Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
File:                     DoWbfPDZfGOgD95kMinpkE6W-FE.mft (raw, json)
Hash identifier:          zdOXENI6NKRFXqe1Pta3zvZxB9Jr70x4QEU3A7WOoHk=
Subject key identifier:   EA:B0:B3:6F:CB:07:5E:31:C0:A0:1B:48:46:58:D6:E1:8D:F7:8B:02
Authority key identifier: 0E:85:9B:7C:F0:D9:7C:63:A0:0F:DE:64:32:29:E9:90:4E:96:F8:51
Certificate issuer:       /CN=0e859b7cf0d97c63a00fde643229e9904e96f851
Certificate serial:       0193FA0B18E0C1C11E8037443B738ADA00F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoWbfPDZfGOgD95kMinpkE6W-FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
Manifest number:          0848
Signing time:             Tue 24 Dec 2024 19:00:51 +0000
Manifest this update:     Tue 24 Dec 2024 19:00:51 +0000
Manifest next update:     Wed 25 Dec 2024 19:00:51 +0000
Files and hashes:         1: DoWbfPDZfGOgD95kMinpkE6W-FE.crl (hash: SJMhfDNW3vKKNmS5djqJ/CGGteJiISfWfxyZYPjaygk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:0b:18:e0:c1:c1:1e:80:37:44:3b:73:8a:da:00:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e859b7cf0d97c63a00fde643229e9904e96f851
        Validity
            Not Before: Dec 24 19:00:51 2024 GMT
            Not After : Dec 25 19:00:51 2024 GMT
        Subject: CN=eab0b36fcb075e31c0a01b484658d6e18df78b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:0c:ab:d0:21:fe:f9:26:70:a5:18:26:91:
                    bc:92:68:5b:c4:3c:c1:64:3b:a1:16:bb:78:c3:e6:
                    a1:56:e3:30:0d:23:84:94:5d:1a:a8:1a:ed:b2:dd:
                    fa:e6:2c:13:f1:84:b8:28:93:1d:e5:f0:77:9d:e7:
                    61:ca:c1:b6:a9:8a:8d:a5:ad:2c:31:33:95:67:37:
                    ab:27:1a:b9:8a:7c:7b:a8:88:5a:29:17:c3:c3:e2:
                    42:22:97:64:58:75:86:0d:92:48:85:4e:23:e8:bf:
                    00:b4:14:01:a2:70:a9:79:6c:98:2c:ed:83:3c:da:
                    eb:5f:7e:08:c2:4f:53:42:43:0c:d1:11:94:91:80:
                    dc:ba:22:d5:6e:04:13:1a:a1:73:11:a7:d1:9f:25:
                    68:8e:20:05:59:43:9e:a9:55:8d:13:60:ba:d4:3e:
                    6f:7a:88:35:3d:ff:d2:04:ea:65:52:f9:c8:bc:6a:
                    e1:35:b9:1b:3a:36:78:4e:79:d8:9f:87:1e:f2:07:
                    35:99:1a:eb:e3:1f:1f:38:7e:e2:c2:5c:e2:b9:d7:
                    c8:04:be:43:8b:27:bd:c7:bf:05:8e:f2:6c:3d:f9:
                    58:62:c4:c7:9f:17:b9:ad:63:9a:23:ce:8a:66:70:
                    b1:8c:e1:34:98:34:8d:a2:71:b8:83:1c:3e:ab:56:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B0:B3:6F:CB:07:5E:31:C0:A0:1B:48:46:58:D6:E1:8D:F7:8B:02
            X509v3 Authority Key Identifier:
                keyid:0E:85:9B:7C:F0:D9:7C:63:A0:0F:DE:64:32:29:E9:90:4E:96:F8:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoWbfPDZfGOgD95kMinpkE6W-FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:f9:5f:27:0c:04:e2:51:58:d9:91:73:78:3e:fb:d5:4b:
         29:c2:8a:43:8d:4a:b7:8a:1e:8f:e7:f6:b1:bd:79:45:4a:4e:
         c7:6e:bd:42:f7:c7:5d:56:a9:bd:3a:68:4c:8a:71:a2:56:67:
         64:d9:8b:ae:90:4b:14:fd:db:94:16:c7:e3:91:aa:d1:c4:8b:
         62:27:17:78:3f:e5:2a:9d:e5:b6:bc:b5:f7:36:66:71:a7:7c:
         06:f0:89:63:4c:eb:6f:e9:07:37:04:f7:0d:f5:60:f9:08:d5:
         c6:b8:d7:37:59:44:31:80:37:81:7d:5a:3d:d4:54:33:2b:41:
         15:b7:58:b8:bd:a1:be:e5:7c:92:91:1a:88:db:69:b7:a4:e1:
         23:2c:f2:f3:c8:be:f8:11:b8:34:92:c1:12:0f:58:19:32:fb:
         92:af:b6:13:7c:04:7a:37:02:24:bc:b5:e9:4c:ba:22:b2:c1:
         12:36:82:cc:fa:cf:22:46:ae:6d:df:3e:50:87:17:f5:a2:44:
         78:de:c7:b8:5b:38:b5:18:36:25:6d:25:9f:f6:70:28:b8:86:
         c5:d5:32:f8:2a:75:46:5f:ab:b0:44:67:f5:32:fd:d3:2e:b6:
         81:c1:9b:27:79:17:30:36:5e:6c:74:bc:24:21:34:0f:c7:6e:
         8a:1f:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----