Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft
File:                     lcnGde82vvDQ_eJerGYU-MWe3JM.mft (raw, json)
Hash identifier:          9ms6+Fn5V6Moz5y/Hgpw3ZFJa73z6Ju2j4iBFDh+sJk=
Subject key identifier:   48:B3:06:B7:F7:16:B6:36:21:D7:55:7E:27:E2:C1:6C:0B:5E:23:FA
Authority key identifier: 95:C9:C6:75:EF:36:BE:F0:D0:FD:E2:5E:AC:66:14:F8:C5:9E:DC:93
Certificate issuer:       /CN=95c9c675ef36bef0d0fde25eac6614f8c59edc93
Certificate serial:       01922F7E715F5430240F1295832BAAD5F08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcnGde82vvDQ_eJerGYU-MWe3JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft
Manifest number:          1012
Signing time:             Thu 26 Sep 2024 18:01:08 +0000
Manifest this update:     Thu 26 Sep 2024 18:01:08 +0000
Manifest next update:     Fri 27 Sep 2024 18:01:08 +0000
Files and hashes:         1: lcnGde82vvDQ_eJerGYU-MWe3JM.crl (hash: J/wqAH0R8ndCpOVPiXIR6am9fkn0k3/NpZOWLqf/7sk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:7e:71:5f:54:30:24:0f:12:95:83:2b:aa:d5:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95c9c675ef36bef0d0fde25eac6614f8c59edc93
        Validity
            Not Before: Sep 26 18:01:08 2024 GMT
            Not After : Sep 27 18:01:08 2024 GMT
        Subject: CN=48b306b7f716b63621d7557e27e2c16c0b5e23fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:aa:ad:93:91:41:9c:e0:e9:35:9f:11:21:
                    c8:dd:3e:62:cc:45:22:61:e8:21:00:08:2e:c9:c8:
                    b3:26:06:67:75:78:b8:a0:c6:a1:73:06:d4:1b:2f:
                    9c:40:50:ac:50:69:cd:37:47:3e:63:11:3b:36:10:
                    6b:74:66:cf:bb:1d:f9:17:14:07:1a:a0:9d:0b:32:
                    df:40:9e:72:66:0d:2f:03:69:47:bc:7f:ad:7b:f3:
                    0f:d2:f1:9d:68:3b:25:31:93:43:57:e7:da:4c:b6:
                    7a:26:ca:81:77:54:a1:fb:c6:a4:88:19:44:20:f1:
                    ee:e2:a6:35:41:77:14:36:0e:4f:e5:84:c7:0c:60:
                    47:0f:b4:3b:e1:ff:00:47:45:4b:dc:4b:97:4b:d6:
                    69:b0:a6:3a:4a:0d:58:8b:89:55:42:72:b9:5a:08:
                    11:06:89:02:4f:a4:48:8f:88:c7:d2:ff:e4:95:0b:
                    04:c2:dc:b9:ad:fa:42:4b:d5:e2:f2:59:36:63:a8:
                    d6:81:fc:62:ad:76:f2:a4:12:47:19:a4:13:89:30:
                    97:d0:ca:0e:7e:bc:84:1d:a5:5b:78:07:88:ab:71:
                    1a:fa:3a:e5:b9:6c:6b:bb:04:29:31:19:53:fc:b2:
                    37:53:85:fa:de:63:4f:11:cc:f1:f1:1e:dc:ea:41:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B3:06:B7:F7:16:B6:36:21:D7:55:7E:27:E2:C1:6C:0B:5E:23:FA
            X509v3 Authority Key Identifier:
                keyid:95:C9:C6:75:EF:36:BE:F0:D0:FD:E2:5E:AC:66:14:F8:C5:9E:DC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcnGde82vvDQ_eJerGYU-MWe3JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/687ec1-c9b0-4d50-815b-0f0740b04521/1/lcnGde82vvDQ_eJerGYU-MWe3JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:5c:ed:bf:e7:11:11:92:af:b8:d8:76:eb:92:3c:76:8e:
         d5:90:ae:6b:02:ac:32:74:b4:3b:84:79:42:c8:da:73:58:67:
         fd:fb:bc:22:99:07:79:b0:81:65:2b:31:46:3e:0d:b3:41:52:
         80:eb:25:70:d1:a3:05:cc:b6:e2:88:5a:51:96:d2:88:50:65:
         f8:62:05:26:fa:25:c2:fa:5d:17:fa:ee:e7:54:39:81:de:f3:
         33:fb:b0:05:7d:50:2e:3d:ee:12:03:ea:da:a7:75:d7:4b:4f:
         dc:75:4e:25:48:2b:2d:03:60:d6:09:3e:2f:ea:20:47:e4:b2:
         ff:bb:52:83:a0:4d:fe:56:f3:17:11:37:b0:ee:1f:71:35:4d:
         49:d1:ee:35:d3:81:ef:08:15:8f:26:15:60:bf:04:38:7b:26:
         90:0f:1e:7a:ae:18:55:00:fa:b9:2a:25:25:f3:32:9c:c5:f9:
         0a:89:b7:35:92:d4:d2:40:96:63:91:4c:a5:1d:48:60:5b:21:
         5b:68:2f:88:00:51:06:c0:30:9b:1c:8f:0e:ea:d9:76:37:84:
         99:22:d0:36:f1:5d:78:94:b6:91:4e:d9:bd:27:8c:14:98:51:
         42:b4:ca:aa:37:17:79:5c:7d:58:1f:f0:31:e8:52:17:f4:8b:
         50:02:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----