63:39:d3:
         a2:2b:cf:1c:77:4e:5a:98:c6:ce:50:e3:e8:5c:8a:8a:4d:18:
         73:b2:b2:51:93:82:98:21:b5:ca:af:e5:e9:57:de:7c:3d:64:
         5c:05:5d:d6:57:37:8e:25:a9:6a:ad:81:bb:9f:ce:00:f2:20:
         c4:a0:95:68:9f:27:88:d2:94:2c:76:c2:a0:43:da:ba:93:fc:
         78:20:de:53:22:78:81:07:ad:4c:a7:1f:7b:d1:d8:ed:43:8f:
         cc:f5:c6:8d:ce:89:01:c6:c1:99:eb:4c:d8:2d:99:73:f8:d5:
         8c:a1:06:52:bb:d5:bc:a4:92:a9:65:60:c2:78:67:98:61:61:
         16:81:fe:5b:8a:a4:30:27:b3:80:d3:be:42:9e:ef:46:04:f3:
         b2:30:d1:c1:a4:32:5f:44:71:be:92:ff:ad:c1:58:f3:9a:c2:
         48:30:c0:c6:31:51:26:c4:cc:4d:5d:4e:d5:0b:b1:b6:e6:fc:
         8c:c4:ea:55:51:a7:73:ea:81:c2:4d:82:22:cf:c6:4f:bd:a8:
         5b:46:3a:2d:37:f0:c5:8b:bf:ad:c2:68:bc:0f:4a:63:fc:fb:
         0c:3a:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----