Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
File:                     Bd45LPnOlCom18dqJcoPXuLVy-M.mft (raw, json)
Hash identifier:          03QO+jwNe7prOIm2jV4J5394Oa4ZmxhUTJE66h8DIvk=
Subject key identifier:   F5:C1:34:A3:11:C7:A5:57:AD:A1:17:37:B4:9D:41:E7:01:12:3E:4F
Authority key identifier: 05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3
Certificate issuer:       /CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
Certificate serial:       019488BC11369586C3DED4CE853440096718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
Manifest number:          0391
Signing time:             Tue 21 Jan 2025 12:00:13 +0000
Manifest this update:     Tue 21 Jan 2025 12:00:13 +0000
Manifest next update:     Wed 22 Jan 2025 12:00:13 +0000
Files and hashes:         1: Bd45LPnOlCom18dqJcoPXuLVy-M.crl (hash: RttzyLMH2tE6DKAu3EvYDWH8Rcoqkxtf1Lc+5d7wUc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:88:bc:11:36:95:86:c3:de:d4:ce:85:34:40:09:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
        Validity
            Not Before: Jan 21 12:00:13 2025 GMT
            Not After : Jan 22 12:00:13 2025 GMT
        Subject: CN=f5c134a311c7a557ada11737b49d41e701123e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:3d:a9:5c:13:21:96:bc:88:24:c8:f5:59:
                    75:b9:49:22:e2:de:91:f3:64:c3:b6:65:f8:d5:8a:
                    af:d6:49:63:66:78:8c:6f:40:de:ec:a8:b1:e5:ab:
                    4c:75:ca:1c:2c:c8:8f:61:a1:4c:dc:22:dd:8e:c2:
                    b5:36:55:b2:c6:95:b9:4f:46:82:8f:e6:d2:c9:4c:
                    2c:16:5a:c8:ed:e6:69:eb:32:0b:d9:81:45:97:9a:
                    83:2b:59:da:42:11:3a:d2:38:e0:7d:72:99:4d:6f:
                    37:f2:cf:fe:c6:a6:3b:7c:4a:69:99:17:78:a0:6d:
                    64:a5:c6:73:fb:16:86:d0:cc:13:9f:cd:39:74:3c:
                    75:84:cb:db:a5:3d:f8:fa:92:b2:ed:4a:9b:36:7d:
                    f2:12:cc:1a:5e:06:10:02:08:6a:e5:b7:af:fe:e5:
                    d0:d3:b5:22:db:96:10:cf:a6:a9:c2:9a:8e:ef:55:
                    1a:6f:e0:89:d7:06:67:23:22:94:ed:40:fb:4c:37:
                    20:49:21:fe:3d:a9:87:66:e6:b2:2b:43:3b:12:6a:
                    87:47:32:7a:d9:a0:ef:64:0c:13:7e:9e:1e:ba:45:
                    bd:ea:45:4c:d7:cf:41:b8:b0:c7:43:e8:b3:96:eb:
                    9f:e8:56:14:61:51:df:c9:21:ee:f0:c0:37:1b:d5:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:34:A3:11:C7:A5:57:AD:A1:17:37:B4:9D:41:E7:01:12:3E:4F
            X509v3 Authority Key Identifier:
                keyid:05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:48:36:e1:ed:89:31:e6:a4:20:e2:a8:89:34:2b:b0:4c:
         0b:b3:c8:d8:f1:4f:8e:10:cb:9c:9e:37:35:c6:81:dc:83:5f:
         52:8a:65:6b:68:2c:d7:d6:bd:12:47:6b:3a:c0:97:01:2e:35:
         18:c7:43:d5:36:6c:21:7a:7a:16:99:25:be:c7:6c:9f:8b:15:
         c7:8c:7c:1c:ed:09:7e:22:1c:a9:52:b7:82:51:06:1d:39:4f:
         69:14:31:39:32:6a:3c:b0:ca:21:7e:93:d7:24:91:6d:e2:9b:
         55:ec:6b:47:41:21:16:d6:2a:bc:46:92:a1:e1:81:d9:08:9b:
         23:cb:71:56:ca:de:05:46:ca:7e:2e:59:4c:b3:13:6b:e0:15:
         c0:16:9c:c5:20:9c:b4:92:39:07:3e:8e:d8:8a:c5:66:a5:28:
         96:6e:78:e9:1f:72:9a:95:b5:18:8c:4f:72:7a:4d:d9:90:f6:
         db:7c:bf:20:39:63:42:c3:85:59:c7:eb:af:cf:b6:e8:96:84:
         2f:97:16:22:d1:41:55:c4:ac:f5:1a:08:3f:36:84:67:c3:02:
         ce:01:45:56:28:7f:15:c8:4b:47:85:4e:77:16:2b:fc:f8:b0:
         83:8f:e3:bf:aa:40:a8:45:cf:de:98:28:26:9c:f9:ff:fe:2a:
         d4:40:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----