Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/51f262-601c-4052-8507-e32121a85106/1/1-SBylsj9_-FrXMTfjKWsYNdFiXM.mft
File:                     1-SBylsj9_-FrXMTfjKWsYNdFiXM.mft (raw, json)
Hash identifier:          2N4Zp2p9bQSp/uHAIba39KyQevGswqJQTcfuB5UkKC4=
Subject key identifier:   AD:94:1B:BE:1F:DE:B8:19:41:8F:B9:57:F9:DD:93:E3:C3:25:5B:72
Authority key identifier: F9:20:72:96:C8:FD:FF:E1:6B:5C:C4:DF:8C:A5:AC:60:D7:45:89:73
Certificate issuer:       /CN=f9207296c8fdffe16b5cc4df8ca5ac60d7458973
Certificate serial:       0191B379481E2B38219FA24249DFFFFE96CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SBylsj9_-FrXMTfjKWsYNdFiXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/51f262-601c-4052-8507-e32121a85106/1/1-SBylsj9_-FrXMTfjKWsYNdFiXM.mft
Manifest number:          0E57
Signing time:             Mon 02 Sep 2024 16:02:35 +0000
Manifest this update:     Mon 02 Sep 2024 16:02:35 +0000
Manifest next update:     Tue 03 Sep 2024 16:02:35 +0000
Files and hashes:         1: 1-SBylsj9_-FrXMTfjKWsYNdFiXM.crl (hash: VNPeuCiibDAm92/fXM1oYhTlP9VWRiHxFLyn66UQRmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:79:48:1e:2b:38:21:9f:a2:42:49:df:ff:fe:96:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9207296c8fdffe16b5cc4df8ca5ac60d7458973
        Validity
            Not Before: Sep  2 16:02:35 2024 GMT
            Not After : Sep  3 16:02:35 2024 GMT
        Subject: CN=ad941bbe1fdeb819418fb957f9dd93e3c3255b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:2d:f4:75:7d:a2:68:a7:14:ef:77:7f:b0:
                    21:5f:8b:06:c1:83:6c:b8:d6:2b:83:b2:6c:f1:e4:
                    7a:b0:c3:d8:93:17:2e:07:f7:5f:50:6b:a2:79:4f:
                    36:5d:92:ec:5b:cd:f9:db:4a:07:15:d9:3e:3f:dc:
                    3e:d2:5c:c7:23:37:74:fb:a3:b6:4f:22:32:53:07:
                    62:48:5d:d4:56:fa:99:98:49:4a:a5:13:0d:65:c0:
                    02:35:2c:ec:d3:ef:3a:a1:6e:17:3a:24:2e:68:84:
                    f7:c7:ac:0e:10:3b:eb:0f:80:dc:7f:94:4e:1d:62:
                    d4:b2:e0:ce:94:35:55:0e:d4:b5:ec:cc:ed:3b:84:
                    c8:63:3e:94:e1:c6:4b:d9:29:9b:d4:e5:2d:2b:ee:
                    01:20:0b:a9:4b:ef:2e:3a:6f:29:4d:91:6e:9b:89:
                    15:18:3b:62:9e:3d:af:75:d4:8a:9b:93:b7:70:f1:
                    c5:31:8e:d4:87:48:13:ae:cf:ab:74:a7:99:f4:70:
                    1e:38:7d:12:1f:b6:72:c4:08:41:12:17:fa:f9:54:
                    38:35:0f:2c:10:9b:fc:b0:09:25:97:73:a0:30:4d:
                    b6:21:c1:d0:04:ec:0f:73:69:f2:50:8b:85:3f:55:
                    c1:8b:96:9b:6e:87:84:82:a3:dd:c1:56:ab:55:e5:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:1B:BE:1F:DE:B8:19:41:8F:B9:57:F9:DD:93:E3:C3:25:5B:72
            X509v3 Authority Key Identifier:
                keyid:F9:20:72:96:C8:FD:FF:E1:6B:5C:C4:DF:8C:A5:AC:60:D7:45:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SBylsj9_-FrXMTfjKWsYNdFiXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/51f262-601c-4052-8507-e32121a85106/1/1-SBylsj9_-FrXMTfjKWsYNdFiXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/51f262-601c-4052-8507-e32121a85106/1/1-SBylsj9_-FrXMTfjKWsYNdFiXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c5:c3:ed:df:7d:34:d0:1f:35:9e:24:59:57:7b:5e:81:3d:
         5c:d2:51:f3:1e:df:a2:4e:a0:4b:66:fd:27:96:66:eb:33:e6:
         35:89:13:23:39:d5:7e:00:40:41:ae:6e:7e:b9:cf:fa:5e:77:
         f1:4d:63:e3:24:28:f7:5f:17:38:e9:fa:d2:2d:e3:a0:fc:5b:
         84:fc:98:b0:35:4b:2a:96:e0:e1:49:9d:2c:d5:fb:28:e0:18:
         0a:55:28:29:16:54:80:2c:9a:d2:71:2d:99:ee:ac:eb:55:dd:
         fb:05:8f:a8:ab:5e:a8:37:3f:86:35:07:09:f0:2a:9c:77:76:
         d8:0c:91:d8:ba:5f:0d:db:fa:40:d3:d5:ad:8d:83:4b:d9:76:
         c8:73:44:99:42:45:3b:c3:56:a0:5c:20:f3:1e:08:e2:53:81:
         3f:e7:89:d0:fe:2e:a1:59:6f:63:18:09:fa:93:7b:a7:04:00:
         70:ed:58:04:1b:ec:d1:d1:8e:91:de:e0:57:aa:22:77:ab:d9:
         2a:e6:a7:1f:38:06:4b:23:6e:70:d8:f0:7d:eb:2e:3b:71:88:
         00:4e:d2:a0:d3:5e:e0:19:f9:45:7f:9e:51:21:fe:d3:c3:65:
         00:04:29:0b:6e:86:a7:f4:db:42:36:8c:6e:19:92:02:a6:b5:
         33:a7:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----