Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/883c08-257f-4e84-afc3-a40d2fb39497/1/uU28WCOhOQtLvIhYeUzQV-Mp-FE.mft
File:                     uU28WCOhOQtLvIhYeUzQV-Mp-FE.mft (raw, json)
Hash identifier:          UsQ/Q4+NxRpbUuaYJJWwLwYWKkDPtZJqc6tdbGWT9i8=
Subject key identifier:   93:8A:B4:B3:F0:1B:CC:EF:A9:2B:B7:55:78:36:EB:EB:36:AC:DD:B6
Authority key identifier: B9:4D:BC:58:23:A1:39:0B:4B:BC:88:58:79:4C:D0:57:E3:29:F8:51
Certificate issuer:       /CN=b94dbc5823a1390b4bbc8858794cd057e329f851
Certificate serial:       01922FB52CD32E70C4ADBA79C69C861015E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uU28WCOhOQtLvIhYeUzQV-Mp-FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/883c08-257f-4e84-afc3-a40d2fb39497/1/uU28WCOhOQtLvIhYeUzQV-Mp-FE.mft
Manifest number:          12D3
Signing time:             Thu 26 Sep 2024 19:00:55 +0000
Manifest this update:     Thu 26 Sep 2024 19:00:55 +0000
Manifest next update:     Fri 27 Sep 2024 19:00:55 +0000
Files and hashes:         1: uU28WCOhOQtLvIhYeUzQV-Mp-FE.crl (hash: Z+Cs2b4JVz+V0qRX1rpsmkUtVRgUk72VHUtrXYDinSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:b5:2c:d3:2e:70:c4:ad:ba:79:c6:9c:86:10:15:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94dbc5823a1390b4bbc8858794cd057e329f851
        Validity
            Not Before: Sep 26 19:00:55 2024 GMT
            Not After : Sep 27 19:00:55 2024 GMT
        Subject: CN=938ab4b3f01bccefa92bb7557836ebeb36acddb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:23:88:74:4a:b6:1c:f7:50:7a:4d:86:ef:
                    56:89:90:ff:83:30:da:21:b1:f8:17:79:18:86:af:
                    76:28:c6:e7:2c:5e:fb:4e:dc:24:d2:50:ef:75:de:
                    af:73:b7:2b:9e:06:0b:6a:ad:16:bc:46:cb:82:77:
                    65:13:30:28:16:99:4c:e1:17:c0:c5:da:3b:32:2b:
                    a3:77:2a:3e:aa:bb:b8:cc:95:8d:d7:cc:09:8f:eb:
                    d6:9b:9a:ea:2c:66:5d:95:1d:74:c3:b2:a8:91:b1:
                    fe:d9:ad:46:d7:53:eb:9f:d7:50:bd:c0:e9:89:a7:
                    35:2a:62:1b:7a:4c:aa:40:1c:b7:e4:9d:29:7d:9f:
                    3b:f4:af:cd:66:39:35:9a:3d:38:11:29:28:24:4e:
                    12:21:15:35:31:26:2d:20:d7:48:5f:4e:ac:97:4f:
                    c7:4a:91:c4:d6:24:23:cb:62:64:41:87:72:db:15:
                    22:86:ab:ec:33:73:8a:6b:44:50:dc:7c:5a:4d:b9:
                    1d:c1:a8:b3:91:e6:2f:56:3e:f7:93:1f:d4:45:76:
                    4c:fc:58:ac:bb:dd:07:13:97:52:ed:4a:df:66:45:
                    f9:d2:0f:dd:3b:d0:af:75:0e:65:1b:e2:1d:61:7c:
                    7c:f0:ac:64:bd:ba:91:9a:ef:af:a0:60:ba:43:47:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8A:B4:B3:F0:1B:CC:EF:A9:2B:B7:55:78:36:EB:EB:36:AC:DD:B6
            X509v3 Authority Key Identifier:
                keyid:B9:4D:BC:58:23:A1:39:0B:4B:BC:88:58:79:4C:D0:57:E3:29:F8:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU28WCOhOQtLvIhYeUzQV-Mp-FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/883c08-257f-4e84-afc3-a40d2fb39497/1/uU28WCOhOQtLvIhYeUzQV-Mp-FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/883c08-257f-4e84-afc3-a40d2fb39497/1/uU28WCOhOQtLvIhYeUzQV-Mp-FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:92:59:46:a1:b8:83:1a:af:01:e2:c9:48:e4:65:14:54:
         6e:e7:8f:e1:4f:23:22:0d:3d:1b:39:35:ec:a2:b4:cb:dd:66:
         32:5c:c2:34:66:b4:4a:f4:32:72:93:b4:63:20:cf:01:5a:e9:
         ee:38:1f:da:68:29:91:1d:d3:68:e8:93:80:86:9e:09:46:96:
         ff:10:62:76:15:42:7c:17:09:46:20:f4:51:2e:33:ce:18:dd:
         2f:12:20:c1:05:50:77:1c:45:57:dc:52:cf:3c:b2:34:2b:0d:
         f2:d0:2b:61:8a:9e:d8:1b:6e:8a:41:b0:79:c7:b5:fb:36:0f:
         99:c4:71:bd:80:42:dc:15:bc:39:7d:e0:a8:8d:d5:ab:13:a9:
         3f:ed:a8:f4:20:58:90:45:99:bc:2f:84:1f:e0:3a:4e:be:1a:
         2d:7d:a1:25:8d:81:e3:8b:5a:de:85:ef:36:2a:bc:fd:ed:7d:
         e6:7a:ba:f0:4c:59:1b:03:ab:18:24:cb:9d:de:fc:eb:ad:76:
         e1:77:ba:fb:27:30:be:2d:01:8e:e7:dd:da:82:42:46:bc:d9:
         a2:d9:8a:49:91:35:23:cb:74:92:55:cf:2b:70:fe:53:ea:ed:
         73:68:02:d0:d2:7b:2b:5d:12:40:f0:43:3a:a3:6d:00:28:e1:
         74:19:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----