Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/875053-f0ae-4d2e-9b22-f43688738cb1/1/XkS3FWijc9Ybl4HzWLAM60gJzjI.mft
File:                     XkS3FWijc9Ybl4HzWLAM60gJzjI.mft (raw, json)
Hash identifier:          /wee/Ct31y8PBYSbaB/fD/PKU4wBomPJN0N5EhDDWrE=
Subject key identifier:   3B:B9:E0:C5:EE:5F:AF:9A:1B:F0:63:0C:34:1F:C9:75:15:4B:43:2D
Authority key identifier: 5E:44:B7:15:68:A3:73:D6:1B:97:81:F3:58:B0:0C:EB:48:09:CE:32
Certificate issuer:       /CN=5e44b71568a373d61b9781f358b00ceb4809ce32
Certificate serial:       019000F45BCC82432189844AEF7FEB5D08B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkS3FWijc9Ybl4HzWLAM60gJzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/875053-f0ae-4d2e-9b22-f43688738cb1/1/XkS3FWijc9Ybl4HzWLAM60gJzjI.mft
Manifest number:          014E
Signing time:             Mon 10 Jun 2024 07:02:12 +0000
Manifest this update:     Mon 10 Jun 2024 07:02:12 +0000
Manifest next update:     Tue 11 Jun 2024 07:02:12 +0000
Files and hashes:         1: XkS3FWijc9Ybl4HzWLAM60gJzjI.crl (hash: IqlBwQzfj4Zp6j6sGDO+UYe7xp+4tQgWYNI+8wtp0pI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:00:f4:5b:cc:82:43:21:89:84:4a:ef:7f:eb:5d:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e44b71568a373d61b9781f358b00ceb4809ce32
        Validity
            Not Before: Jun 10 07:02:12 2024 GMT
            Not After : Jun 11 07:02:12 2024 GMT
        Subject: CN=3bb9e0c5ee5faf9a1bf0630c341fc975154b432d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:b5:3d:1b:00:a6:fe:01:44:fd:08:de:42:
                    2f:d4:b8:aa:18:39:6c:1b:a2:5d:58:7f:94:87:2a:
                    91:96:5f:10:e8:c0:bc:f3:de:f6:d2:96:6c:61:ba:
                    00:b9:7e:24:40:1d:45:e9:1b:1b:91:7d:db:a5:66:
                    f0:8a:2a:5d:4f:54:11:38:25:30:ca:d8:a3:8f:b3:
                    28:82:f0:ae:02:11:01:00:0f:e3:f5:b2:65:94:a7:
                    bf:15:f3:25:3a:87:41:22:ed:88:0f:8f:79:ff:74:
                    a2:42:a6:27:e7:53:6c:5d:0c:63:e4:40:c7:d0:21:
                    5e:94:4a:50:b3:02:4e:de:08:34:6a:41:2d:f2:57:
                    4e:45:5b:74:42:bb:b5:2c:18:d9:7c:e1:dc:be:dd:
                    43:16:b4:05:3a:79:bc:ce:aa:01:06:e2:55:0b:ec:
                    61:f8:a9:e6:36:ed:a9:e2:bb:a5:2e:2d:50:4e:e6:
                    0e:53:92:02:e7:a2:ee:20:8c:ad:f2:39:e4:5a:9e:
                    77:c5:d2:8a:5b:be:16:74:74:04:cc:79:3d:2d:34:
                    ed:bc:88:fd:36:10:03:eb:11:e1:6c:36:d4:d2:96:
                    fb:c9:a5:15:d6:4d:ca:2f:cd:c3:e5:f5:4e:d2:0b:
                    7e:59:b0:eb:9e:e1:81:57:47:a1:95:19:2f:84:51:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:E0:C5:EE:5F:AF:9A:1B:F0:63:0C:34:1F:C9:75:15:4B:43:2D
            X509v3 Authority Key Identifier:
                keyid:5E:44:B7:15:68:A3:73:D6:1B:97:81:F3:58:B0:0C:EB:48:09:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkS3FWijc9Ybl4HzWLAM60gJzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/875053-f0ae-4d2e-9b22-f43688738cb1/1/XkS3FWijc9Ybl4HzWLAM60gJzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/875053-f0ae-4d2e-9b22-f43688738cb1/1/XkS3FWijc9Ybl4HzWLAM60gJzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:bb:91:24:36:0e:0a:58:bc:fc:d2:d6:f9:e9:c9:10:84:
         69:29:aa:00:5f:7f:24:8e:b4:2f:e9:ab:94:61:f7:e4:e1:37:
         db:38:92:47:3a:3c:63:30:ca:be:ac:ae:c3:bd:9b:31:b5:4c:
         ea:3e:e3:df:c4:02:98:78:78:a3:a8:3a:ed:09:bb:19:66:c9:
         da:d2:10:e6:b2:c5:fa:e3:e7:5a:e6:d5:a5:ea:a2:cc:53:07:
         3a:3b:d8:d1:8b:55:77:32:c4:53:91:32:36:35:66:0d:a0:60:
         df:eb:30:fe:07:cf:67:98:0f:6a:cf:25:4c:3a:d2:97:ad:23:
         19:17:aa:b9:0e:13:40:a7:30:3f:57:e5:2e:c5:47:65:a3:09:
         a7:b0:11:e1:07:cb:c1:67:c4:f5:05:66:71:ea:9a:0c:6f:1f:
         32:5c:d3:e1:20:58:4f:b1:ee:1d:9f:5c:90:59:b5:bc:54:09:
         87:89:9b:85:23:6f:78:8e:f0:70:0c:58:13:2b:e7:53:b6:29:
         10:ee:f4:db:26:62:87:48:61:05:06:08:be:e8:1a:6a:50:2b:
         8b:3c:22:1b:40:12:9f:5b:85:b7:d9:21:39:4f:57:4d:36:20:
         f5:b1:e2:79:0a:e2:b2:26:8c:c0:6b:1c:f9:16:2d:c3:d8:05:
         bb:d9:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----