Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft
File:                     mhe_INhUCF1m-tFNux6PJq5jGEo.mft (raw, json)
Hash identifier:          b6N0MxsjljOlEMcp93p44VlN4uooGsOBqh+sXeg24/Q=
Subject key identifier:   73:1B:E1:88:DA:F0:91:75:F2:60:79:8A:39:E2:7E:C0:43:14:8E:4A
Authority key identifier: 9A:17:BF:20:D8:54:08:5D:66:FA:D1:4D:BB:1E:8F:26:AE:63:18:4A
Certificate issuer:       /CN=9a17bf20d854085d66fad14dbb1e8f26ae63184a
Certificate serial:       0190C7DD2FD68396F753F63C7E77CBD2116A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhe_INhUCF1m-tFNux6PJq5jGEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft
Manifest number:          1184
Signing time:             Thu 18 Jul 2024 22:01:19 +0000
Manifest this update:     Thu 18 Jul 2024 22:01:19 +0000
Manifest next update:     Fri 19 Jul 2024 22:01:19 +0000
Files and hashes:         1: mhe_INhUCF1m-tFNux6PJq5jGEo.crl (hash: zdoWroEDHKH39Mx2YRp3gLnBhjYHZ0m6lJFoQ1gs7PE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:dd:2f:d6:83:96:f7:53:f6:3c:7e:77:cb:d2:11:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a17bf20d854085d66fad14dbb1e8f26ae63184a
        Validity
            Not Before: Jul 18 22:01:19 2024 GMT
            Not After : Jul 19 22:01:19 2024 GMT
        Subject: CN=731be188daf09175f260798a39e27ec043148e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:44:b4:e5:4e:a7:0e:28:91:da:58:44:67:
                    5d:61:8a:48:96:0e:8d:6c:80:57:5a:13:8a:7f:ab:
                    fd:7f:56:69:d6:3f:60:38:c2:61:2c:82:20:59:71:
                    ba:cd:d2:b4:9f:c6:8f:62:9f:16:9b:4a:a6:d2:12:
                    0c:b0:48:b6:96:fe:ec:88:8c:4b:df:84:ee:95:b9:
                    2e:4a:44:53:a3:31:6d:95:51:8e:c1:76:a1:e4:03:
                    d8:05:b8:47:d2:13:85:cd:c7:58:53:85:2f:49:50:
                    a1:a5:a1:73:6c:a7:fa:61:22:58:b3:81:54:0e:2a:
                    d1:6b:41:31:67:4b:40:9d:04:c6:ad:e8:f1:64:61:
                    34:3c:15:e2:86:82:02:70:0d:0f:84:09:6f:60:eb:
                    0a:62:e8:f7:8f:5b:45:8a:78:8c:35:21:3f:9b:17:
                    16:d7:db:93:04:d5:03:d6:15:92:b8:ea:98:b7:e0:
                    b6:ad:7e:f9:f1:ef:20:db:70:f0:c9:fb:6f:08:97:
                    a7:34:81:9e:e3:30:11:6e:a6:87:0e:da:2c:12:10:
                    93:c8:5a:90:e3:0c:ce:a4:df:70:32:23:46:0c:f3:
                    5d:ef:c1:44:2c:2d:a7:d5:03:a2:50:46:1b:2e:5b:
                    ea:35:c7:0b:20:c5:62:c3:8e:c5:cc:bc:a1:d8:53:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:E1:88:DA:F0:91:75:F2:60:79:8A:39:E2:7E:C0:43:14:8E:4A
            X509v3 Authority Key Identifier:
                keyid:9A:17:BF:20:D8:54:08:5D:66:FA:D1:4D:BB:1E:8F:26:AE:63:18:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhe_INhUCF1m-tFNux6PJq5jGEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a4:01:bb:9e:4a:27:c3:4f:82:0e:f6:af:29:96:09:c0:c4:
         4e:ef:b6:f8:f4:c2:d3:fe:a6:63:35:78:de:6b:0c:3d:ff:d6:
         fc:06:d5:86:af:de:9f:a3:c6:9a:8f:fa:2d:19:6a:12:c3:28:
         38:f2:7a:ac:4f:55:c5:44:1b:f4:86:18:f2:ad:9a:a7:a7:e2:
         1e:8f:23:7e:63:a0:9d:86:dc:cd:6b:1f:48:ba:45:a9:d7:5a:
         d7:07:fd:d5:17:ca:0b:72:05:2d:cc:98:50:41:a7:43:b9:49:
         39:70:60:cb:1e:0f:4e:c9:f1:79:45:9f:de:01:e3:a0:68:4d:
         6f:57:62:7d:ee:45:fe:4f:92:2d:36:cb:fa:42:76:dd:aa:95:
         36:30:21:a4:2a:7f:13:fd:92:f5:ef:79:cd:e1:c6:c5:f3:37:
         01:dd:80:54:b7:01:8e:d6:38:f8:a6:c6:73:18:a8:c6:d3:24:
         f8:45:69:b4:76:89:4c:5e:22:9d:07:7c:cc:9d:8f:12:9a:71:
         c8:b1:df:f6:1d:79:e8:59:b4:82:49:82:c6:ee:d7:ed:c8:83:
         6f:1d:c4:13:b3:78:8c:5b:02:83:fd:ef:32:68:d8:0c:1d:eb:
         b4:46:ce:6f:d2:26:a7:b1:fe:f6:91:73:b3:71:ea:22:f9:2f:
         c0:61:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----