Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
File:                     4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft (raw, json)
Hash identifier:          zsnt8mWNhuD7LYbcJ4KkJJSsR0+yMJMIfKZqgXYM7zQ=
Subject key identifier:   0E:C0:38:6F:33:CA:9E:E2:D0:4F:67:65:82:38:4C:0A:D5:4A:1F:83
Authority key identifier: E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41
Certificate issuer:       /CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
Certificate serial:       0193F9D438A22DAEBD63D06567D97C3EBF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
Manifest number:          0282
Signing time:             Tue 24 Dec 2024 18:00:55 +0000
Manifest this update:     Tue 24 Dec 2024 18:00:55 +0000
Manifest next update:     Wed 25 Dec 2024 18:00:55 +0000
Files and hashes:         1: 4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl (hash: yBNBlNXmoFpkFAhfmRo8eUwD42cPOPUhyzvZ1jpx/BU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:d4:38:a2:2d:ae:bd:63:d0:65:67:d9:7c:3e:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
        Validity
            Not Before: Dec 24 18:00:55 2024 GMT
            Not After : Dec 25 18:00:55 2024 GMT
        Subject: CN=0ec0386f33ca9ee2d04f676582384c0ad54a1f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:45:11:ea:07:34:c2:a5:5b:2a:d6:91:cf:
                    a8:1f:b9:3b:ab:ca:9c:e1:79:c6:83:18:25:5f:64:
                    3b:ab:37:b5:18:cb:96:c0:2f:c7:05:bd:21:03:be:
                    dc:56:17:df:e5:f7:ee:8e:e7:13:78:a5:78:28:c7:
                    78:bf:71:a2:b6:e3:a6:b2:95:92:25:60:24:2d:98:
                    9f:1c:fc:48:fd:6b:f1:7f:51:87:c5:ad:78:60:d5:
                    36:0d:11:42:6d:e0:db:78:95:08:c1:21:0a:c3:a6:
                    16:f7:64:df:e2:f1:1b:59:8b:79:a6:db:2e:15:9e:
                    b7:78:39:da:b1:b3:cd:5b:b9:59:56:75:ff:6a:29:
                    c2:4d:8d:05:0c:de:3f:e9:e1:dd:39:33:3d:9b:09:
                    06:1a:aa:46:ff:c2:b3:03:54:8f:a7:5d:0e:91:3e:
                    48:cf:49:66:8c:8c:b7:67:2e:3a:52:d9:3c:2f:1b:
                    45:25:cd:4a:5f:88:2c:74:cb:f0:06:0e:90:56:34:
                    44:fc:b3:dd:cb:b0:97:33:9c:49:50:0b:86:92:6c:
                    e6:c4:e2:2e:25:91:52:1c:d9:ad:10:32:7f:53:44:
                    97:e6:93:94:82:81:f6:8a:81:21:06:28:b8:48:24:
                    e1:50:9e:95:3b:3d:f0:da:20:8f:34:90:9a:cf:4b:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:38:6F:33:CA:9E:E2:D0:4F:67:65:82:38:4C:0A:D5:4A:1F:83
            X509v3 Authority Key Identifier:
                keyid:E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:ae:ce:fe:cd:b3:3e:41:83:86:75:64:27:d1:01:4f:39:
         9a:50:d1:f2:9c:20:a2:b1:93:d9:2f:1c:6f:4a:1d:23:14:17:
         67:05:5e:f8:6d:54:27:45:e4:a1:79:54:07:8f:9c:51:22:e3:
         40:4b:f6:c8:15:45:cb:5a:f6:67:12:ef:4a:af:fc:de:79:74:
         38:5a:0f:4f:70:f2:91:30:b8:8b:f3:2a:7c:c7:32:fe:42:49:
         e2:3a:0e:ca:5b:e5:78:dd:c8:d8:88:09:cd:24:28:0f:22:f2:
         b5:bf:1c:7f:84:78:ba:4f:c9:f7:1b:73:f9:e3:c6:12:40:3c:
         f8:3a:43:8c:fb:15:c0:20:7a:f9:96:14:06:df:79:60:b7:4f:
         db:c8:c8:4a:7b:bd:9e:d9:e2:1f:fb:55:93:87:0f:55:3c:cd:
         1a:5c:b8:e0:a5:ba:e3:f6:62:f3:7d:52:32:88:c2:f9:32:9c:
         d4:f8:1d:cf:1d:d8:4f:44:20:aa:0b:7d:aa:f5:28:6e:53:92:
         e4:ed:43:6b:b8:c5:ac:7a:9b:06:3e:fe:08:ca:b7:d4:89:84:
         c0:80:58:2e:34:66:7f:71:25:73:5d:73:02:04:da:b6:82:ae:
         14:06:ef:fb:06:bc:6a:3a:ca:31:12:e8:b1:30:9f:8e:0c:d6:
         bb:c9:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----