Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft
File:                     e1mygXMFmoXUpUDCKO1lwPKQMrA.mft (raw, json)
Hash identifier:          GwXaycf2BLH2kyg5p4imYNs47gNm6TqgW/W/J6nIYME=
Subject key identifier:   B0:2A:C6:3C:DD:05:C5:68:9C:BC:13:61:10:9D:1E:65:F4:F3:9B:A3
Authority key identifier: 7B:59:B2:81:73:05:9A:85:D4:A5:40:C2:28:ED:65:C0:F2:90:32:B0
Certificate issuer:       /CN=7b59b28173059a85d4a540c228ed65c0f29032b0
Certificate serial:       019346A7A7A9C6339E25CB965B62B6832FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1mygXMFmoXUpUDCKO1lwPKQMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft
Manifest number:          4C
Signing time:             Tue 19 Nov 2024 23:00:12 +0000
Manifest this update:     Tue 19 Nov 2024 23:00:12 +0000
Manifest next update:     Wed 20 Nov 2024 23:00:12 +0000
Files and hashes:         1: e1mygXMFmoXUpUDCKO1lwPKQMrA.crl (hash: C1pSMNXDHxrRYU6zu5acE928vSCHBy/M/WZamzeauwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:a7:a7:a9:c6:33:9e:25:cb:96:5b:62:b6:83:2f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b59b28173059a85d4a540c228ed65c0f29032b0
        Validity
            Not Before: Nov 19 23:00:12 2024 GMT
            Not After : Nov 20 23:00:12 2024 GMT
        Subject: CN=b02ac63cdd05c5689cbc1361109d1e65f4f39ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:6d:38:f4:a5:4e:c5:4b:e5:44:5b:e0:39:
                    4c:34:52:08:1e:41:f7:10:dc:01:3b:99:df:e4:5a:
                    ff:e1:dc:c8:6c:47:77:01:dc:b5:2c:ed:42:b8:91:
                    dc:c6:1f:d3:d7:57:43:43:42:41:f8:59:81:b3:ea:
                    d7:fe:68:da:05:5a:96:8e:b1:2d:be:25:bd:5a:57:
                    51:76:7e:1d:a8:a4:6a:c6:d0:0f:75:14:d8:e4:a8:
                    43:52:bc:bf:22:ab:6f:33:59:4c:85:03:bf:52:03:
                    44:66:83:bb:0a:8d:a1:27:97:f7:3b:f2:2a:4c:07:
                    62:7e:6d:36:57:67:b4:63:e3:4b:67:03:b7:74:00:
                    ea:a0:90:1b:60:4a:46:b8:14:0d:49:1f:d7:c4:dc:
                    26:e2:70:da:cf:ca:f3:bb:37:6c:9c:48:a7:18:3c:
                    7d:78:25:46:aa:9c:f8:b5:50:f7:eb:40:45:f9:ff:
                    9e:71:00:95:60:58:a0:14:6e:af:33:ea:2a:9e:5e:
                    50:ee:e5:2a:be:a7:32:86:98:57:fc:8f:ed:bb:6d:
                    05:0b:bd:da:33:14:c2:2b:1e:eb:32:6b:72:c2:db:
                    5f:35:d6:9b:49:ea:9a:1f:42:d9:46:75:44:b0:e8:
                    f6:3e:a5:00:9b:01:53:bd:40:20:88:da:d5:07:75:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:C6:3C:DD:05:C5:68:9C:BC:13:61:10:9D:1E:65:F4:F3:9B:A3
            X509v3 Authority Key Identifier:
                keyid:7B:59:B2:81:73:05:9A:85:D4:A5:40:C2:28:ED:65:C0:F2:90:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1mygXMFmoXUpUDCKO1lwPKQMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:fb:c5:67:2e:57:25:a5:95:ed:ab:2d:10:13:90:69:4d:
         5a:0f:83:23:6f:30:1c:10:ef:7e:28:8e:ba:10:8c:b2:fa:31:
         ca:c5:1d:8b:dd:6d:80:fb:14:ca:78:52:e8:5a:26:0d:30:dc:
         2f:4a:c3:8d:78:c4:9b:3d:72:a6:41:66:5b:4b:fe:f8:29:f8:
         6e:26:3c:78:69:89:58:69:e0:6b:a4:88:c8:5a:c8:b0:48:ee:
         f0:a1:e6:d3:23:ca:d0:44:41:d9:01:3b:da:bb:4c:7d:2d:fe:
         3d:f5:21:b5:08:5e:0a:0c:bc:18:05:c9:4d:6d:9c:ea:30:ef:
         53:3f:f7:41:64:51:83:2f:74:65:73:3a:0f:2a:78:a7:35:57:
         47:4e:54:c9:67:bb:1f:48:18:58:ea:9f:15:6f:b8:75:0a:8b:
         59:53:5c:3b:40:d6:63:de:ad:1f:87:c4:f5:6c:6d:b9:7e:2c:
         f9:98:36:26:0d:ef:cb:43:c7:50:13:93:41:16:98:21:dd:8f:
         9e:08:0f:1e:c2:f9:cc:a9:94:e6:9c:aa:e0:f5:52:2b:dd:12:
         0b:5a:45:36:76:e8:a1:a8:ac:da:a7:05:36:d3:8b:e3:a4:2d:
         b9:a6:ba:4e:70:79:59:ed:b2:bc:7e:99:af:aa:64:9b:65:fe:
         80:48:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----