Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.mft
File:                     SVnmOuxhwR64R5S1_emtzZ4u3kw.mft (raw, json)
Hash identifier:          Wak2IrpRsr7rssRvs9JNhHPXQHn61f7I+Utw+d8MEVw=
Subject key identifier:   64:7C:37:90:C4:3F:3C:6C:38:B9:E3:53:19:EF:51:09:B2:16:5F:56
Authority key identifier: 49:59:E6:3A:EC:61:C1:1E:B8:47:94:B5:FD:E9:AD:CD:9E:2E:DE:4C
Certificate issuer:       /CN=4959e63aec61c11eb84794b5fde9adcd9e2ede4c
Certificate serial:       019230233423FA3EA1C33746759F7851D868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVnmOuxhwR64R5S1_emtzZ4u3kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.mft
Manifest number:          03D7
Signing time:             Thu 26 Sep 2024 21:01:06 +0000
Manifest this update:     Thu 26 Sep 2024 21:01:06 +0000
Manifest next update:     Fri 27 Sep 2024 21:01:06 +0000
Files and hashes:         1: SVnmOuxhwR64R5S1_emtzZ4u3kw.crl (hash: /Tex5mQqptiop0TXrYE8UlDrWVBpRsIG3OFUVDxzvRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:34:23:fa:3e:a1:c3:37:46:75:9f:78:51:d8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4959e63aec61c11eb84794b5fde9adcd9e2ede4c
        Validity
            Not Before: Sep 26 21:01:06 2024 GMT
            Not After : Sep 27 21:01:06 2024 GMT
        Subject: CN=647c3790c43f3c6c38b9e35319ef5109b2165f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:06:d9:69:16:9c:fa:dd:ae:d9:6f:b0:75:
                    6e:b9:5f:e1:74:e1:0a:6d:e0:0e:25:46:90:f8:53:
                    ec:f3:a2:24:a9:9b:b5:00:d2:bf:a5:db:f2:ab:e6:
                    d3:00:94:9f:55:ff:0c:05:8c:5a:4b:42:d5:ec:e2:
                    d9:4f:dd:45:f0:dc:b8:ff:b5:66:23:5b:77:e7:c0:
                    cb:6a:d3:fe:f0:5e:ed:bf:19:82:2e:8f:d1:72:4b:
                    33:ef:aa:d6:00:2b:3b:36:cf:47:55:7c:e9:6c:a4:
                    39:6e:9e:e2:b1:c0:9a:7b:a7:f4:90:c1:fa:3b:df:
                    3d:2d:30:d0:fd:89:7f:aa:9a:f0:22:70:09:65:fd:
                    a4:c1:15:5b:04:fd:66:3a:d6:8f:3c:9c:82:12:d4:
                    5d:2c:47:37:93:f6:78:1e:25:05:ab:3c:ef:91:af:
                    da:87:0d:22:5c:be:f1:44:ae:96:4e:e1:1a:a2:88:
                    4c:c1:c8:5b:15:ed:c4:ee:e0:24:df:18:53:84:d4:
                    7f:af:7c:51:11:cd:0f:de:39:54:b7:a6:63:d0:31:
                    e4:7d:f0:3c:53:da:65:82:e3:9c:82:1d:65:22:dd:
                    2a:8c:b8:7e:71:f0:7f:f1:73:0a:84:4a:c9:2f:64:
                    27:e3:d9:36:07:f9:78:0c:3b:86:32:0d:f3:93:b6:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:37:90:C4:3F:3C:6C:38:B9:E3:53:19:EF:51:09:B2:16:5F:56
            X509v3 Authority Key Identifier:
                keyid:49:59:E6:3A:EC:61:C1:1E:B8:47:94:B5:FD:E9:AD:CD:9E:2E:DE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVnmOuxhwR64R5S1_emtzZ4u3kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:88:ff:ad:b5:06:44:8b:e9:6e:4f:4b:dd:3f:d4:c2:a7:b1:
         61:c1:18:63:87:a1:89:4a:0f:10:06:df:e9:eb:8e:82:26:55:
         e2:03:00:a7:a1:92:56:84:56:a3:aa:31:0c:97:26:37:bb:ae:
         81:cb:37:8a:e7:5a:a9:57:96:62:ea:de:d3:a1:83:b2:76:67:
         67:e2:90:4e:5a:b7:72:e5:0e:7b:e1:aa:bb:ef:1b:32:00:de:
         77:fb:e3:f0:fb:91:4f:9b:20:de:ce:21:b9:64:4b:f1:3b:b4:
         b4:43:1a:97:20:e1:80:af:29:e4:ba:c4:0b:8e:5a:f6:36:56:
         18:36:bf:b6:b0:7e:2e:80:31:49:fe:d6:a8:94:ec:45:d7:53:
         3b:ef:9b:10:bd:59:8d:66:a0:72:91:e6:7e:75:04:5d:6f:14:
         2d:3f:2e:82:6c:85:0a:77:c2:46:60:2f:bf:3c:e7:07:e7:60:
         fe:6f:f9:ac:1a:2f:6f:7f:48:85:22:e4:a0:30:b4:9b:c3:11:
         47:34:00:53:4a:4f:4e:f6:52:8c:0a:1d:9e:53:5c:57:80:5c:
         ec:4b:06:a5:09:5d:ef:93:64:49:f7:46:d1:f3:49:19:57:af:
         60:c5:9b:70:aa:89:82:50:db:26:10:58:b9:82:71:fc:1d:5d:
         4a:a6:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----