Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5a176-8ab9-49d0-9555-4233c7c86fdd/1/LGERTcGRWiRB7u5na0VR7IiMuZ4.mft
File:                     LGERTcGRWiRB7u5na0VR7IiMuZ4.mft (raw, json)
Hash identifier:          zFKevQebTO/X+5CXz7rBubiDQVMkA1MW14qlWEjEcEA=
Subject key identifier:   F2:6C:EC:E6:66:F3:5A:0A:60:2E:E2:DC:CA:2E:B4:07:19:98:86:E2
Authority key identifier: 2C:61:11:4D:C1:91:5A:24:41:EE:EE:67:6B:45:51:EC:88:8C:B9:9E
Certificate issuer:       /CN=2c61114dc1915a2441eeee676b4551ec888cb99e
Certificate serial:       018E3A42F6F0973B477A9B898093D721F0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGERTcGRWiRB7u5na0VR7IiMuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/c5a176-8ab9-49d0-9555-4233c7c86fdd/1/LGERTcGRWiRB7u5na0VR7IiMuZ4.mft
Manifest number:          02
Signing time:             Thu 14 Mar 2024 00:00:50 +0000
Manifest this update:     Thu 14 Mar 2024 00:00:50 +0000
Manifest next update:     Fri 15 Mar 2024 00:00:50 +0000
Files and hashes:         1: LGERTcGRWiRB7u5na0VR7IiMuZ4.crl (hash: GN5V3DvKGjScOtXjBXM93l+ky6tg4cpmpE6LPmAboYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:3a:42:f6:f0:97:3b:47:7a:9b:89:80:93:d7:21:f0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61114dc1915a2441eeee676b4551ec888cb99e
        Validity
            Not Before: Mar 14 00:00:50 2024 GMT
            Not After : Mar 15 00:00:50 2024 GMT
        Subject: CN=f26cece666f35a0a602ee2dcca2eb407199886e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:ed:5d:11:f3:de:0e:85:51:7b:a4:10:86:
                    58:ef:51:70:ce:48:f8:a5:ce:9c:61:00:33:5f:84:
                    9f:79:4e:12:a4:39:b0:2c:7d:e1:f4:e8:9d:76:d7:
                    bf:ac:b9:10:b4:92:83:2b:67:bd:cb:94:1c:a3:0c:
                    2a:d6:c6:93:11:d9:c1:e0:96:ad:81:66:a8:e8:13:
                    5d:65:d8:e0:7e:9f:21:5a:4a:4c:9e:88:20:78:e9:
                    68:e1:8c:e7:bf:d5:12:dc:01:36:34:62:a0:15:0e:
                    77:7b:15:31:de:f3:88:b0:ce:1c:70:6a:c4:9a:45:
                    ce:5b:9a:66:ea:72:cc:3b:c4:d4:f2:84:6e:4a:90:
                    c3:32:7a:2b:8b:30:b1:b3:90:a8:ab:bc:45:05:42:
                    9b:99:ca:45:53:73:3d:cb:d3:9f:72:28:ba:e7:1f:
                    8d:c1:00:3a:23:a2:ea:4e:65:46:27:c0:1c:2d:5c:
                    52:c1:22:98:20:c8:ca:9b:86:39:2e:da:cc:40:8a:
                    08:93:6c:5d:eb:8b:b5:6a:da:32:56:e3:4e:51:27:
                    e8:0e:18:bb:1e:63:c8:f1:eb:75:0f:6e:38:03:0a:
                    88:71:9a:be:2a:0a:5f:52:d1:dc:12:4d:28:69:49:
                    8c:04:0e:18:85:83:40:9f:a4:8e:b7:45:dd:07:e6:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:EC:E6:66:F3:5A:0A:60:2E:E2:DC:CA:2E:B4:07:19:98:86:E2
            X509v3 Authority Key Identifier:
                keyid:2C:61:11:4D:C1:91:5A:24:41:EE:EE:67:6B:45:51:EC:88:8C:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGERTcGRWiRB7u5na0VR7IiMuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5a176-8ab9-49d0-9555-4233c7c86fdd/1/LGERTcGRWiRB7u5na0VR7IiMuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5a176-8ab9-49d0-9555-4233c7c86fdd/1/LGERTcGRWiRB7u5na0VR7IiMuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:37:a8:19:93:52:99:88:9f:01:b6:45:3c:87:6a:3f:03:
         3d:f2:35:ab:53:5e:4d:c7:00:90:7c:af:b3:a8:d0:f3:95:c0:
         82:ea:07:64:4b:ce:10:73:41:bf:3f:27:71:1a:a1:b1:7d:49:
         d2:b7:d8:2f:95:d0:fe:71:5e:f8:1b:39:a7:b2:5c:be:40:0f:
         35:d3:16:02:d4:7d:f9:dc:c4:50:43:69:13:1b:82:b5:dd:0e:
         c0:43:98:4c:8f:8b:6b:49:2d:a4:f5:4c:f7:c6:72:44:03:03:
         5a:ac:30:e1:e2:d1:fb:6a:6f:aa:c5:08:4d:3d:71:5e:52:25:
         05:a0:29:16:f8:f6:74:3c:c8:89:c9:3a:99:4d:dc:64:aa:4d:
         8c:92:a3:1d:fe:57:56:f1:d4:21:86:72:68:9c:17:58:ad:cc:
         a9:94:a1:bc:45:82:0c:56:39:9b:cf:44:61:a9:44:bc:4a:52:
         e5:66:99:f8:18:55:89:ea:2b:fb:f3:2c:c5:99:67:fc:ff:b2:
         c3:b7:40:a7:aa:61:de:ab:5f:c8:77:f0:53:40:1e:d0:58:2b:
         be:c3:c7:6b:41:c1:5a:16:45:82:d3:b9:69:0c:ea:46:19:65:
         c2:41:8e:1a:6a:b9:5d:04:fc:85:e8:a9:90:21:be:45:51:c2:
         23:ec:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----