Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft
File:                     IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft (raw, json)
Hash identifier:          HZCCrw+mtvdgNaPYHXa+kVMVNnOjT09lnXQBu2LfaBQ=
Subject key identifier:   13:51:84:CF:DF:23:8E:AE:FE:E2:42:79:59:AD:97:E3:B3:BA:58:E7
Authority key identifier: 22:16:06:A8:F6:BF:E7:D9:42:C1:9E:21:9F:8A:11:37:18:99:64:FE
Certificate issuer:       /CN=221606a8f6bfe7d942c19e219f8a1137189964fe
Certificate serial:       01922FB59F83B0DB89BB49980C2E799C349C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhYGqPa_59lCwZ4hn4oRNxiZZP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft
Manifest number:          03E5
Signing time:             Thu 26 Sep 2024 19:01:24 +0000
Manifest this update:     Thu 26 Sep 2024 19:01:24 +0000
Manifest next update:     Fri 27 Sep 2024 19:01:24 +0000
Files and hashes:         1: IhYGqPa_59lCwZ4hn4oRNxiZZP4.crl (hash: uFUuv6Dr2WBxTLScelSIOKgD6MvaUo3Qhxa1tWLgCcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:b5:9f:83:b0:db:89:bb:49:98:0c:2e:79:9c:34:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221606a8f6bfe7d942c19e219f8a1137189964fe
        Validity
            Not Before: Sep 26 19:01:24 2024 GMT
            Not After : Sep 27 19:01:24 2024 GMT
        Subject: CN=135184cfdf238eaefee2427959ad97e3b3ba58e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:ca:39:13:0d:a8:12:3a:06:96:dc:cd:94:
                    fe:17:9d:4a:ea:7e:bc:38:e2:17:29:a3:48:57:97:
                    d4:95:1b:3a:b1:ab:86:40:bd:ab:4b:35:86:d5:10:
                    56:65:7a:97:28:18:15:d2:9e:d0:97:d8:ba:49:df:
                    c7:62:05:55:bb:e2:c5:0f:16:22:6e:d4:e0:64:2b:
                    e7:5a:1c:e0:a5:31:07:fd:15:c2:7f:b9:6e:f2:13:
                    90:0c:2e:a6:67:bd:5c:29:0a:c0:4c:e8:b9:08:bb:
                    fa:0a:75:02:e6:75:4a:07:72:c5:6f:b5:a9:c4:0d:
                    2c:4c:5d:60:64:64:55:13:1b:c7:27:5e:98:09:fc:
                    d5:ab:24:2b:ec:f1:e0:8e:c2:7b:9d:da:65:cc:66:
                    ce:c4:ed:52:42:e7:3b:05:33:46:18:34:92:4f:16:
                    d9:9c:f5:f7:de:e1:96:46:54:32:f0:a0:09:9e:44:
                    fa:4b:61:bc:f3:53:42:31:24:51:72:a5:91:2a:00:
                    bc:53:85:5c:c9:80:28:21:99:94:51:77:e4:05:1d:
                    61:c4:f0:0a:f8:b5:68:bc:a0:55:25:82:32:01:5d:
                    ac:0e:dd:99:2c:66:61:5b:06:0e:a4:19:9e:c3:a8:
                    cf:7e:0b:3b:5c:36:73:58:80:12:ca:0a:34:50:b1:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:84:CF:DF:23:8E:AE:FE:E2:42:79:59:AD:97:E3:B3:BA:58:E7
            X509v3 Authority Key Identifier:
                keyid:22:16:06:A8:F6:BF:E7:D9:42:C1:9E:21:9F:8A:11:37:18:99:64:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhYGqPa_59lCwZ4hn4oRNxiZZP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:58:9c:a8:49:f8:f7:3e:c7:12:bb:9a:06:8f:63:c8:98:
         a8:c1:44:ff:aa:65:70:0d:f5:01:b4:25:ac:cf:c0:86:60:4a:
         27:51:69:2c:42:fe:67:ac:72:d7:62:44:41:fb:06:07:13:b8:
         17:88:7f:a5:21:eb:90:90:69:1b:62:e2:be:85:fa:41:52:d1:
         03:e5:bd:90:44:69:72:6a:30:57:2b:b7:5a:c0:01:65:c9:9b:
         c6:0b:fe:8e:e9:0a:44:ca:5d:14:d4:3c:c8:ef:9f:21:52:01:
         2a:e3:bb:b4:44:e3:08:1a:85:3b:0e:8a:e4:6d:df:0d:27:62:
         74:a1:85:5e:a6:89:02:71:7e:12:99:ef:0c:30:5f:3a:bc:48:
         64:ba:93:c9:87:58:13:85:d9:02:ac:68:72:c0:9c:7e:c1:b6:
         94:82:a3:b1:13:8b:d3:07:56:f8:f5:af:79:98:ed:c2:e3:18:
         36:ac:b5:20:1f:f9:43:0f:b6:14:1e:c1:25:52:8f:4a:dd:67:
         7d:46:c7:95:8e:02:92:78:09:07:75:2f:4e:a4:fb:37:34:87:
         ef:26:39:a3:d7:8e:75:dd:9f:c2:5e:bb:9e:75:b5:9a:a3:6c:
         86:2b:29:3a:c0:91:a3:e1:5c:3c:9c:ab:10:e6:5e:09:ac:fe:
         fd:af:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----