Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fffbb9-57c0-4d37-92fd-f687f5e79488/1/sJAVbN_qVhyRjI5qqRJwCIF--gg.mft
File:                     sJAVbN_qVhyRjI5qqRJwCIF--gg.mft (raw, json)
Hash identifier:          VMb72kzxrBOM1i/wZE9mg5/ycTHtR0xVwGh+B8Py8n4=
Subject key identifier:   A2:47:66:49:F8:85:FE:81:D2:E8:56:42:18:D1:BF:66:A7:4D:95:24
Authority key identifier: B0:90:15:6C:DF:EA:56:1C:91:8C:8E:6A:A9:12:70:08:81:7E:FA:08
Certificate issuer:       /CN=b090156cdfea561c918c8e6aa9127008817efa08
Certificate serial:       0192AF613E3E4720A364C4B1754B2EB2818B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJAVbN_qVhyRjI5qqRJwCIF--gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fffbb9-57c0-4d37-92fd-f687f5e79488/1/sJAVbN_qVhyRjI5qqRJwCIF--gg.mft
Manifest number:          0404
Signing time:             Mon 21 Oct 2024 14:00:38 +0000
Manifest this update:     Mon 21 Oct 2024 14:00:38 +0000
Manifest next update:     Tue 22 Oct 2024 14:00:38 +0000
Files and hashes:         1: sJAVbN_qVhyRjI5qqRJwCIF--gg.crl (hash: FyaVSnx+ny6eaRs4fIgVVkgSNVbGzCckFR3XZ7vDcX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:61:3e:3e:47:20:a3:64:c4:b1:75:4b:2e:b2:81:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b090156cdfea561c918c8e6aa9127008817efa08
        Validity
            Not Before: Oct 21 14:00:38 2024 GMT
            Not After : Oct 22 14:00:38 2024 GMT
        Subject: CN=a2476649f885fe81d2e8564218d1bf66a74d9524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:42:2c:06:60:93:25:a5:77:6d:a2:21:3c:
                    ed:44:7d:4d:7e:e3:64:b7:3d:ad:ad:04:69:7a:60:
                    36:e1:57:52:1c:00:9d:ec:9c:cb:9e:6b:71:b8:9e:
                    1a:bf:20:56:58:c7:b3:2e:78:16:7f:4f:ee:13:0a:
                    34:49:7e:da:d5:fc:7b:ef:6e:ca:54:40:64:72:e3:
                    98:05:d2:ab:b1:65:a1:4e:9c:0f:ea:5d:c9:d9:f2:
                    03:b8:d8:a5:9a:58:21:fe:d1:41:15:f3:d7:d1:97:
                    c5:bf:b3:6b:2f:58:13:b7:d0:4e:24:75:d5:c0:75:
                    72:46:ac:af:64:d9:c0:e1:a4:6b:41:22:6a:a7:b9:
                    62:ed:e7:80:79:6c:37:f0:63:e7:2a:e8:3b:ce:f8:
                    14:8b:de:23:21:15:d4:6b:41:98:2a:13:27:1d:ac:
                    58:9b:33:e6:1e:16:f5:ab:45:8f:a1:a8:b3:2b:e9:
                    a0:19:10:af:ff:a8:e7:96:01:1a:5a:e2:19:c2:a2:
                    82:31:69:03:6f:65:ff:57:f0:fa:04:f9:98:e0:bf:
                    fb:8a:50:c3:d7:38:18:de:e0:9e:f3:13:75:4d:29:
                    be:37:eb:41:f1:e9:4a:01:4f:b8:7f:c9:29:bc:73:
                    8a:fd:c3:23:2a:0a:2c:fe:a0:5f:17:5e:d5:ab:94:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:66:49:F8:85:FE:81:D2:E8:56:42:18:D1:BF:66:A7:4D:95:24
            X509v3 Authority Key Identifier:
                keyid:B0:90:15:6C:DF:EA:56:1C:91:8C:8E:6A:A9:12:70:08:81:7E:FA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJAVbN_qVhyRjI5qqRJwCIF--gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fffbb9-57c0-4d37-92fd-f687f5e79488/1/sJAVbN_qVhyRjI5qqRJwCIF--gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fffbb9-57c0-4d37-92fd-f687f5e79488/1/sJAVbN_qVhyRjI5qqRJwCIF--gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:85:4e:d6:b5:e6:d6:b7:3c:42:43:84:69:72:12:a3:0a:a3:
         d7:31:da:6a:ec:1c:51:b2:e2:0b:b4:6d:1b:6b:6e:54:a9:e7:
         21:f1:d0:a0:a5:a8:e8:2e:08:ce:d2:00:39:2f:9b:d5:fa:8f:
         62:c9:f7:25:1f:dd:c2:bd:7f:e6:b3:15:85:91:ac:f6:eb:be:
         d5:a9:55:77:4d:4b:ad:54:a1:b6:e4:0c:05:75:5c:d2:61:53:
         5f:64:a2:56:c0:40:f6:67:44:6a:b4:86:a3:3e:98:dd:79:ad:
         ae:67:b7:e6:2c:37:54:7d:e6:43:49:5c:55:7e:4c:37:09:27:
         7d:62:c7:55:54:42:44:1f:2f:94:3e:e3:83:d5:27:47:57:6d:
         19:12:5b:22:86:47:6e:7a:47:69:23:78:21:03:7b:44:c6:53:
         05:d5:ce:87:c5:cb:6c:99:57:f8:a5:61:45:22:21:9c:f5:c9:
         a9:0c:c3:b4:77:72:d7:42:e6:62:20:e1:2b:07:99:9b:6f:23:
         30:da:2b:e7:dd:74:52:5d:40:74:e1:7e:5c:58:6e:85:41:c7:
         87:1f:17:1e:1f:1f:13:cd:84:b5:5f:27:b4:95:a5:27:ce:e4:
         36:64:49:6b:5e:0f:3e:76:89:47:cf:f7:0c:da:1e:a4:4b:d2:
         8d:ff:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----