Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
File:                     8_oS39r89zk5o5gPNSsF1Li6jYw.mft (raw, json)
Hash identifier:          Fd8Hsaco7tvykO7C42VR8bhcplPEMSFYrIZPVG8OE5E=
Subject key identifier:   8A:D5:28:BC:54:38:C5:9B:BD:7B:6F:9A:CF:6B:D0:32:99:30:14:29
Authority key identifier: F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C
Certificate issuer:       /CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
Certificate serial:       0193467156E5A7750AE6CB8ED6CBED9A933C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
Manifest number:          07C9
Signing time:             Tue 19 Nov 2024 22:00:53 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:53 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:53 +0000
Files and hashes:         1: 8_oS39r89zk5o5gPNSsF1Li6jYw.crl (hash: fSKGtzdAo9bUiUnPtgI51jEyeBHKyBqoY2q3GXkiH5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:56:e5:a7:75:0a:e6:cb:8e:d6:cb:ed:9a:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
        Validity
            Not Before: Nov 19 22:00:53 2024 GMT
            Not After : Nov 20 22:00:53 2024 GMT
        Subject: CN=8ad528bc5438c59bbd7b6f9acf6bd03299301429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:26:49:5a:f5:ef:d2:dd:da:50:c2:3c:d0:
                    4c:46:f3:2b:65:bf:79:78:b9:e3:3c:95:a9:b3:a0:
                    66:e0:78:56:b1:c1:a9:9f:dd:b9:4e:d9:e0:37:74:
                    17:79:b4:31:99:6c:6a:5e:89:2f:52:65:f1:e5:b3:
                    e0:76:8a:25:16:21:3c:68:55:2e:c3:ed:17:55:8c:
                    00:52:e4:20:96:07:7b:6d:d1:6f:af:13:49:cf:25:
                    ae:92:69:79:9e:3b:c4:82:89:e7:9e:06:11:07:78:
                    c1:6c:3d:61:67:77:69:82:3b:58:75:3c:38:ac:e0:
                    c6:ff:05:33:b8:72:76:9a:0d:46:94:09:b2:f4:0a:
                    ba:fd:0e:0c:49:4d:46:f1:91:91:78:3e:57:1f:f8:
                    63:ef:d4:77:6f:86:37:7f:8e:a7:db:14:1c:86:e3:
                    2f:a3:48:f2:56:c9:7f:a0:39:43:fa:07:01:c6:34:
                    d8:3f:ac:58:0a:93:cf:7f:9c:38:94:42:eb:c1:44:
                    90:58:ed:2f:20:13:17:03:b9:1d:2e:95:0a:7d:1f:
                    59:41:ce:bd:05:90:b6:05:a7:10:12:9f:fc:59:bb:
                    ef:14:d7:d8:ba:93:e5:fe:fc:42:43:6d:25:39:6f:
                    6a:af:85:16:fc:d8:01:11:03:55:d5:07:29:82:5d:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:28:BC:54:38:C5:9B:BD:7B:6F:9A:CF:6B:D0:32:99:30:14:29
            X509v3 Authority Key Identifier:
                keyid:F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:42:cc:6f:3a:29:e4:5d:59:68:66:8e:90:0f:a8:13:17:
         84:35:28:19:eb:7a:d4:0d:1c:6f:e2:94:c6:83:72:67:55:3e:
         56:22:8d:a2:da:97:38:d3:8e:71:39:fb:9d:49:43:61:72:16:
         3e:2b:f6:d6:2e:ea:bf:fa:02:9b:83:80:b7:35:41:87:a2:0e:
         a7:be:d3:27:6c:67:73:7c:1c:72:2b:a8:77:a9:4f:d8:bc:81:
         be:ad:58:21:31:15:4b:0c:43:79:a3:cb:14:ab:b9:cd:c5:34:
         8a:b3:ec:30:74:a5:98:24:06:e9:a7:a5:b0:ce:3a:d9:78:df:
         89:b6:52:c3:db:6c:09:80:4d:7a:77:b8:71:21:ba:a9:5e:a1:
         6c:a6:b8:94:da:3b:88:a7:91:32:e8:81:2c:71:c9:09:6c:38:
         77:91:08:fa:c5:b5:83:1f:ba:58:9f:19:f8:02:3f:f2:c6:3d:
         61:18:90:f6:49:a8:00:a6:b1:95:aa:4c:0d:e8:22:f1:03:fb:
         ed:d4:8b:46:4b:14:32:f8:1d:a6:a8:a6:8e:5f:e2:28:dc:79:
         b5:68:8c:ed:5b:3c:30:7a:dc:f9:1f:30:d2:a7:22:f4:24:0f:
         37:1a:92:e3:b8:5b:bd:83:89:29:4e:a3:ea:c5:11:28:b8:c5:
         78:95:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----