Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
File:                     6jcwBj7kzNZaNW3IT8R5awCDJbg.mft (raw, json)
Hash identifier:          WTK/CBJGVpBG1xn4fX5kO3BUMkPa1cF8APPeRf3eL4o=
Subject key identifier:   9B:CF:3F:B7:C1:84:8B:38:AA:0B:1E:45:40:DB:CF:86:EC:63:16:9A
Authority key identifier: EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8
Certificate issuer:       /CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
Certificate serial:       01919A5C6C4B22EA1B726DC5714B9E1AA95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
Manifest number:          07D2
Signing time:             Wed 28 Aug 2024 19:00:33 +0000
Manifest this update:     Wed 28 Aug 2024 19:00:33 +0000
Manifest next update:     Thu 29 Aug 2024 19:00:33 +0000
Files and hashes:         1: 6jcwBj7kzNZaNW3IT8R5awCDJbg.crl (hash: iUxIztHsmOFxp5V77Dsw9lt3bdPF8GMtzU+vADVUMi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9a:5c:6c:4b:22:ea:1b:72:6d:c5:71:4b:9e:1a:a9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
        Validity
            Not Before: Aug 28 19:00:33 2024 GMT
            Not After : Aug 29 19:00:33 2024 GMT
        Subject: CN=9bcf3fb7c1848b38aa0b1e4540dbcf86ec63169a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:d4:68:2a:72:ed:31:3a:e2:45:ff:d0:e5:
                    72:f1:a2:22:0a:a2:38:1e:a2:3f:72:71:af:4f:82:
                    5e:75:74:cd:81:ff:36:82:c4:82:64:98:7c:7b:c2:
                    c3:ba:fb:4f:55:62:5e:13:3c:70:a6:ba:59:b0:17:
                    16:8b:c0:5d:10:9a:76:42:b7:7d:21:cc:48:f3:b1:
                    ee:6f:59:bd:6f:13:52:69:f3:5f:5f:11:02:dd:3d:
                    74:c8:b9:b7:dd:5b:ad:b1:6d:b0:54:06:8c:11:5a:
                    47:5f:b2:f7:3b:33:a1:56:91:68:de:29:11:4a:a5:
                    ad:ac:37:2a:11:ce:6a:20:ab:d3:88:94:79:16:e1:
                    f5:cf:05:63:ca:bd:af:3e:f0:84:69:5f:21:ad:8c:
                    41:1a:a4:07:55:f1:db:8d:08:c1:23:2e:d1:7b:eb:
                    c9:4e:25:93:51:e2:e0:03:e3:b2:91:cb:9d:17:f7:
                    cf:e7:3e:a8:4b:cf:a3:74:eb:a8:3d:9a:ed:fc:9e:
                    fe:8b:8a:49:52:69:79:58:52:83:48:b8:df:0f:fa:
                    e4:56:cc:a8:a1:7f:77:d6:41:1a:76:77:ce:ba:99:
                    d0:f6:26:78:7b:eb:ed:a3:67:0d:9d:e4:57:06:84:
                    4a:2a:09:df:61:40:7a:e5:a9:2a:7d:90:46:68:0e:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:3F:B7:C1:84:8B:38:AA:0B:1E:45:40:DB:CF:86:EC:63:16:9A
            X509v3 Authority Key Identifier:
                keyid:EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:93:3e:14:c2:bb:be:b5:4b:ff:fa:58:26:c6:ff:e1:8b:23:
         5c:0b:5e:d4:64:92:2b:3d:78:0d:92:d1:74:97:97:05:78:42:
         4b:79:34:fb:75:f2:3f:93:b8:cc:1c:b4:49:d6:c4:a2:15:a2:
         ff:31:fd:22:9b:22:da:d7:0c:26:37:21:85:d9:5e:fd:1b:c2:
         a5:09:7a:f1:08:fc:8c:6e:8b:35:2e:58:4c:1f:c7:4f:69:73:
         cc:0a:e1:74:cf:b8:40:e9:5f:e7:67:94:48:7a:c9:63:76:3f:
         46:ee:4f:1d:f9:4d:92:e1:d8:a6:e4:12:df:f0:97:1d:2e:32:
         12:0c:0c:51:ac:03:74:dd:cf:18:01:1f:88:98:ab:2d:e8:f8:
         68:d0:1d:5a:43:72:a2:ec:57:00:59:0d:95:bb:61:45:39:c2:
         a5:08:18:97:ba:5a:06:37:90:cb:0d:e4:78:2c:65:a2:f0:24:
         e1:02:63:58:5b:9d:f1:17:de:df:0f:d9:34:29:d5:a6:1c:06:
         40:2d:c3:9b:56:f6:6d:4c:59:a3:0a:c3:a0:30:db:36:28:6d:
         3d:ff:44:07:86:c9:49:6d:74:7f:f2:17:ee:d8:98:d9:9a:26:
         1e:4a:22:bb:4f:c5:27:a3:77:4c:22:a0:b7:6e:6b:07:df:13:
         46:eb:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----