Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
File:                     bYNhz6ErMnLKKjGvvwTIID7GI3k.mft (raw, json)
Hash identifier:          AQuYBS1XbfjShcFgo/HKj4GaaGIQBT0P077sM1lt9po=
Subject key identifier:   63:99:B8:CD:80:8F:C9:70:E2:27:90:0F:D5:B0:94:AB:F7:59:13:00
Authority key identifier: 6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79
Certificate issuer:       /CN=6d8361cfa12b3272ca2a31afbf04c8203ec62379
Certificate serial:       0193467121DA643E353229101149CF48648D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYNhz6ErMnLKKjGvvwTIID7GI3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
Manifest number:          17
Signing time:             Tue 19 Nov 2024 22:00:39 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:39 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:39 +0000
Files and hashes:         1: bYNhz6ErMnLKKjGvvwTIID7GI3k.crl (hash: u2s8KRGmsB0z/3E3zXnOZiJrWbC2UaJUXGw+NtqIa+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:21:da:64:3e:35:32:29:10:11:49:cf:48:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8361cfa12b3272ca2a31afbf04c8203ec62379
        Validity
            Not Before: Nov 19 22:00:39 2024 GMT
            Not After : Nov 20 22:00:39 2024 GMT
        Subject: CN=6399b8cd808fc970e227900fd5b094abf7591300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:9e:82:7d:04:3e:60:ee:c2:e5:38:ee:3b:
                    2b:cb:7e:0c:68:66:8e:b6:26:7b:bb:34:94:d2:21:
                    f6:98:98:89:2e:47:66:18:6a:9c:30:0f:86:ad:6f:
                    1d:6d:e0:02:ca:05:80:da:37:22:3f:65:f6:c5:70:
                    ee:5b:dd:ac:5d:4b:e0:64:42:7b:f6:a3:ba:f3:17:
                    52:99:51:59:95:e0:18:7d:76:25:52:42:05:04:2d:
                    ec:d4:c3:ff:47:9b:94:5c:15:fb:82:29:1e:e0:70:
                    77:b3:84:8e:7c:38:7b:e3:35:89:e0:fe:cf:11:42:
                    88:aa:37:ee:bd:5d:a3:7e:14:c5:71:db:5d:09:69:
                    c2:a1:e7:e4:2f:93:41:c8:a1:11:04:98:90:0e:8a:
                    af:92:fc:23:ae:d8:bf:3f:f6:dc:bf:42:87:35:fc:
                    58:3f:4c:4c:29:16:41:60:6a:87:8a:4d:0f:0f:4c:
                    d8:b3:d7:0f:01:8c:95:03:0d:35:59:35:2b:7f:ab:
                    46:a2:10:44:a8:91:a0:7e:39:87:49:9a:8f:ac:99:
                    5e:14:05:07:86:7d:64:de:66:56:38:09:f5:87:5a:
                    66:08:43:d6:46:c7:da:c5:02:76:88:01:39:6e:87:
                    ed:5d:9c:47:e2:0a:d1:d5:58:94:4c:65:07:34:6c:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:B8:CD:80:8F:C9:70:E2:27:90:0F:D5:B0:94:AB:F7:59:13:00
            X509v3 Authority Key Identifier:
                keyid:6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYNhz6ErMnLKKjGvvwTIID7GI3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:83:14:7c:c8:b8:b4:c7:34:0b:d9:72:90:87:c2:79:85:4d:
         37:cb:f0:60:86:52:73:99:93:27:91:4c:81:cc:16:2b:e9:40:
         a4:f8:81:c9:e0:81:3e:de:c2:db:d7:df:12:6f:04:bb:3b:f0:
         f2:72:06:15:36:83:8b:10:a4:81:a0:92:6f:ef:0d:f3:fc:57:
         78:c1:87:4a:50:91:75:ba:af:eb:48:87:ee:99:b1:0c:39:01:
         c9:cd:df:43:32:1c:ed:07:db:c9:97:45:9c:55:4a:0a:74:61:
         af:5f:ae:27:c5:42:db:6c:2e:79:31:3b:1c:6b:d3:45:f3:d7:
         fb:b2:4a:1b:19:d0:6e:75:fb:65:a6:5c:39:4f:d1:09:61:87:
         d0:2b:99:f2:e5:07:64:e7:48:63:b0:92:57:fb:5c:8e:b5:f6:
         1b:f1:7b:d2:ec:48:d6:04:80:9f:8b:94:c7:6d:9e:4b:3a:2b:
         fd:c5:ce:ca:b7:b7:c7:43:8c:a0:9b:a3:88:99:49:b0:d4:8d:
         67:16:52:c3:2d:86:86:50:4b:2c:45:ff:dc:3c:aa:90:f7:fd:
         b8:7b:90:2d:4e:87:b7:a2:1d:b8:0f:db:76:f7:7b:3e:ec:7f:
         83:84:5f:b6:cb:ae:07:34:39:c7:48:7a:b6:c9:f1:20:7f:55:
         f9:dd:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----