Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
File:                     hMOh9T3IFfgQHLJuu1T15w1AFrI.mft (raw, json)
Hash identifier:          XjUnrYoHNvVNGuNkUx87017FeH+374dTNhLdDbzaqZE=
Subject key identifier:   21:8B:52:D4:4E:E0:63:DB:F7:4F:A7:5C:A2:9D:61:D1:2D:1B:AB:BC
Authority key identifier: 84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2
Certificate issuer:       /CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
Certificate serial:       0192AEF36DB91188651B3F27801316CD3A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
Manifest number:          131C
Signing time:             Mon 21 Oct 2024 12:00:41 +0000
Manifest this update:     Mon 21 Oct 2024 12:00:41 +0000
Manifest next update:     Tue 22 Oct 2024 12:00:41 +0000
Files and hashes:         1: hMOh9T3IFfgQHLJuu1T15w1AFrI.crl (hash: 6CrMytUabD/JaQmIPfLzbvPZ89y6S5av6jBujRHxFLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:f3:6d:b9:11:88:65:1b:3f:27:80:13:16:cd:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
        Validity
            Not Before: Oct 21 12:00:41 2024 GMT
            Not After : Oct 22 12:00:41 2024 GMT
        Subject: CN=218b52d44ee063dbf74fa75ca29d61d12d1babbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:dd:c4:72:03:d8:6b:65:d2:b7:11:de:f2:
                    76:b5:4c:f2:e6:f5:d7:72:43:f8:98:1b:2c:36:c3:
                    3b:a9:4b:0f:0c:e3:47:56:a6:ca:05:d6:00:d4:b7:
                    6a:15:0d:93:c0:08:43:a5:c5:ed:25:69:3f:f7:97:
                    e2:36:e0:90:98:50:c9:d3:9e:de:66:c6:e8:84:a8:
                    12:58:fa:dc:6d:62:b3:52:4d:04:8f:17:8f:e8:f3:
                    28:01:4a:4c:2c:1e:e0:69:f3:fc:8e:ae:78:96:9a:
                    1d:ee:80:e6:fe:b2:26:b4:e1:da:de:17:1d:93:5c:
                    91:be:07:3f:d3:60:e2:8f:57:79:e0:15:a1:fe:ba:
                    2f:c2:5e:be:ab:91:d2:8e:39:d8:4b:6a:98:a0:60:
                    00:7f:19:d5:e3:41:63:a5:44:cd:52:9d:ce:57:f6:
                    97:07:3c:cb:0d:ec:7d:09:02:13:16:79:87:f6:65:
                    69:03:92:4d:7f:35:ea:7c:73:c6:bc:a5:3f:dc:d0:
                    c6:2a:f6:e6:5b:11:21:0b:1c:62:e0:5f:d7:df:00:
                    cd:2e:28:24:db:4a:d0:1c:ed:3a:fd:82:d8:9e:7f:
                    ce:51:28:da:39:04:7a:fd:e4:88:b9:1b:0c:3f:f2:
                    ce:e7:75:cc:f9:74:3f:bb:d9:d0:45:af:07:8b:e7:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:52:D4:4E:E0:63:DB:F7:4F:A7:5C:A2:9D:61:D1:2D:1B:AB:BC
            X509v3 Authority Key Identifier:
                keyid:84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c1:c1:58:5f:cd:ce:6a:80:04:f8:40:75:4a:d6:f4:96:57:
         fa:ee:e9:8d:dc:d6:a5:5a:a6:18:ad:8a:23:fd:52:f9:4b:fb:
         0a:45:93:95:bf:9f:1d:06:b7:1f:ce:3c:d3:26:8c:72:20:40:
         e1:b8:6d:94:8a:1a:21:91:53:3a:75:d0:14:9d:52:8d:a3:c8:
         9b:a6:8a:b3:b7:fa:d8:ba:5a:6f:1d:29:37:9a:74:b8:7d:29:
         09:43:45:01:c1:a9:26:e0:ae:86:28:79:38:94:2c:4e:b6:99:
         16:e8:15:74:c5:b4:ca:f8:b5:17:36:66:74:04:63:ee:a8:f3:
         8a:79:a1:17:11:8b:a9:44:0b:ed:21:bb:f5:47:68:2e:d7:ab:
         75:3b:df:b4:e1:77:e8:dc:15:09:8a:d8:47:c8:ca:c3:a6:38:
         70:6a:28:c8:56:7a:14:f3:41:0c:0c:a8:dd:d8:cc:94:4e:9a:
         ab:b2:93:28:6c:f9:51:4c:ea:e8:a3:74:79:de:1d:50:af:a2:
         6c:f2:2f:e0:99:1f:ca:43:d5:42:ca:e7:ab:90:de:91:d8:a6:
         03:03:87:de:34:5b:7b:cf:0a:1a:87:d3:61:bf:3b:5b:c4:31:
         e4:db:d8:f0:53:62:7f:62:dd:c1:27:e3:74:5f:54:55:f6:81:
         47:3f:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----