Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
File:                     x8AThitsVvQ950jt8kqTGRudFhw.mft (raw, json)
Hash identifier:          KkfwC47WScvA9HuY8TQi4Sjtk9vPDueZQbBhlKjibKY=
Subject key identifier:   54:4F:CC:20:04:8B:27:2E:84:21:E1:F9:7E:B0:51:12:01:3A:AF:9B
Authority key identifier: C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C
Certificate issuer:       /CN=c7c013862b6c56f43de748edf24a93191b9d161c
Certificate serial:       019346A7DCEC82DA346CCCC265B85666172D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
Manifest number:          013A
Signing time:             Tue 19 Nov 2024 23:00:26 +0000
Manifest this update:     Tue 19 Nov 2024 23:00:26 +0000
Manifest next update:     Wed 20 Nov 2024 23:00:26 +0000
Files and hashes:         1: x8AThitsVvQ950jt8kqTGRudFhw.crl (hash: PpDQd3lentBowxH42SAI7+7K71pSAg99PQ6A7/RnBtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:a7:dc:ec:82:da:34:6c:cc:c2:65:b8:56:66:17:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c013862b6c56f43de748edf24a93191b9d161c
        Validity
            Not Before: Nov 19 23:00:26 2024 GMT
            Not After : Nov 20 23:00:26 2024 GMT
        Subject: CN=544fcc20048b272e8421e1f97eb05112013aaf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:42:43:4a:58:fe:8c:06:fb:f0:cd:3d:7c:
                    6f:d9:5a:9e:43:91:d0:18:97:59:9f:2c:a2:61:aa:
                    c5:09:a7:7b:14:cc:8c:53:ba:11:68:74:bb:8b:b6:
                    2c:73:8f:31:10:0c:06:1e:42:d4:50:72:1b:48:62:
                    e3:65:40:57:0f:c9:64:34:4f:b4:33:ac:83:7c:fc:
                    1a:ec:42:2e:ce:64:5b:d0:d2:27:37:86:a3:a9:dd:
                    e6:89:5e:54:7b:78:c7:18:d2:1c:4d:f9:2d:96:61:
                    10:52:c9:c6:2e:21:c3:e0:54:43:33:f2:d9:6d:5b:
                    40:46:f5:15:7c:17:3c:45:b0:07:46:1b:37:00:81:
                    d9:fe:b6:a3:ea:c5:13:2b:08:17:b4:63:2b:ef:b7:
                    75:33:23:4d:84:f3:76:1a:59:f8:71:fb:a8:fa:b0:
                    f1:20:0b:ad:6a:2b:72:07:e2:82:42:82:6b:e8:c7:
                    83:ff:69:a6:31:21:a6:a6:ef:ae:aa:a6:45:82:50:
                    d3:47:4e:90:65:67:11:fd:c6:32:dc:00:f1:4b:28:
                    88:f3:76:46:7e:6a:93:ab:c4:5c:73:3d:aa:d9:b1:
                    87:71:6a:fc:e3:87:1b:52:2a:06:6d:6b:60:84:39:
                    05:27:67:44:73:18:2d:07:61:12:81:8a:af:23:0d:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:CC:20:04:8B:27:2E:84:21:E1:F9:7E:B0:51:12:01:3A:AF:9B
            X509v3 Authority Key Identifier:
                keyid:C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:07:61:79:25:b7:28:14:6a:d5:82:e4:e5:75:a1:e7:a9:
         ec:53:9c:94:44:dd:b1:7c:6e:69:78:17:0d:4b:2d:33:aa:c9:
         34:c7:ac:01:b8:ee:a8:39:24:cf:24:d7:65:dd:10:e1:4a:55:
         f8:e4:53:5b:2a:8a:19:1c:ff:f9:08:23:2a:e3:fc:10:32:de:
         3f:12:e9:ce:27:be:d3:83:89:33:65:69:5a:26:36:10:c7:d1:
         ee:43:e9:a8:0e:1a:00:c7:3b:b8:f1:49:bd:91:e5:93:13:2a:
         5d:a1:16:a6:eb:da:d6:d1:44:47:89:1e:5f:ea:9c:d5:7e:48:
         ba:a4:93:7f:5f:ea:70:23:9d:2a:a2:dd:56:5e:bf:16:c9:e4:
         7e:13:25:12:5f:17:28:7f:53:44:db:56:81:b0:ec:78:a9:ae:
         00:b9:82:6a:e1:4f:35:1e:63:5f:7b:e3:da:37:a3:a4:dd:3f:
         34:4b:29:ab:7a:46:95:3c:ca:04:00:36:6a:ce:c5:7f:70:70:
         d7:b0:34:41:29:17:31:67:73:aa:2b:15:8c:5b:0d:36:6d:86:
         a3:d3:f3:e7:8f:17:f1:75:0c:77:e7:24:4b:f8:6a:b2:28:d2:
         a6:ed:10:eb:2f:c4:e1:f7:4b:0d:05:1b:ea:3c:74:da:99:fb:
         4b:7a:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----