Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft
File:                     sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft (raw, json)
Hash identifier:          GYgvXrGZC6X+NS84VN4l3lPA+CnVjLyYuCVzb20o5RQ=
Subject key identifier:   5C:40:65:2B:91:F5:F6:57:28:93:06:CF:38:C1:75:28:7E:42:C2:D5
Authority key identifier: B1:75:3C:6D:09:8B:56:11:6C:28:C1:D8:2A:10:E1:30:3B:F3:DF:02
Certificate issuer:       /CN=b1753c6d098b56116c28c1d82a10e1303bf3df02
Certificate serial:       019001CF75499A41F953EFDADB1F3E6A4CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXU8bQmLVhFsKMHYKhDhMDvz3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft
Manifest number:          1B
Signing time:             Mon 10 Jun 2024 11:01:31 +0000
Manifest this update:     Mon 10 Jun 2024 11:01:31 +0000
Manifest next update:     Tue 11 Jun 2024 11:01:31 +0000
Files and hashes:         1: sXU8bQmLVhFsKMHYKhDhMDvz3wI.crl (hash: icCQdmP1AkDjP7rUz7zg6zPrmdcEbBEDjLxtLSLa1mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:01:cf:75:49:9a:41:f9:53:ef:da:db:1f:3e:6a:4c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1753c6d098b56116c28c1d82a10e1303bf3df02
        Validity
            Not Before: Jun 10 11:01:31 2024 GMT
            Not After : Jun 11 11:01:31 2024 GMT
        Subject: CN=5c40652b91f5f657289306cf38c175287e42c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:1a:28:d9:5f:ba:f6:9e:41:43:38:95:ed:
                    d4:4d:76:b4:8f:93:c8:c1:a9:8d:e7:d7:66:69:f1:
                    8f:16:0e:12:00:b3:50:4f:29:3a:39:0c:98:cf:64:
                    42:46:35:18:41:bb:2d:40:35:01:41:0d:23:77:5c:
                    19:2b:46:c5:15:fa:c5:06:f8:37:30:1d:68:a1:87:
                    46:c1:4f:ec:f6:83:f9:fa:d9:6d:f0:ef:db:80:72:
                    9b:2e:1f:fc:60:b0:f7:e7:69:72:97:13:ad:1d:78:
                    8b:09:35:41:38:16:19:cc:1f:f8:0b:24:08:ca:43:
                    ec:79:e4:ce:8e:03:a1:c0:ba:e8:89:c1:3f:6a:87:
                    df:d8:02:18:36:f7:c2:bd:73:ef:71:7c:3f:4d:6e:
                    34:ec:4f:b8:f6:39:55:51:a9:22:eb:a3:50:8e:cc:
                    d4:95:e3:57:a9:6b:85:32:4c:e4:1e:d0:85:2c:f1:
                    58:86:f3:95:94:7e:17:38:df:da:e0:a2:30:a2:5b:
                    0f:47:41:86:fa:28:e8:11:c0:d4:0b:e6:ef:d9:6d:
                    28:4d:84:a3:b2:4a:28:12:18:1d:c0:de:40:1d:60:
                    da:1b:6a:12:76:2c:25:48:6b:97:41:05:0b:ee:c3:
                    f1:b1:08:31:f0:33:5c:d0:86:d0:e5:2f:2b:5a:d0:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:65:2B:91:F5:F6:57:28:93:06:CF:38:C1:75:28:7E:42:C2:D5
            X509v3 Authority Key Identifier:
                keyid:B1:75:3C:6D:09:8B:56:11:6C:28:C1:D8:2A:10:E1:30:3B:F3:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXU8bQmLVhFsKMHYKhDhMDvz3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:09:d2:5b:29:4b:cc:61:97:ff:95:9f:bb:04:c2:21:8f:
         59:32:28:e6:bb:a8:08:dd:2e:86:39:a5:15:bc:9a:f2:70:7d:
         42:cc:bc:4d:3f:7a:6d:a9:24:67:f7:84:12:82:d7:7d:70:ac:
         4b:c7:b4:48:92:ca:4a:b5:31:b3:07:63:c1:42:65:5e:63:6d:
         e8:11:58:8e:5e:fe:78:9c:06:ca:03:71:bc:cc:04:04:db:ab:
         e0:ba:44:31:b3:d7:52:c4:69:3b:4d:66:85:a0:d1:80:9e:ba:
         79:fb:a5:2a:88:32:23:8d:5b:0d:92:16:55:8b:a8:7d:e8:44:
         f1:89:a7:2b:76:85:d5:fe:59:77:06:34:f9:ad:13:7f:46:fc:
         93:7d:ef:03:29:ba:3c:10:74:92:c0:b0:cf:8f:e4:fb:70:ea:
         3b:e3:8a:93:a1:5a:49:28:d3:49:27:97:97:cd:ef:ff:8d:73:
         60:58:a9:eb:7d:63:58:b5:9e:20:07:d8:ba:fa:d5:28:ee:09:
         1b:48:ce:53:06:24:f4:3e:16:b6:5d:58:dc:be:ef:26:59:aa:
         5b:ca:ae:f5:6f:59:84:c5:50:d1:cf:86:ec:50:ec:89:ea:03:
         0b:8f:aa:46:f0:c2:e0:50:35:4b:72:f8:b7:b0:44:1f:d5:1b:
         9e:95:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----