Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
File:                     C1SAW-1aDw81rXLTAvMxbI1AYyY.mft (raw, json)
Hash identifier:          7Ho5a3YvMMLWOXYId2a2YCsUdWrLR/MP8ON62M6TVXw=
Subject key identifier:   32:D5:95:B9:44:DD:79:C3:48:27:19:9D:3D:4F:26:3B:F1:BC:E5:31
Authority key identifier: 0B:54:80:5B:ED:5A:0F:0F:35:AD:72:D3:02:F3:31:6C:8D:40:63:26
Certificate issuer:       /CN=0b54805bed5a0f0f35ad72d302f3316c8d406326
Certificate serial:       019346715E230E48811140211C6BA4FF7F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1SAW-1aDw81rXLTAvMxbI1AYyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
Manifest number:          07A9
Signing time:             Tue 19 Nov 2024 22:00:54 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:54 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:54 +0000
Files and hashes:         1: C1SAW-1aDw81rXLTAvMxbI1AYyY.crl (hash: py9jNXz1DnTKg0hzoWxmVotoAJwvzWWkTK4mYpi8klw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:5e:23:0e:48:81:11:40:21:1c:6b:a4:ff:7f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b54805bed5a0f0f35ad72d302f3316c8d406326
        Validity
            Not Before: Nov 19 22:00:54 2024 GMT
            Not After : Nov 20 22:00:54 2024 GMT
        Subject: CN=32d595b944dd79c34827199d3d4f263bf1bce531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:73:eb:0b:e6:a9:af:30:cc:7c:a3:85:cc:
                    97:7a:29:87:44:e2:a3:28:43:cc:83:77:ce:ea:5f:
                    b5:09:6d:dd:f7:d3:fb:65:b3:02:8f:d0:e1:ec:a4:
                    23:e8:12:a3:34:37:ce:37:02:55:40:93:50:97:10:
                    ce:fb:79:11:67:e1:f4:86:80:45:57:17:b8:8a:dc:
                    ac:f7:46:03:8c:8b:be:c6:25:96:9b:7e:49:02:2d:
                    36:fc:13:19:d1:f8:28:43:0f:9c:72:2b:c4:ac:50:
                    f3:04:b7:1b:86:63:9d:b3:b5:b6:f6:df:76:a7:ca:
                    66:25:f9:81:75:e2:f2:e2:8f:f8:23:49:ab:34:14:
                    e5:0a:69:ca:aa:45:e1:04:09:4b:61:4b:95:43:c0:
                    6a:87:f0:cf:88:f5:92:c0:2b:f2:76:d2:96:0e:f8:
                    50:27:1f:73:e1:97:50:46:54:52:bd:87:2c:33:1a:
                    17:6a:a1:19:56:fd:5b:e9:c1:ba:b3:c8:76:45:4d:
                    d8:06:b2:6c:1b:76:66:25:9d:d0:a1:34:79:c2:52:
                    36:40:c3:10:8b:fe:df:0c:79:da:ff:7f:2b:1b:f1:
                    4c:04:0a:32:65:9a:60:ec:eb:b3:6e:d7:6a:76:b1:
                    16:68:dc:d7:93:e3:22:21:c9:3c:58:04:f3:cd:6d:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:95:B9:44:DD:79:C3:48:27:19:9D:3D:4F:26:3B:F1:BC:E5:31
            X509v3 Authority Key Identifier:
                keyid:0B:54:80:5B:ED:5A:0F:0F:35:AD:72:D3:02:F3:31:6C:8D:40:63:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1SAW-1aDw81rXLTAvMxbI1AYyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:31:1b:c4:a4:56:27:41:e2:77:da:61:cb:00:f1:b1:be:3b:
         d5:18:37:0e:f5:8b:e5:a4:31:ab:67:ac:85:07:69:2f:5d:10:
         6b:03:33:26:c1:f3:c0:41:74:0a:8c:16:ae:08:82:8a:d9:1d:
         fb:37:7a:b7:25:4b:b8:35:cb:2d:46:4b:10:16:1c:6d:1f:ee:
         74:8b:63:23:a6:c6:af:16:b0:bd:b8:d3:4d:ef:0a:7f:1b:89:
         45:39:b4:12:3f:c6:cb:40:fb:8d:ed:db:06:54:5c:fc:2b:5f:
         8c:1d:23:24:6e:b4:8c:a2:15:92:9d:af:4f:db:7b:a6:00:29:
         01:0c:fe:80:54:a2:11:ac:32:81:61:b3:1e:ce:62:62:e1:06:
         8d:8e:01:21:85:2b:a0:cf:07:b9:cf:7b:7a:54:53:03:50:25:
         4d:41:35:38:e7:0d:07:5f:39:4f:92:e4:02:01:cf:ca:41:c3:
         29:16:cc:2d:7f:83:f3:93:7f:18:61:3f:61:c1:63:d3:b5:50:
         68:23:50:a5:f8:e5:95:f2:46:92:9e:13:ed:77:ac:90:73:ee:
         a1:55:d9:0f:8a:e2:27:fb:57:ca:21:ad:9b:c8:66:3b:8c:ac:
         32:33:b1:7a:5b:65:21:4b:88:a6:c8:c4:73:5d:40:e2:1d:0f:
         6a:de:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----