Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
File:                     JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft (raw, json)
Hash identifier:          zqjePmS5yNXlrhSIN9jn8dKV8l5ay/ZeR1upi4ct/J8=
Subject key identifier:   D4:DA:A5:C2:3C:90:0B:66:F5:DE:63:5F:83:7E:8A:9B:3D:EC:42:3C
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Certificate issuer:       /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial:       01922F47509C263C7A071DFFC0D52CCB9336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
Manifest number:          0B0D
Signing time:             Thu 26 Sep 2024 17:00:55 +0000
Manifest this update:     Thu 26 Sep 2024 17:00:55 +0000
Manifest next update:     Fri 27 Sep 2024 17:00:55 +0000
Files and hashes:         1: JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl (hash: mTKK9PsK/qCFCQEhjz9VI0ruqj1b42DIaibSlU61XaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:47:50:9c:26:3c:7a:07:1d:ff:c0:d5:2c:cb:93:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
        Validity
            Not Before: Sep 26 17:00:55 2024 GMT
            Not After : Sep 27 17:00:55 2024 GMT
        Subject: CN=d4daa5c23c900b66f5de635f837e8a9b3dec423c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:f4:e1:5f:dd:30:4c:49:39:3e:04:fa:5f:
                    3a:30:6a:31:3c:be:4a:db:c7:08:90:19:26:0b:af:
                    3c:d9:1c:02:e8:97:ee:01:15:44:0f:4a:98:66:56:
                    1c:1a:cd:93:75:03:40:c6:60:c8:ba:81:58:36:a1:
                    ba:7e:79:c4:a0:f5:ac:52:3a:1d:3e:d1:aa:9f:d2:
                    fa:a7:da:15:a3:d3:f2:74:4e:62:12:1c:a9:73:e7:
                    f6:0a:28:63:8b:10:fc:93:a8:4b:25:5b:26:13:40:
                    d6:6e:d4:bf:22:4e:b2:9b:90:19:7d:d8:15:0a:4d:
                    d3:3a:ab:fb:1b:f3:cb:a6:87:e9:53:3c:fd:8b:73:
                    44:35:4b:f9:f0:bb:f4:f6:15:ad:ff:a7:09:20:b7:
                    d9:c4:64:2b:ad:f5:0b:ab:ef:4d:04:2e:95:e7:e2:
                    27:7f:ae:4c:f6:19:a9:0e:04:c4:0a:e5:97:15:a5:
                    6e:fe:19:73:15:5b:dc:9a:85:e7:4e:41:00:c4:02:
                    7c:bd:ec:d9:1b:fb:a5:71:c9:66:74:67:b1:7e:c9:
                    7c:09:7e:5b:06:32:c4:4e:7c:0e:bc:6c:63:9a:2d:
                    32:98:b2:19:e5:86:86:d8:5f:47:5a:d5:e0:38:f4:
                    b9:4e:d8:6a:f5:48:d7:e9:b6:30:50:a9:68:d4:0a:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:A5:C2:3C:90:0B:66:F5:DE:63:5F:83:7E:8A:9B:3D:EC:42:3C
            X509v3 Authority Key Identifier:
                keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:29:af:2a:8b:12:ad:f0:6e:ea:1d:32:5b:92:23:e0:7a:45:
         5f:ad:ac:87:e7:8a:f0:34:c5:e5:20:f2:61:38:24:db:8b:7a:
         9b:65:47:40:4e:00:06:82:23:d5:53:71:b8:61:5e:34:53:7d:
         de:27:57:2b:b4:cf:f9:a6:ee:8d:74:c8:f3:5b:2c:ba:9a:dd:
         01:07:68:df:3d:03:94:12:23:10:5a:eb:97:c0:2d:dd:c9:03:
         07:2f:a5:8c:6f:32:da:94:89:c8:2e:b6:71:66:89:5e:bd:72:
         18:62:bb:33:82:d9:9a:48:eb:dc:cf:3b:16:9d:a1:c2:69:aa:
         e2:71:c3:f2:5d:04:26:ca:39:51:2c:41:01:dc:cb:9a:80:d9:
         4d:fe:f9:19:8d:e7:89:cc:29:9d:37:4f:5f:68:d0:cf:d6:96:
         55:08:16:54:5e:40:8a:63:fe:ce:9b:7f:c2:ee:6b:ed:8f:84:
         24:fa:68:97:8a:d0:83:29:38:ec:64:17:83:af:a4:2f:21:1d:
         56:28:28:ac:28:1b:90:07:ab:b9:60:be:7d:2d:0a:b3:b9:99:
         84:58:24:8b:0d:e8:bf:c9:c4:14:d9:63:e9:ed:4f:f5:0d:ff:
         8f:bc:e4:46:2d:f9:ce:12:2f:55:4f:d2:fa:32:90:39:d5:c9:
         5c:5f:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----