Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3bb2a4-7a59-4902-8c7a-26ddd9a92a40/1/8yiALkzo2eP0ddau9yWC6YwDZE8.mft
File:                     8yiALkzo2eP0ddau9yWC6YwDZE8.mft (raw, json)
Hash identifier:          gd/w7eE+BA5rgTJqlCXOeNbkSesy0GJvZmzaZnoMkLE=
Subject key identifier:   D4:90:3A:5E:8D:28:06:24:3B:D4:78:08:96:5C:1F:F8:AB:94:AB:DD
Authority key identifier: F3:28:80:2E:4C:E8:D9:E3:F4:75:D6:AE:F7:25:82:E9:8C:03:64:4F
Certificate issuer:       /CN=f328802e4ce8d9e3f475d6aef72582e98c03644f
Certificate serial:       0192B073E1DE60AAB1C177B607A954096C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yiALkzo2eP0ddau9yWC6YwDZE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3bb2a4-7a59-4902-8c7a-26ddd9a92a40/1/8yiALkzo2eP0ddau9yWC6YwDZE8.mft
Manifest number:          0919
Signing time:             Mon 21 Oct 2024 19:00:37 +0000
Manifest this update:     Mon 21 Oct 2024 19:00:37 +0000
Manifest next update:     Tue 22 Oct 2024 19:00:37 +0000
Files and hashes:         1: 8yiALkzo2eP0ddau9yWC6YwDZE8.crl (hash: 0/1fEvZutzIRaIYLEUEBuCg1jN6/0gQgW6KwIJB3cuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b0:73:e1:de:60:aa:b1:c1:77:b6:07:a9:54:09:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f328802e4ce8d9e3f475d6aef72582e98c03644f
        Validity
            Not Before: Oct 21 19:00:37 2024 GMT
            Not After : Oct 22 19:00:37 2024 GMT
        Subject: CN=d4903a5e8d2806243bd47808965c1ff8ab94abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:a7:8a:37:78:73:5d:2b:13:c6:7a:9d:b4:
                    6f:69:b2:c8:de:5e:05:0f:2f:ee:e8:c8:6f:b9:fe:
                    b8:7c:19:39:16:22:f4:6b:68:ed:e8:dc:f3:b2:0e:
                    71:92:9f:9b:60:74:83:46:79:aa:bf:d9:84:77:f3:
                    e3:06:cb:74:ee:91:47:09:c4:d5:a7:35:1e:17:84:
                    1b:ec:6b:eb:e1:4e:47:2f:5c:5e:96:2a:76:5f:09:
                    f5:37:ca:6c:03:cd:36:79:b3:7c:35:c6:9b:74:c2:
                    fd:b8:46:f2:77:59:b2:a5:23:20:d0:38:f6:6f:97:
                    1c:42:dd:06:52:ba:ae:63:f9:a8:fd:0a:c3:f1:f3:
                    37:9e:72:90:9f:bb:2b:41:c9:72:00:bd:fc:6b:d3:
                    01:4a:19:af:9a:00:24:d2:58:70:81:b3:25:1e:aa:
                    75:df:f9:64:7e:98:1b:82:b4:42:05:e9:55:c5:48:
                    05:3f:9e:4b:9c:ec:3e:2e:1b:ee:aa:c8:d3:8a:fa:
                    35:42:1d:8a:a2:d0:75:29:53:ac:93:46:9b:d9:ea:
                    88:63:ed:98:50:5d:b5:20:0f:3c:fb:dd:a7:f3:f1:
                    94:fc:e9:94:8e:0d:f1:28:ca:da:76:c7:f5:2b:35:
                    99:43:93:c6:5c:de:99:69:cb:d7:33:59:06:fc:4e:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:3A:5E:8D:28:06:24:3B:D4:78:08:96:5C:1F:F8:AB:94:AB:DD
            X509v3 Authority Key Identifier:
                keyid:F3:28:80:2E:4C:E8:D9:E3:F4:75:D6:AE:F7:25:82:E9:8C:03:64:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yiALkzo2eP0ddau9yWC6YwDZE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3bb2a4-7a59-4902-8c7a-26ddd9a92a40/1/8yiALkzo2eP0ddau9yWC6YwDZE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3bb2a4-7a59-4902-8c7a-26ddd9a92a40/1/8yiALkzo2eP0ddau9yWC6YwDZE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:30:65:eb:e6:0e:c3:ee:80:fc:c7:d1:54:3c:33:bb:12:
         0b:59:f5:59:c3:01:17:84:90:d7:67:71:84:88:7a:bb:5c:4d:
         02:4a:d1:3f:ab:96:e9:7f:7a:eb:b1:c0:c0:25:69:38:35:5e:
         1b:e1:c5:35:89:58:91:4c:00:ff:18:1a:50:44:8b:3e:fc:4e:
         8d:d6:a6:8d:3f:97:98:e4:c5:b4:79:38:26:23:67:27:89:67:
         70:b6:0d:a0:f1:a1:84:bd:ed:c1:9a:85:26:9f:07:fc:1f:5e:
         34:52:25:a6:3b:77:0f:c8:52:aa:95:04:f8:14:50:6e:ce:b1:
         42:c4:ae:26:38:9f:fa:fc:21:1d:9c:27:b2:a4:5a:5f:91:35:
         8a:d0:f0:09:f4:a7:0c:93:df:e0:3b:b9:c8:63:dc:33:03:f4:
         a1:9e:3a:0a:86:a4:c4:c1:d4:31:8d:c4:4c:eb:4c:5a:99:9f:
         9d:26:50:43:8a:3e:07:6b:ea:a5:dc:b4:2d:4c:ad:24:13:0e:
         66:04:c7:49:6b:78:d2:30:bc:eb:cd:6d:2c:e7:22:04:02:0c:
         91:6f:a3:91:bf:4e:30:81:5f:01:35:df:b2:51:fa:42:ac:7c:
         f8:fd:a1:26:e8:96:2d:dd:f4:3d:33:bd:a2:a8:70:79:c1:02:
         5e:cc:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----