Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.mft
File:                     00Jx0SPGDs16xSiMcuYOQbV5H58.mft (raw, json)
Hash identifier:          R4eQcN+LbOl/oKY92tDX/35XtETzdr+OxoN9uDecuyY=
Subject key identifier:   DD:EE:95:AE:AC:0E:18:5D:4D:CB:D6:12:0C:36:DD:19:E3:F7:2E:50
Authority key identifier: D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F
Certificate issuer:       /CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
Certificate serial:       0193463A101A0196D81B79E86BE47C6A0E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.mft
Manifest number:          136A
Signing time:             Tue 19 Nov 2024 21:00:30 +0000
Manifest this update:     Tue 19 Nov 2024 21:00:30 +0000
Manifest next update:     Wed 20 Nov 2024 21:00:30 +0000
Files and hashes:         1: 00Jx0SPGDs16xSiMcuYOQbV5H58.crl (hash: 44xARAYy7IfdqWeDSSV4przFj4zDGaz7D/l2fH3HteA=)
                          2: Of66jo_jgqwTE9z6mloyRbKBqQU.roa (hash: F7LoBDMpG6UP2PAqQcNxrA8nFnNMoJw1gQuusL0ZiDY=)
                          3: _J4DnC5fm3UqQ9z1KSUUtH0EMcs.roa (hash: ZV/xRLQYf9YtKvTysWyT36z3hOYMJJmuWH5tL6+IjnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:3a:10:1a:01:96:d8:1b:79:e8:6b:e4:7c:6a:0e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
        Validity
            Not Before: Nov 19 21:00:30 2024 GMT
            Not After : Nov 20 21:00:30 2024 GMT
        Subject: CN=ddee95aeac0e185d4dcbd6120c36dd19e3f72e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:ea:1d:f9:75:7a:96:59:23:52:f3:70:1a:
                    a3:8b:bb:e2:63:56:96:7c:84:81:38:a2:e8:fd:ea:
                    67:81:50:16:ed:48:77:74:31:82:58:7b:4a:3b:36:
                    95:80:71:ef:4b:59:82:dc:05:b6:8b:6b:28:2b:d6:
                    df:b9:62:9a:52:8b:d4:45:be:a9:73:38:cf:f2:d0:
                    b0:16:d7:f8:18:07:31:5f:45:33:10:99:73:fd:0a:
                    d0:d3:a8:77:fa:ef:65:32:f1:a4:68:f4:cb:71:df:
                    42:30:aa:5d:f9:70:90:85:7d:0b:f1:5f:eb:10:2c:
                    bc:c3:3c:23:f9:c4:e1:09:18:39:0d:99:6f:7a:36:
                    03:85:6d:f8:c6:16:56:db:9b:a1:9b:76:91:7d:56:
                    0e:1c:d6:78:9d:47:73:0f:27:2b:a0:1f:45:82:a5:
                    53:63:08:e8:e7:db:36:a0:b1:32:4f:37:a8:67:7c:
                    e3:5e:87:2b:f9:b2:17:9b:9f:35:11:6a:e0:34:98:
                    3a:ec:52:9b:73:c9:34:4f:0c:d6:ae:35:3d:7e:5b:
                    60:af:05:5a:b7:ce:64:e3:5b:a0:e0:d0:14:d0:84:
                    ba:92:d4:da:5b:63:4a:5e:5b:d7:0f:a3:e4:a3:c1:
                    e0:6a:fc:54:ce:7c:13:47:32:d9:a1:33:b4:ba:10:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:95:AE:AC:0E:18:5D:4D:CB:D6:12:0C:36:DD:19:E3:F7:2E:50
            X509v3 Authority Key Identifier:
                keyid:D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:88:4b:46:e2:d0:b0:ee:54:0e:05:65:46:59:36:d2:09:05:
         ae:b1:8f:96:96:aa:6b:7d:af:2c:31:91:f4:3e:8a:73:fa:61:
         8e:f0:47:4e:93:d3:6d:08:11:5d:f9:6a:db:ea:0c:62:b8:fe:
         80:df:57:2c:17:c9:17:db:39:01:4f:b2:43:1f:5e:55:83:88:
         37:ba:a2:3e:86:66:1f:56:7e:b3:e4:59:5d:85:5e:b7:b0:ab:
         5f:e7:bc:6e:dc:f7:19:78:ee:7a:21:31:45:ca:17:78:41:b2:
         53:35:c4:72:8b:2e:97:ef:94:ec:73:d0:ff:71:cc:4b:63:aa:
         bb:35:e0:02:a1:21:0f:a7:dd:0c:93:58:37:92:2b:ab:ec:b7:
         ed:db:f9:a1:4f:ac:20:cf:e3:6b:15:a1:0e:cc:77:4a:54:ec:
         2d:1e:6f:f2:ee:75:5e:07:d2:3a:76:14:74:93:0f:f1:f3:4f:
         26:23:1e:b1:86:64:0d:4f:70:76:d2:06:bf:a2:a9:e5:9f:aa:
         3f:32:d4:8f:31:3b:c0:cb:7a:10:d5:a1:c4:7b:06:b3:44:f1:
         14:df:e1:7f:6f:64:0d:f7:3a:27:58:2b:91:25:88:89:e5:25:
         d7:47:0c:21:87:e1:71:49:ab:ca:c8:a7:3e:9e:41:4d:ac:c5:
         50:94:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----