Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7b3d6c-1e9b-46d7-937b-455abbdfba53/1/KoyeCRk6iLwlPjcH2UqhB_kgWnA.mft
File:                     KoyeCRk6iLwlPjcH2UqhB_kgWnA.mft (raw, json)
Hash identifier:          j1H+UpsuobhnnNJkDJbJzpAf1jI5lzrSyzINSJB8qzw=
Subject key identifier:   07:DB:44:AF:B8:61:A7:55:0F:E2:5D:C6:B8:15:0B:CB:67:A4:12:72
Authority key identifier: 2A:8C:9E:09:19:3A:88:BC:25:3E:37:07:D9:4A:A1:07:F9:20:5A:70
Certificate issuer:       /CN=2a8c9e09193a88bc253e3707d94aa107f9205a70
Certificate serial:       019483CC94C6145DBEF0792E9719BB261D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoyeCRk6iLwlPjcH2UqhB_kgWnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7b3d6c-1e9b-46d7-937b-455abbdfba53/1/KoyeCRk6iLwlPjcH2UqhB_kgWnA.mft
Manifest number:          140A
Signing time:             Mon 20 Jan 2025 13:00:10 +0000
Manifest this update:     Mon 20 Jan 2025 13:00:10 +0000
Manifest next update:     Tue 21 Jan 2025 13:00:10 +0000
Files and hashes:         1: KoyeCRk6iLwlPjcH2UqhB_kgWnA.crl (hash: z41bGWOEAUfyxwMwhenOyOtGIYW4qoGNxiHv87zV9sA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:83:cc:94:c6:14:5d:be:f0:79:2e:97:19:bb:26:1d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c9e09193a88bc253e3707d94aa107f9205a70
        Validity
            Not Before: Jan 20 13:00:10 2025 GMT
            Not After : Jan 21 13:00:10 2025 GMT
        Subject: CN=07db44afb861a7550fe25dc6b8150bcb67a41272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:c7:8f:89:db:84:7e:56:20:9f:8e:cf:07:
                    ad:ef:95:5b:32:cb:df:99:a4:50:d5:36:e2:21:4b:
                    79:2a:bd:20:02:3c:7c:b9:57:0f:23:94:4b:54:c6:
                    ec:ec:84:23:2a:30:55:45:44:4d:4e:12:c6:0d:46:
                    01:3a:cf:f1:a1:59:22:13:23:0c:66:15:c5:fb:3a:
                    db:bd:3d:70:60:93:6e:20:9f:cf:22:9f:07:08:bd:
                    b2:fe:e8:cf:7b:21:57:f5:6e:02:b4:60:ab:eb:8f:
                    2a:fb:5d:55:e9:28:06:5e:29:2b:1b:43:95:a3:04:
                    d2:b2:74:48:98:8b:0c:98:0f:43:10:62:8a:61:b7:
                    15:ae:b0:ea:35:1c:c1:a9:d9:1c:85:27:f0:f5:60:
                    86:2a:95:11:fd:ac:4f:f7:9e:01:ca:63:a0:60:e1:
                    cb:63:b9:bd:29:42:0d:9d:e9:da:e6:74:b5:e1:3b:
                    22:d2:d4:c0:b0:02:4e:c5:23:16:e3:8f:12:ae:65:
                    81:b3:1e:f3:63:d5:8a:5e:d1:71:31:c5:db:c2:43:
                    9b:5a:f2:e5:6e:97:5d:fe:70:b9:1c:a6:45:d9:81:
                    64:19:a8:b2:e0:98:eb:86:16:88:64:79:26:b8:22:
                    5b:67:1e:9c:c6:a5:3a:d4:10:8e:6d:5b:21:f4:96:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DB:44:AF:B8:61:A7:55:0F:E2:5D:C6:B8:15:0B:CB:67:A4:12:72
            X509v3 Authority Key Identifier:
                keyid:2A:8C:9E:09:19:3A:88:BC:25:3E:37:07:D9:4A:A1:07:F9:20:5A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyeCRk6iLwlPjcH2UqhB_kgWnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7b3d6c-1e9b-46d7-937b-455abbdfba53/1/KoyeCRk6iLwlPjcH2UqhB_kgWnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7b3d6c-1e9b-46d7-937b-455abbdfba53/1/KoyeCRk6iLwlPjcH2UqhB_kgWnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4d:55:11:75:28:bd:70:19:5b:ed:7a:ba:b8:c9:26:c9:f6:
         20:69:e3:99:30:90:e5:93:f1:06:30:73:f2:b9:eb:24:af:61:
         0c:53:58:13:e0:67:24:ff:54:6b:59:87:e0:ac:1d:83:95:ed:
         a0:10:7a:f3:9b:ee:ba:55:e5:f6:85:28:05:0b:75:88:a2:01:
         1a:78:83:e7:b8:cd:6d:31:58:67:68:e7:c9:97:c1:cf:79:52:
         48:23:f2:6d:c9:00:60:e6:7e:72:31:91:5e:9e:b0:90:0e:db:
         af:6f:8b:83:0d:89:a3:11:bb:3a:1e:d3:d2:a1:f9:34:90:fb:
         d9:0f:15:7b:00:44:2f:2a:14:04:06:ac:fb:69:10:90:b8:67:
         a9:b5:7a:47:ce:15:0b:ce:55:e4:9c:89:0d:7a:9c:d3:d8:0d:
         4e:22:b6:e8:55:5d:c7:cb:96:fd:05:54:db:37:01:26:8b:e8:
         d7:90:28:48:0b:64:fe:03:ac:40:fe:23:40:df:5d:1f:ff:d7:
         49:36:3a:e7:bb:52:ff:30:ab:30:cc:49:ec:3e:86:fb:c4:6b:
         22:af:db:81:d2:64:9a:6e:b8:97:82:25:06:a9:e9:8e:61:02:
         71:11:60:c3:bb:64:61:97:e3:47:ec:16:35:d1:40:d1:60:30:
         e6:3b:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----