Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/028ce4-578f-416a-87ab-09c16e3dc7ee/1/9V7gCWJCdT-VFPL_Yoyr32gM-KI.mft
File:                     9V7gCWJCdT-VFPL_Yoyr32gM-KI.mft (raw, json)
Hash identifier:          UHRICj6vF5lToN1vzLT4CEs9Pq4gIad8NVoJqPlkEpg=
Subject key identifier:   0E:22:77:0A:22:8A:B9:BB:51:01:CD:24:28:2A:3D:4D:EC:57:89:F6
Authority key identifier: F5:5E:E0:09:62:42:75:3F:95:14:F2:FF:62:8C:AB:DF:68:0C:F8:A2
Certificate issuer:       /CN=f55ee0096242753f9514f2ff628cabdf680cf8a2
Certificate serial:       01934717530C2C877DBFD8894689B19766C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V7gCWJCdT-VFPL_Yoyr32gM-KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/028ce4-578f-416a-87ab-09c16e3dc7ee/1/9V7gCWJCdT-VFPL_Yoyr32gM-KI.mft
Manifest number:          0523
Signing time:             Wed 20 Nov 2024 01:02:10 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:10 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:10 +0000
Files and hashes:         1: 9V7gCWJCdT-VFPL_Yoyr32gM-KI.crl (hash: gX3OIlNm4ur/eusWpoZlViB2tttrcypl20SfjgJe2EY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:53:0c:2c:87:7d:bf:d8:89:46:89:b1:97:66:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ee0096242753f9514f2ff628cabdf680cf8a2
        Validity
            Not Before: Nov 20 01:02:10 2024 GMT
            Not After : Nov 21 01:02:10 2024 GMT
        Subject: CN=0e22770a228ab9bb5101cd24282a3d4dec5789f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:18:21:5c:9f:73:d4:7a:f4:b8:a6:3b:28:
                    30:a7:a9:f9:cd:db:e3:44:25:0d:0d:dc:4e:39:73:
                    4e:4b:34:f0:15:bf:f4:5c:e4:4e:58:16:02:9c:cb:
                    9f:d9:80:66:e8:f1:29:8a:46:42:50:68:20:60:f8:
                    a7:c0:53:06:eb:1e:5e:27:8e:6e:1c:f5:56:f0:87:
                    17:59:a3:69:c2:39:a7:8d:9d:1e:10:9f:46:81:76:
                    09:13:50:92:9d:a8:c0:56:48:c0:79:c1:1d:6e:ab:
                    06:0b:7e:af:bb:0f:75:9d:11:bb:20:7b:80:3d:0d:
                    8e:9b:6d:57:04:42:b5:55:7e:ef:07:59:c0:af:b8:
                    68:37:fe:e6:94:6e:c0:fc:b8:71:a5:a1:e0:a8:5b:
                    fb:4a:a5:7a:69:e0:47:15:31:00:ef:82:93:70:e7:
                    b0:88:de:46:8b:bf:df:7f:be:04:f6:45:52:63:b9:
                    7b:24:3a:62:17:1b:49:fe:c9:78:1d:b8:dc:4a:1a:
                    ba:7c:2c:2b:0e:7b:a0:2d:9c:10:7a:a6:42:17:7f:
                    65:6f:3c:0b:1b:71:ac:11:2e:1b:96:f4:37:49:b1:
                    19:00:cc:f1:a5:5b:f0:6f:8a:e5:70:4a:eb:d8:55:
                    a4:b5:a1:f5:40:c1:00:35:7a:bb:94:4c:99:03:a0:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:22:77:0A:22:8A:B9:BB:51:01:CD:24:28:2A:3D:4D:EC:57:89:F6
            X509v3 Authority Key Identifier:
                keyid:F5:5E:E0:09:62:42:75:3F:95:14:F2:FF:62:8C:AB:DF:68:0C:F8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V7gCWJCdT-VFPL_Yoyr32gM-KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028ce4-578f-416a-87ab-09c16e3dc7ee/1/9V7gCWJCdT-VFPL_Yoyr32gM-KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028ce4-578f-416a-87ab-09c16e3dc7ee/1/9V7gCWJCdT-VFPL_Yoyr32gM-KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:2a:e7:47:d1:64:35:15:2d:97:50:48:ca:1e:84:74:e4:
         51:74:f6:f3:2f:21:de:47:fa:9e:b4:10:72:36:34:6a:a2:c9:
         82:e7:a5:5e:93:b7:47:ba:4d:a9:34:94:ed:27:47:ce:25:4d:
         ec:20:1c:d4:d1:b8:fe:0e:b8:71:93:a9:21:30:7c:26:08:a4:
         95:ef:0f:39:cb:9b:b4:e6:b0:c5:2e:50:9a:7c:d7:f6:c0:ad:
         12:55:4c:0d:90:95:c6:98:ee:3c:9c:9e:6e:1b:44:c5:7b:98:
         12:5f:20:d8:5f:27:bb:bd:cc:8a:2c:e9:b7:2f:fd:79:5c:e4:
         01:7e:c8:f3:df:28:a2:80:7a:27:76:35:ec:dd:29:67:c0:bc:
         74:e8:32:c7:7d:92:09:8c:72:eb:9b:25:94:a9:b5:a1:75:b8:
         be:2f:9e:74:e5:cd:08:10:9e:20:de:90:19:d9:15:2e:e8:6c:
         55:5d:59:02:4a:41:25:f2:fd:2b:0f:82:4d:4a:01:e7:d8:ac:
         ec:e5:fc:45:2e:11:62:35:9c:ae:7a:fd:7c:2d:4d:89:d3:b7:
         31:0e:7c:ae:3a:d3:bd:2d:eb:bd:37:25:5a:ba:7b:08:a6:38:
         40:da:88:02:d3:2c:22:19:fb:29:0b:1b:cc:e8:ea:6f:4f:31:
         ac:d2:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----