Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft
File:                     t7DfHvtcktGk1LKnehK_sbROrRw.mft (raw, json)
Hash identifier:          PR9HstEmvXQVyKTu2xpImnzXyRXvGSOwF2TgcYAHUNI=
Subject key identifier:   A6:38:54:8F:93:E5:80:FE:18:EF:4A:2E:03:B6:C9:72:50:22:1B:8E
Authority key identifier: B7:B0:DF:1E:FB:5C:92:D1:A4:D4:B2:A7:7A:12:BF:B1:B4:4E:AD:1C
Certificate issuer:       /CN=b7b0df1efb5c92d1a4d4b2a77a12bfb1b44ead1c
Certificate serial:       01922F1110B3EE2D145093A8B1E65A933E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7DfHvtcktGk1LKnehK_sbROrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft
Manifest number:          1225
Signing time:             Thu 26 Sep 2024 16:01:40 +0000
Manifest this update:     Thu 26 Sep 2024 16:01:40 +0000
Manifest next update:     Fri 27 Sep 2024 16:01:40 +0000
Files and hashes:         1: t7DfHvtcktGk1LKnehK_sbROrRw.crl (hash: RZzNwJxSVBslzLlL/6YIEGgQugP+d0tCwflhgxSJtOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:10:b3:ee:2d:14:50:93:a8:b1:e6:5a:93:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b0df1efb5c92d1a4d4b2a77a12bfb1b44ead1c
        Validity
            Not Before: Sep 26 16:01:40 2024 GMT
            Not After : Sep 27 16:01:40 2024 GMT
        Subject: CN=a638548f93e580fe18ef4a2e03b6c97250221b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:38:a2:ad:7d:0d:35:93:13:e4:4b:3f:af:
                    e0:f0:94:15:06:d2:ea:1b:82:d9:f2:c9:1d:f8:cf:
                    d0:b0:4c:cf:f1:92:62:5d:fa:c9:58:c2:58:84:bf:
                    a7:7b:47:bb:5a:07:03:c8:db:6f:d8:0c:18:dc:5c:
                    18:8f:6c:a1:c8:ea:9d:33:6b:e4:1f:54:cb:c9:10:
                    82:4b:ff:c6:10:f1:c1:9a:b4:d2:2b:2c:28:c2:a2:
                    e9:da:d0:02:1c:ba:0d:f4:39:ab:6e:6b:fc:f3:ba:
                    6f:61:74:a0:8f:74:06:09:0c:4e:14:e7:4c:d3:72:
                    c1:b2:87:24:8f:db:65:98:5f:af:07:8d:88:77:72:
                    bf:2a:02:4a:c0:3c:9e:26:e8:59:5f:a2:a7:21:d9:
                    2a:b1:25:42:8b:f7:31:a1:14:26:45:43:54:72:87:
                    ea:71:a8:6b:c6:a9:34:82:4d:1b:0b:42:b1:ee:50:
                    f7:8b:21:cd:3d:35:b5:a8:81:32:b5:d6:fc:86:b1:
                    d1:85:f5:81:31:e9:8d:4e:09:01:90:bd:54:c6:8e:
                    31:31:2c:32:36:57:2d:92:f1:ca:30:8f:5c:ce:a0:
                    c0:6e:4d:06:84:fa:39:e0:b0:bb:df:31:40:55:2e:
                    1e:7e:e9:49:36:2f:e8:5e:da:3c:01:23:c7:05:a7:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:54:8F:93:E5:80:FE:18:EF:4A:2E:03:B6:C9:72:50:22:1B:8E
            X509v3 Authority Key Identifier:
                keyid:B7:B0:DF:1E:FB:5C:92:D1:A4:D4:B2:A7:7A:12:BF:B1:B4:4E:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7DfHvtcktGk1LKnehK_sbROrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:23:8a:3b:ff:7b:36:22:9a:18:0b:c1:06:40:63:6e:05:35:
         88:0d:af:9b:fb:cd:89:b0:87:32:e5:7a:97:c0:52:69:6a:97:
         1c:ee:3f:81:d9:9b:82:fc:63:4c:34:48:0e:6e:d2:ed:c0:88:
         c4:23:c0:31:8a:73:b8:e0:fc:68:e7:b1:02:12:bf:f5:a6:6b:
         96:00:cb:1c:74:27:a2:b6:26:90:1b:e8:f1:99:21:e5:4b:f9:
         81:ee:71:21:c7:88:9b:94:b0:cd:bf:69:d1:28:2f:bf:e9:cf:
         fc:db:f2:a7:35:fd:a0:73:4c:ed:f9:aa:97:61:15:da:c1:18:
         30:92:f6:b0:94:89:4f:bf:00:ef:fa:ba:a3:4a:ae:72:f9:0f:
         c2:21:84:7a:1a:bb:35:0a:7e:bc:68:1b:eb:f6:73:45:39:b5:
         a8:a7:cd:b1:fe:d3:81:46:23:c1:57:9e:f9:36:0c:34:ed:32:
         dd:8f:e7:61:17:1c:58:0e:ff:c2:80:6c:85:70:42:3a:90:20:
         2e:c9:7c:95:c7:d8:26:92:b2:31:8f:f2:4b:f1:50:cb:73:cd:
         ec:64:b2:0c:de:7c:86:a8:79:b1:bf:77:9e:1d:29:ed:7e:e4:
         2c:10:db:c6:57:29:dd:78:3c:3a:cf:c3:4f:55:50:ca:24:99:
         63:56:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----