Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dcd5e3-fe1a-4548-b9ae-f99fb92dabe7/1/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.mft
File:                     bVvB4IX2Ytrn9Kdr_4bJdawLcvo.mft (raw, json)
Hash identifier:          kBKQi8dcWf/3fMAWhQ8l7B9i5bzCPz//NbjyOouAE+M=
Subject key identifier:   9A:13:C4:C8:78:5A:27:25:7F:4D:0C:A8:E1:28:02:53:8B:D9:DD:BF
Authority key identifier: 6D:5B:C1:E0:85:F6:62:DA:E7:F4:A7:6B:FF:86:C9:75:AC:0B:72:FA
Certificate issuer:       /CN=6d5bc1e085f662dae7f4a76bff86c975ac0b72fa
Certificate serial:       018CEDE235ACE0B7F7B63E46F50F1961C031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/dcd5e3-fe1a-4548-b9ae-f99fb92dabe7/1/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.mft
Manifest number:          0677
Signing time:             Tue 09 Jan 2024 11:01:14 +0000
Manifest this update:     Tue 09 Jan 2024 11:01:14 +0000
Manifest next update:     Wed 10 Jan 2024 11:01:14 +0000
Files and hashes:         1: bVvB4IX2Ytrn9Kdr_4bJdawLcvo.crl (hash: etE3H27pYhyYnQmN2qY1V+hxg9MW3uhOJjOAPLxAI1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:e2:35:ac:e0:b7:f7:b6:3e:46:f5:0f:19:61:c0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5bc1e085f662dae7f4a76bff86c975ac0b72fa
        Validity
            Not Before: Jan  9 11:01:14 2024 GMT
            Not After : Jan 10 11:01:14 2024 GMT
        Subject: CN=9a13c4c8785a27257f4d0ca8e12802538bd9ddbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:0b:fe:66:93:db:b4:ac:84:3b:10:e8:96:
                    f8:55:ac:35:fc:de:07:0a:9a:07:71:51:8d:59:b0:
                    95:83:70:17:a3:75:f0:38:fa:fe:70:d6:bc:f8:95:
                    0e:0e:fd:27:d0:93:20:7d:9b:aa:05:87:2d:79:dd:
                    9b:6b:60:aa:ec:68:a7:af:29:28:e5:5b:f7:5b:0d:
                    ce:dd:79:6c:27:41:6e:76:b6:c5:8a:ba:31:39:26:
                    72:93:69:83:84:96:24:da:67:3e:58:9a:8b:c2:d6:
                    2a:ac:ae:d8:2a:54:83:97:a0:83:b3:74:c3:60:74:
                    62:17:2e:68:04:f5:29:04:69:c7:87:2a:b6:21:c0:
                    99:18:5c:89:d2:ff:c4:03:b2:2a:f2:d4:b3:3c:9c:
                    59:db:da:df:9b:b2:10:42:8c:8e:36:d1:27:27:00:
                    28:2f:93:d9:43:c5:c4:e7:73:53:12:60:01:bc:77:
                    eb:aa:b9:87:dd:49:e5:79:d6:88:8f:5b:66:e0:bb:
                    39:a9:4a:e6:56:3f:c3:56:24:0e:26:9b:7b:08:46:
                    ed:0f:fe:32:33:f6:13:e9:d5:11:4a:f6:bf:6b:0d:
                    ec:4f:29:69:8f:1a:68:27:b6:0e:8b:bd:74:83:63:
                    cf:55:60:1a:09:3d:d7:b0:ff:41:3c:79:6b:c1:40:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:13:C4:C8:78:5A:27:25:7F:4D:0C:A8:E1:28:02:53:8B:D9:DD:BF
            X509v3 Authority Key Identifier:
                keyid:6D:5B:C1:E0:85:F6:62:DA:E7:F4:A7:6B:FF:86:C9:75:AC:0B:72:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dcd5e3-fe1a-4548-b9ae-f99fb92dabe7/1/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dcd5e3-fe1a-4548-b9ae-f99fb92dabe7/1/bVvB4IX2Ytrn9Kdr_4bJdawLcvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:d0:83:e9:76:51:d1:c5:d8:69:15:ea:ba:40:50:0e:66:
         20:98:bc:82:c4:9c:0f:6e:0a:2f:68:c2:4d:27:a2:32:de:87:
         71:c3:16:43:50:a4:79:0f:97:dc:18:df:e2:59:6f:c4:17:46:
         1f:d1:14:f9:ab:b9:a8:4a:84:1b:28:cb:42:29:4a:97:c2:e0:
         af:87:ce:3b:bc:ab:f1:89:05:39:57:a4:d5:eb:50:d4:1f:58:
         36:ec:2e:a3:11:6f:42:18:16:a8:24:93:7c:83:46:3e:63:ae:
         8e:de:5c:19:80:51:75:3d:44:bc:9f:2c:ab:90:b1:7d:a8:b0:
         71:98:e3:f1:52:10:6e:dc:ca:3e:ad:81:2f:c2:96:8c:bc:23:
         35:61:46:dc:fa:c4:46:c8:55:17:28:15:f5:cb:d8:52:24:d2:
         21:f0:b4:98:2b:fb:67:df:52:8a:2a:a8:5c:3b:24:10:d1:15:
         18:fb:9c:83:8c:35:90:9e:4d:7a:70:0b:af:38:b4:77:7c:60:
         13:fa:93:be:a4:c8:a1:f3:67:e7:f8:d6:56:da:f2:56:ee:80:
         2e:fe:f2:32:49:f5:7e:25:09:c4:26:7d:b2:6c:a1:c8:e1:76:
         5d:10:eb:c4:c7:c5:04:03:d6:65:6f:0e:03:75:1a:87:2d:83:
         1a:cd:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----