Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
File:                     Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft (raw, json)
Hash identifier:          7EOIJkUgw/Sg0TSbDaUoOk+yYNVep0bSjgqpOCsmpsk=
Subject key identifier:   01:0F:6B:1A:D6:50:E6:4D:5C:FD:54:7F:CD:AB:E9:52:FC:AF:E9:89
Authority key identifier: 1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
Certificate issuer:       /CN=1dad3753e28794e1f8831ae710060b11a63376ee
Certificate serial:       0193F99CBF5C08FF99E6AC76D900963ED4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
Manifest number:          0C60
Signing time:             Tue 24 Dec 2024 17:00:19 +0000
Manifest this update:     Tue 24 Dec 2024 17:00:19 +0000
Manifest next update:     Wed 25 Dec 2024 17:00:19 +0000
Files and hashes:         1: Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl (hash: MLCujFyP9AiHObpJU+A8cmSFKX5ODjmIlFt8v9SG0sk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:9c:bf:5c:08:ff:99:e6:ac:76:d9:00:96:3e:d4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad3753e28794e1f8831ae710060b11a63376ee
        Validity
            Not Before: Dec 24 17:00:19 2024 GMT
            Not After : Dec 25 17:00:19 2024 GMT
        Subject: CN=010f6b1ad650e64d5cfd547fcdabe952fcafe989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ff:39:be:39:97:81:41:72:1f:d4:23:d7:04:
                    cc:e0:05:a8:cc:ba:39:b2:77:44:a5:21:5a:06:bf:
                    f0:5c:83:6c:cf:0c:7f:61:3c:84:ea:ce:87:5b:fb:
                    18:e6:ea:8c:cb:f6:81:ca:35:ad:40:7c:0e:73:e3:
                    ed:36:8f:6d:2e:ee:e9:f8:c8:0b:9a:51:b3:01:bf:
                    50:ec:3d:a5:ad:dc:53:10:b1:5f:01:bd:d1:6d:de:
                    fe:87:91:c8:12:50:c0:d8:85:22:46:4c:0e:fb:95:
                    1e:6f:d7:26:ac:c0:89:fe:ea:ec:b6:96:cc:6d:59:
                    aa:f2:77:2b:c6:1a:ee:40:68:64:9e:b5:99:17:1f:
                    77:55:4a:a0:64:3c:27:d3:65:28:17:6a:15:d3:41:
                    b1:02:31:0e:50:f0:c7:af:26:e1:45:a1:75:3a:9b:
                    11:dc:2a:c9:82:ea:91:c0:db:55:f8:fe:b7:88:58:
                    2d:0b:e9:06:bf:9d:87:b6:b7:3f:1e:1b:9b:35:b9:
                    5f:12:6e:6a:64:fe:8d:78:0f:19:69:12:37:f2:7c:
                    ce:86:50:80:8c:e1:14:4a:2a:4e:c5:ce:92:56:c4:
                    96:67:80:f2:b4:8a:51:09:81:e4:fa:89:10:f4:18:
                    e6:63:db:ec:47:2b:35:13:79:48:39:e9:60:80:d6:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0F:6B:1A:D6:50:E6:4D:5C:FD:54:7F:CD:AB:E9:52:FC:AF:E9:89
            X509v3 Authority Key Identifier:
                keyid:1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:17:da:e5:6d:3d:37:cf:39:ec:03:fd:ce:73:21:e2:06:20:
         cb:b2:f1:9a:f9:9e:f6:e2:07:ad:77:0a:1c:76:44:c3:1a:96:
         1e:f4:8c:5e:74:cf:fb:05:f6:56:34:63:fc:0d:13:ad:ea:d4:
         79:99:44:fb:f7:9d:fb:ea:e2:e4:c0:33:d8:2e:f6:31:86:a3:
         3b:86:c2:6e:a8:b2:73:6b:c3:d0:65:74:18:fc:4b:89:8d:e8:
         0c:85:c3:67:4e:94:1d:a3:1d:b6:45:db:8a:91:50:f6:a9:60:
         43:25:ac:b0:fd:06:18:f0:a5:53:66:14:cd:3d:8c:26:cf:6e:
         63:2a:7c:7f:62:f3:4b:f8:68:44:63:9a:e8:3c:6e:69:fb:b8:
         ee:04:bc:10:0d:8e:fa:1e:c6:92:fb:a3:96:24:42:5c:26:be:
         5d:72:88:bd:ec:76:8b:fb:b7:fa:a0:da:eb:2e:b3:e4:06:bc:
         07:6f:db:25:89:cd:08:f9:a5:c1:be:a8:ba:64:b7:a6:49:75:
         80:2a:f2:b5:d8:d5:30:5e:eb:51:16:a8:68:c2:7f:04:cc:de:
         23:f8:b2:31:38:ab:78:10:21:94:95:e0:97:55:e6:d3:3f:18:
         f6:67:a0:6f:b5:62:04:f9:d7:3a:7a:d1:c2:9f:c6:ce:e2:0f:
         e8:3d:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----