Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/Z8x03cxYR3PU-dUOPlsnu2Abios.mft
File:                     Z8x03cxYR3PU-dUOPlsnu2Abios.mft (raw, json)
Hash identifier:          uOoT0foOEEHnFeKnTXocUoYAHeZ3zJntiijfVROyDhg=
Subject key identifier:   49:AB:95:BB:66:3E:36:2C:9E:1C:18:56:51:ED:BE:1A:CD:DB:3E:D0
Authority key identifier: 67:CC:74:DD:CC:58:47:73:D4:F9:D5:0E:3E:5B:27:BB:60:1B:8A:8B
Certificate issuer:       /CN=67cc74ddcc584773d4f9d50e3e5b27bb601b8a8b
Certificate serial:       018F9DD02D59CC7A54C6569DE1901D6CB8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8x03cxYR3PU-dUOPlsnu2Abios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/Z8x03cxYR3PU-dUOPlsnu2Abios.mft
Manifest number:          0878
Signing time:             Wed 22 May 2024 01:00:17 +0000
Manifest this update:     Wed 22 May 2024 01:00:17 +0000
Manifest next update:     Thu 23 May 2024 01:00:17 +0000
Files and hashes:         1: Pr1QUG9uHuNjKdqKEXKNuSmVPfg.roa (hash: k0+ps7vszFCDvx351GYAzFMH5lcsUWJMHGfnwjbXdwA=)
                          2: Z8x03cxYR3PU-dUOPlsnu2Abios.crl (hash: P9ulFSCd2gzHEFUEswJ4fW5Ll0m7RSojGegdqfQvAtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9d:d0:2d:59:cc:7a:54:c6:56:9d:e1:90:1d:6c:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc74ddcc584773d4f9d50e3e5b27bb601b8a8b
        Validity
            Not Before: May 22 01:00:17 2024 GMT
            Not After : May 23 01:00:17 2024 GMT
        Subject: CN=49ab95bb663e362c9e1c185651edbe1acddb3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:68:ec:b8:00:25:5d:44:6e:00:29:8d:cf:
                    34:82:88:62:30:50:b1:dc:61:6d:48:d2:68:45:b3:
                    05:bb:1f:21:a2:34:c7:2c:4c:26:53:da:b6:7e:58:
                    55:dc:5f:7f:f3:15:63:8d:30:7a:be:65:41:cc:29:
                    9a:4c:ea:42:97:c5:e0:40:82:a9:09:f5:04:99:83:
                    cc:a6:19:64:4a:30:d6:98:fa:bc:81:ea:d8:6d:c7:
                    61:f7:b5:bb:a0:0e:a2:f6:6e:a5:81:85:a1:07:25:
                    08:51:05:f7:bb:fd:a0:a3:f1:0d:42:ba:e8:f1:8b:
                    25:0d:15:47:b8:36:19:61:b0:5b:e1:58:56:87:01:
                    54:22:68:bd:cf:cf:14:9a:0c:9a:41:39:e2:a5:c7:
                    ca:15:47:19:12:39:61:9a:bf:35:b8:ce:f0:55:9c:
                    32:86:e7:b8:da:90:fb:d1:ec:0c:bf:96:d3:0f:92:
                    42:35:9e:9e:2e:3e:5a:63:0c:3f:23:02:78:24:8c:
                    9b:9f:37:e0:73:52:f8:e2:1a:63:5e:25:5c:24:96:
                    b1:2b:5b:30:9c:bc:89:f1:c8:ce:f2:9c:16:7f:88:
                    b4:01:49:19:0b:21:41:c4:22:51:1a:bb:c9:52:28:
                    e1:0a:41:c2:94:a1:c4:65:f9:17:22:c0:9d:75:66:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AB:95:BB:66:3E:36:2C:9E:1C:18:56:51:ED:BE:1A:CD:DB:3E:D0
            X509v3 Authority Key Identifier:
                keyid:67:CC:74:DD:CC:58:47:73:D4:F9:D5:0E:3E:5B:27:BB:60:1B:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x03cxYR3PU-dUOPlsnu2Abios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/Z8x03cxYR3PU-dUOPlsnu2Abios.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddf54f-d42c-45c6-8157-0fee9e064615/1/Z8x03cxYR3PU-dUOPlsnu2Abios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:63:23:ec:f0:5f:d8:49:3a:54:a6:ab:da:7b:9c:d5:b8:32:
         b9:9c:ff:39:71:91:8d:48:b9:53:aa:ec:89:1c:4d:8f:36:b0:
         54:0a:84:7a:bb:58:17:3b:2f:bd:21:9e:0c:9e:e9:6e:3e:a1:
         00:ce:50:33:c3:ca:59:e9:bc:8f:d1:6b:4e:14:21:2b:3d:ef:
         c3:ec:4e:81:02:f5:a2:04:f7:0d:8b:1e:38:16:c3:11:0f:cc:
         2b:0d:37:6b:02:55:ee:ea:28:9c:9f:b1:98:b4:55:c7:dc:5e:
         3d:bc:c3:7a:23:39:e4:72:a8:60:4a:24:ca:62:d9:73:e4:a4:
         7f:3f:69:05:ae:e9:9d:b0:41:48:f5:0e:d7:e0:65:00:cd:f9:
         57:6d:94:92:3d:88:8a:b6:ec:cd:b8:fe:74:26:e1:29:e5:80:
         27:77:9c:c9:d8:fb:72:a8:35:45:47:55:ac:ea:a1:62:12:2f:
         3f:ef:3f:b5:f2:79:06:3a:fe:25:e0:ab:c3:21:e0:dd:5d:0b:
         f7:61:2d:fa:c6:61:d2:29:2e:c9:52:89:e7:2d:13:3c:e1:8f:
         29:31:be:5f:b0:98:f4:ef:ce:58:da:db:f6:48:c0:ed:ca:2d:
         e4:27:d0:d0:6d:d4:85:ec:f2:2c:5c:05:b1:19:5b:5c:8c:e7:
         66:1f:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----