Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft
File:                     35U8EJpyGMtop-GCaQOJHV5DGl0.mft (raw, json)
Hash identifier:          6V0gZrhy01za0UMhGXc54mIx31ekmuUKQIdyIzehDpE=
Subject key identifier:   B5:A2:63:18:DD:7B:4A:22:CF:6C:17:10:D7:CA:81:80:EE:C9:F9:33
Authority key identifier: DF:95:3C:10:9A:72:18:CB:68:A7:E1:82:69:03:89:1D:5E:43:1A:5D
Certificate issuer:       /CN=df953c109a7218cb68a7e1826903891d5e431a5d
Certificate serial:       01934715B038C36DEA6B7B0F75CDF088E57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35U8EJpyGMtop-GCaQOJHV5DGl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft
Manifest number:          069B
Signing time:             Wed 20 Nov 2024 01:00:23 +0000
Manifest this update:     Wed 20 Nov 2024 01:00:23 +0000
Manifest next update:     Thu 21 Nov 2024 01:00:23 +0000
Files and hashes:         1: 35U8EJpyGMtop-GCaQOJHV5DGl0.crl (hash: 5sxWnnX42Sl7rnLS2KwSj1AnxEPanV+5kV24DtewH4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:15:b0:38:c3:6d:ea:6b:7b:0f:75:cd:f0:88:e5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df953c109a7218cb68a7e1826903891d5e431a5d
        Validity
            Not Before: Nov 20 01:00:23 2024 GMT
            Not After : Nov 21 01:00:23 2024 GMT
        Subject: CN=b5a26318dd7b4a22cf6c1710d7ca8180eec9f933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:67:11:21:8e:0d:0b:f4:93:2f:09:58:4b:
                    8f:c4:d4:8d:52:b5:7a:83:53:ad:df:63:6e:87:2f:
                    e2:be:aa:10:b4:da:c0:35:87:7a:98:d7:b6:3e:37:
                    be:df:49:86:47:e1:56:38:ce:5f:1f:16:14:5d:ab:
                    b4:bf:c1:ae:b9:d0:cd:a1:01:d8:b9:cf:8e:00:90:
                    ee:8e:84:2d:b4:13:a7:bd:fd:f5:6e:ec:ea:93:0e:
                    d4:74:c6:cc:25:03:de:ba:f1:f9:d2:0d:5f:e8:64:
                    de:3c:0a:bd:1c:7f:b5:14:b2:81:46:d1:c0:63:78:
                    70:cb:8b:06:84:cd:c3:62:15:ce:2e:f6:f1:ff:5b:
                    f5:98:27:0b:04:31:d6:15:e0:64:ed:8e:13:57:0c:
                    1a:b1:01:6e:dc:fc:67:44:16:56:0b:43:f8:eb:24:
                    09:e4:6d:4f:ef:07:6c:aa:73:ea:cf:64:7e:95:54:
                    c8:e0:37:8d:f0:0f:7e:d7:eb:f8:36:60:6c:66:a8:
                    30:84:89:c7:ae:07:c4:78:48:10:bc:05:4d:9e:5c:
                    f5:f4:cc:28:2d:b0:3a:c0:a8:a9:1b:9c:a3:e4:1b:
                    5c:75:ee:32:db:b3:b7:57:6e:be:04:c3:0e:ad:39:
                    e2:71:dc:b0:ae:40:73:0b:f0:ba:0a:a0:ff:05:6b:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:63:18:DD:7B:4A:22:CF:6C:17:10:D7:CA:81:80:EE:C9:F9:33
            X509v3 Authority Key Identifier:
                keyid:DF:95:3C:10:9A:72:18:CB:68:A7:E1:82:69:03:89:1D:5E:43:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35U8EJpyGMtop-GCaQOJHV5DGl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:34:29:35:5c:bf:80:3e:07:26:70:44:ca:cb:ee:ee:66:bf:
         92:e6:ca:fd:b5:af:97:d0:66:03:31:be:b4:7c:bc:d3:90:74:
         ad:ae:91:28:0e:87:b4:45:55:b8:88:be:02:11:68:72:6e:13:
         1f:3b:4c:85:10:cd:95:45:7a:9d:7a:99:0b:ca:06:31:82:d4:
         8d:ac:c9:3c:96:49:e2:7f:ce:fd:5b:31:0f:31:7e:93:a6:1d:
         36:65:79:02:b2:b1:35:72:50:84:b9:f0:c2:b4:48:eb:dd:a8:
         26:79:e0:f7:e5:a8:3f:33:42:1e:2b:9d:96:2e:31:ee:67:0d:
         5f:ed:72:c9:c8:86:67:da:96:8a:be:dd:76:b5:8d:a1:e1:0e:
         2e:67:fa:02:f8:88:23:ed:cd:a1:10:a8:44:b6:be:11:8d:95:
         38:af:c8:0a:68:4e:db:e7:9f:8d:79:64:a5:da:2a:e1:23:2f:
         54:71:e1:14:9b:e3:52:51:08:34:8b:c6:cb:18:c3:d1:92:58:
         e8:5a:8b:eb:8f:f3:d1:3c:85:bc:4f:43:29:8d:6a:ef:2f:d7:
         62:be:4c:f0:54:34:02:6f:0a:9a:78:c0:cf:79:79:fe:a8:23:
         40:0e:ec:de:22:ed:be:01:56:cc:32:85:cd:0d:59:c0:5f:98:
         cc:cc:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----