Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de5aa3-5cf8-469f-a67e-8bc41a4dc84a/1/dNCDBf_Zg8NHENYyToUZQuRuBuQ.mft
File:                     dNCDBf_Zg8NHENYyToUZQuRuBuQ.mft (raw, json)
Hash identifier:          HoDsMpqNWEzmwAgZrAVqvd2dfRhx/BmZj7u+7O2qnwU=
Subject key identifier:   CE:F6:05:2B:A1:7C:DF:FE:ED:96:D0:75:29:45:14:11:09:D9:D3:F1
Authority key identifier: 74:D0:83:05:FF:D9:83:C3:47:10:D6:32:4E:85:19:42:E4:6E:06:E4
Certificate issuer:       /CN=74d08305ffd983c34710d6324e851942e46e06e4
Certificate serial:       01922F11FD0CA9947245FB74283837F16FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNCDBf_Zg8NHENYyToUZQuRuBuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/de5aa3-5cf8-469f-a67e-8bc41a4dc84a/1/dNCDBf_Zg8NHENYyToUZQuRuBuQ.mft
Manifest number:          04CC
Signing time:             Thu 26 Sep 2024 16:02:40 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:40 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:40 +0000
Files and hashes:         1: dNCDBf_Zg8NHENYyToUZQuRuBuQ.crl (hash: Nw5xnLIIbzJgg/nQ4gG+zKeteK32znmHIoXzJuJUC2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:fd:0c:a9:94:72:45:fb:74:28:38:37:f1:6f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d08305ffd983c34710d6324e851942e46e06e4
        Validity
            Not Before: Sep 26 16:02:40 2024 GMT
            Not After : Sep 27 16:02:40 2024 GMT
        Subject: CN=cef6052ba17cdffeed96d0752945141109d9d3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:99:8d:80:1d:bd:8d:2d:ff:e8:53:65:0e:
                    90:74:8d:54:f7:62:1f:d2:c1:1f:74:d6:f2:3e:5f:
                    92:5b:c7:27:5f:25:b6:5b:03:63:bf:24:f8:1b:ca:
                    f1:cc:56:1f:a5:7d:ec:c3:14:86:43:7f:8d:d1:b1:
                    58:85:0d:9c:f2:6d:4f:eb:cd:9c:88:f3:e2:19:e1:
                    db:37:33:a8:da:db:9e:7a:4d:6e:d0:64:93:4b:44:
                    c2:af:25:a2:fd:5e:a2:05:51:7c:80:29:12:dc:28:
                    b9:6d:1d:7b:79:a3:b1:ee:49:fa:31:fd:70:c1:ab:
                    2b:50:ef:6e:5a:56:76:73:49:3a:8d:be:0e:08:95:
                    97:ab:e7:86:7f:f8:68:d4:03:67:73:09:25:de:26:
                    91:c7:b0:d5:af:e7:c4:56:4d:d1:a7:92:ee:3c:3d:
                    f1:89:16:2a:b1:a7:d6:91:8f:6f:2f:68:0f:49:33:
                    91:e1:b5:96:5f:45:92:68:f8:b9:d8:21:15:a4:1c:
                    77:7f:e4:16:39:0c:2c:0f:1c:fa:89:13:f5:38:e6:
                    8b:4c:e1:fc:04:ee:0e:d9:65:13:08:19:23:28:21:
                    64:b4:73:c7:37:5e:6c:05:6a:e0:37:4a:60:52:9b:
                    9a:c3:72:2e:4c:c3:78:3a:27:04:cb:26:57:21:f7:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:05:2B:A1:7C:DF:FE:ED:96:D0:75:29:45:14:11:09:D9:D3:F1
            X509v3 Authority Key Identifier:
                keyid:74:D0:83:05:FF:D9:83:C3:47:10:D6:32:4E:85:19:42:E4:6E:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNCDBf_Zg8NHENYyToUZQuRuBuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de5aa3-5cf8-469f-a67e-8bc41a4dc84a/1/dNCDBf_Zg8NHENYyToUZQuRuBuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de5aa3-5cf8-469f-a67e-8bc41a4dc84a/1/dNCDBf_Zg8NHENYyToUZQuRuBuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:86:63:f4:52:6a:e0:5f:b9:dd:f6:c6:57:48:91:83:d4:29:
         62:67:de:a7:63:14:d1:60:4b:f6:03:ce:35:74:7d:c5:bf:6c:
         60:7e:22:97:45:c9:a1:a0:ca:84:b9:23:3b:c8:d4:15:24:54:
         df:9e:27:29:3d:80:7d:7d:e6:52:be:26:81:79:36:ea:08:e8:
         13:11:c9:43:ed:1a:fa:86:2c:61:7c:29:38:26:d8:7b:8a:1f:
         f9:cc:95:ac:dc:a8:db:cb:95:9b:11:d3:ee:2a:e5:7d:5c:a4:
         ce:5c:4e:2e:bb:2d:14:2b:83:77:cb:29:6e:5a:dc:d6:4a:90:
         08:dd:8f:10:6c:58:28:0a:dd:c0:a4:16:d5:f3:22:da:f4:c5:
         91:3f:32:da:49:ab:13:08:3f:cd:88:39:32:cf:3c:46:bf:71:
         a7:63:d1:34:7e:d4:b3:25:76:39:13:1b:f5:d4:a4:c4:6e:64:
         d8:b9:6f:22:25:e1:a2:85:c2:c3:fe:38:77:23:a2:88:f5:30:
         b6:03:3d:bf:67:8d:77:3d:44:d8:14:9e:6c:67:a7:7d:83:14:
         42:98:12:59:75:82:d1:96:8c:94:e2:67:64:37:21:0c:62:a5:
         5d:e4:7e:2f:4b:99:bf:4a:4a:9f:9c:bd:6e:a0:10:04:e3:10:
         06:db:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----