Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b9f11e-9771-4794-abf4-dbd64da70fd4/1/3E1JroMG9GkbHW6IOuKxzAxs-N0.mft
File:                     3E1JroMG9GkbHW6IOuKxzAxs-N0.mft (raw, json)
Hash identifier:          kHsesH2XTc9KPa4nZ6llo2cfwaAbMLNdFWz8G3R081s=
Subject key identifier:   8F:44:12:12:8B:1E:4F:87:92:F5:28:35:B0:BA:E1:4D:E3:6D:72:E4
Authority key identifier: DC:4D:49:AE:83:06:F4:69:1B:1D:6E:88:3A:E2:B1:CC:0C:6C:F8:DD
Certificate issuer:       /CN=dc4d49ae8306f4691b1d6e883ae2b1cc0c6cf8dd
Certificate serial:       019345CC3F0E69797ECAA048ABFD54961869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E1JroMG9GkbHW6IOuKxzAxs-N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b9f11e-9771-4794-abf4-dbd64da70fd4/1/3E1JroMG9GkbHW6IOuKxzAxs-N0.mft
Manifest number:          1365
Signing time:             Tue 19 Nov 2024 19:00:33 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:33 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:33 +0000
Files and hashes:         1: 3E1JroMG9GkbHW6IOuKxzAxs-N0.crl (hash: RZWqD7ZjrqOJoKxq6JuewAsKTrtOZfxR3XMgW80BUKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:3f:0e:69:79:7e:ca:a0:48:ab:fd:54:96:18:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4d49ae8306f4691b1d6e883ae2b1cc0c6cf8dd
        Validity
            Not Before: Nov 19 19:00:33 2024 GMT
            Not After : Nov 20 19:00:33 2024 GMT
        Subject: CN=8f4412128b1e4f8792f52835b0bae14de36d72e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:3b:c8:e7:6c:67:8c:6b:e9:89:af:e8:49:
                    f2:c5:13:08:fc:a9:d1:00:3c:c1:96:19:3f:64:09:
                    07:ce:f0:f4:ef:08:e1:3c:0f:bf:de:b1:c2:d4:bd:
                    fc:35:da:27:57:a6:79:e0:54:6a:f2:a9:25:29:a6:
                    26:8c:67:0f:dd:7e:24:06:d0:43:77:0b:c7:51:cd:
                    41:14:4c:62:73:1b:0d:12:fd:eb:6f:42:93:37:8d:
                    01:d5:97:0b:97:e4:eb:5e:7e:3b:c5:59:02:9c:2e:
                    bf:da:f1:6d:3b:de:a1:d0:73:e3:7f:11:37:8d:25:
                    c0:5f:57:df:e0:74:44:8a:29:15:47:ff:80:e7:de:
                    35:0c:ba:d7:b4:d0:ee:1a:3e:e7:c2:53:86:5f:cd:
                    56:b8:ee:fc:39:25:70:f2:6f:24:d6:47:ad:ac:14:
                    1f:63:71:34:dd:44:40:f6:ea:ba:0e:74:0e:29:1c:
                    19:33:6b:8b:84:b2:34:b9:f0:e6:57:55:ab:eb:31:
                    ec:0d:d7:f0:41:90:13:86:1b:ce:91:cb:15:5b:77:
                    87:83:c7:b0:37:79:03:00:f8:e9:c2:06:84:6c:64:
                    98:a2:2a:c7:3c:4d:82:43:8d:f6:13:e0:59:18:aa:
                    ed:02:ef:85:44:cc:71:a2:0d:1b:e3:a6:09:29:73:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:44:12:12:8B:1E:4F:87:92:F5:28:35:B0:BA:E1:4D:E3:6D:72:E4
            X509v3 Authority Key Identifier:
                keyid:DC:4D:49:AE:83:06:F4:69:1B:1D:6E:88:3A:E2:B1:CC:0C:6C:F8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E1JroMG9GkbHW6IOuKxzAxs-N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b9f11e-9771-4794-abf4-dbd64da70fd4/1/3E1JroMG9GkbHW6IOuKxzAxs-N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b9f11e-9771-4794-abf4-dbd64da70fd4/1/3E1JroMG9GkbHW6IOuKxzAxs-N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:88:0c:97:74:e9:76:eb:db:72:ea:c6:26:42:e0:68:c2:e6:
         16:57:98:a8:22:5f:52:da:23:c0:fe:aa:b5:dd:b9:a9:b2:0c:
         41:f4:b5:ae:9a:5c:e2:bf:f6:e1:99:b1:5b:6c:b1:12:22:dd:
         49:35:fa:de:74:0a:d5:23:43:fb:dd:fc:54:5d:a5:7d:a5:d0:
         e3:48:9b:d7:93:02:c4:ff:ae:94:97:07:88:75:e0:b3:8e:c2:
         e5:e2:89:2c:ef:e9:98:85:ad:65:70:9b:0a:5e:e1:b3:f3:30:
         ef:15:02:27:5e:30:59:75:ce:5a:7b:95:66:3e:25:ae:bc:8b:
         bf:0b:e2:7d:24:20:76:99:09:ce:81:15:ab:c0:46:a2:17:12:
         23:8c:ca:ec:d0:ae:67:2f:d9:db:b3:2b:68:6c:82:4f:7f:4e:
         f1:15:e5:9c:44:6d:b8:73:de:6a:a9:00:0f:df:27:a1:e4:cc:
         5c:ff:6f:1e:2a:28:54:95:6e:85:4b:9a:b8:88:96:1f:6d:c7:
         f2:f0:85:e5:b8:71:07:93:06:58:a4:a8:f6:b0:2d:c0:6e:a5:
         0e:6e:88:48:88:24:d8:dc:70:dd:5d:14:85:dd:85:d6:09:6d:
         61:50:b6:61:05:ed:6d:8b:c9:87:91:70:38:8d:44:50:62:b0:
         ff:0f:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----