Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft
File:                     1-_Q_6f068rz0unqD8RHmVZEl8_0.mft (raw, json)
Hash identifier:          I3aQPJgpuU+xIrN1b8rBKCoVn2+QynH6LnIfJ3hYUYU=
Subject key identifier:   21:EE:73:B2:A9:05:B7:95:F1:D3:89:80:0A:1E:67:C0:B5:F5:7C:99
Authority key identifier: FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
Certificate issuer:       /CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Certificate serial:       0192305A4201297998304E8452DFE8EFF4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft
Manifest number:          0A1B
Signing time:             Thu 26 Sep 2024 22:01:14 +0000
Manifest this update:     Thu 26 Sep 2024 22:01:14 +0000
Manifest next update:     Fri 27 Sep 2024 22:01:14 +0000
Files and hashes:         1: 1-_Q_6f068rz0unqD8RHmVZEl8_0.crl (hash: 6WHXo80gqQwt1jRYwH02Vnyq5zud6ucRHl4bvtdLE1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:5a:42:01:29:79:98:30:4e:84:52:df:e8:ef:f4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
        Validity
            Not Before: Sep 26 22:01:14 2024 GMT
            Not After : Sep 27 22:01:14 2024 GMT
        Subject: CN=21ee73b2a905b795f1d389800a1e67c0b5f57c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:86:30:be:6e:18:a1:a7:b5:cf:a4:12:d9:
                    f8:89:65:10:74:98:71:1e:f2:77:0c:41:61:e0:db:
                    35:bf:b2:4d:67:0d:40:4b:7b:71:53:2c:7a:12:a3:
                    26:71:d4:b1:c0:81:2c:c2:e0:eb:00:fc:c5:cf:a7:
                    25:96:b0:bd:70:09:b0:cb:cb:16:43:d2:d8:48:58:
                    67:16:02:3d:9c:47:05:a4:f5:5a:bf:71:82:00:a9:
                    78:f9:7d:d4:de:26:24:65:0f:aa:cb:4e:99:49:e9:
                    f5:63:8a:08:8d:4b:8f:ea:ff:e4:95:c1:4c:fb:9d:
                    cf:55:ca:f2:57:41:ff:b8:83:1f:44:1c:85:c4:b9:
                    cd:02:d0:a0:66:4c:b5:62:54:3f:28:d9:95:92:3d:
                    23:ad:ea:f1:d7:93:c1:88:18:ee:dd:6c:d6:1c:6e:
                    8a:1b:1e:f0:67:c4:b5:02:21:39:e2:24:1e:f9:9b:
                    67:11:ff:cf:89:ad:14:4e:6f:63:37:cc:34:36:2f:
                    91:ee:f1:99:39:af:e4:31:2f:6a:a4:b3:e3:1a:49:
                    72:8f:ab:7c:cc:8c:f4:e8:a1:8a:8c:06:54:7c:fe:
                    32:c8:1d:fc:cb:0d:bc:b4:8d:a2:66:dd:8e:a5:3b:
                    bb:11:6d:ff:a2:52:61:1e:c4:b0:c7:06:27:2c:ac:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:73:B2:A9:05:B7:95:F1:D3:89:80:0A:1E:67:C0:B5:F5:7C:99
            X509v3 Authority Key Identifier:
                keyid:FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:cd:cf:07:48:81:91:39:48:d7:05:e2:22:5d:d5:79:39:
         e5:75:27:46:81:72:f2:6f:b8:80:fe:85:d2:d0:5e:7e:85:c4:
         91:dd:b2:df:fa:6a:c1:76:72:2f:55:61:f8:ef:bb:30:86:03:
         04:07:32:df:e1:18:33:d5:b5:dd:41:05:68:05:ff:77:13:06:
         04:e2:fd:16:cd:14:0f:6f:25:2d:f5:53:5e:6c:fd:c5:e9:19:
         ef:a5:43:bb:dd:ca:ef:f4:38:3b:58:27:6d:4a:80:1e:20:a2:
         21:ba:98:3f:10:b4:db:d9:59:ab:c7:c7:41:94:05:80:d5:ef:
         af:af:28:4b:70:24:48:c7:04:4c:65:4b:73:41:70:d7:a7:15:
         88:c6:fe:6b:59:12:d4:2b:e2:fc:ec:1c:6a:da:4a:66:89:0d:
         a3:a7:81:34:dc:a9:4b:e2:b2:89:26:cd:9f:1d:0a:bc:10:32:
         16:7d:89:24:60:c2:ad:e8:bf:21:c5:1f:0c:2c:23:46:9f:4e:
         58:1c:3c:67:fb:6a:92:c3:a3:cc:30:43:de:ea:81:5a:cc:f9:
         6b:b0:40:ac:30:37:2f:3c:77:01:c7:52:66:50:5e:fb:8c:c1:
         67:2b:b8:2b:9c:40:d6:73:00:70:8b:38:e9:22:5a:e6:97:9e:
         00:f7:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----