Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
File:                     rZ7zxbA__FbdMPwdBg0ViPJksrM.mft (raw, json)
Hash identifier:          yGBbp4Tgwj3bfsbMriXQxBtPCzvGQSgWzzs3N/W3GXc=
Subject key identifier:   2B:5B:3D:F1:8B:4D:0B:97:BE:A6:E6:19:E6:83:F9:82:DF:6A:3A:27
Authority key identifier: AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3
Certificate issuer:       /CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
Certificate serial:       01909ACD4C884232697C0D4DF5681B978B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
Manifest number:          0470
Signing time:             Wed 10 Jul 2024 04:01:03 +0000
Manifest this update:     Wed 10 Jul 2024 04:01:03 +0000
Manifest next update:     Thu 11 Jul 2024 04:01:03 +0000
Files and hashes:         1: l2GuIY_FWphj2gl0U31gEf0g1kQ.roa (hash: HPG98+n1LY4e2Fj73UDLJRgrZeFnoNd+/qMmycP8EO0=)
                          2: rZ7zxbA__FbdMPwdBg0ViPJksrM.crl (hash: ojWiqZxNu01fw5v0CwIdCRgRh2m18CWMWgX1/bK/m0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:cd:4c:88:42:32:69:7c:0d:4d:f5:68:1b:97:8b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
        Validity
            Not Before: Jul 10 04:01:03 2024 GMT
            Not After : Jul 11 04:01:03 2024 GMT
        Subject: CN=2b5b3df18b4d0b97bea6e619e683f982df6a3a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:53:81:e5:3c:66:d2:7a:56:4b:a1:62:75:
                    ff:19:48:15:7f:e5:cc:42:78:e0:28:46:19:2e:dd:
                    95:1b:fa:14:da:b7:55:8a:9d:58:29:24:88:a1:82:
                    03:ac:3c:05:ea:cb:08:9a:4e:79:b5:51:9e:18:43:
                    59:1f:2d:e6:9e:44:84:54:03:5c:37:ce:47:d4:35:
                    cf:31:0f:e6:3e:2a:05:1e:9e:df:4d:c4:73:d2:91:
                    49:7e:e1:d8:50:b5:ae:d1:18:3d:cc:ba:33:bb:c1:
                    9f:9e:65:96:2f:f1:ce:d4:29:cc:d9:ca:3d:68:ef:
                    64:00:b9:86:4c:fd:59:a8:e8:77:02:92:ab:21:8f:
                    4f:cb:cc:2f:2a:6b:54:67:b7:8f:dd:bc:55:50:f3:
                    e6:f5:e6:ec:12:3f:c2:32:e5:e9:55:85:1b:e5:ea:
                    45:df:da:bb:c3:13:43:32:50:38:03:28:ca:d7:bc:
                    d5:6b:72:56:d6:67:dc:0a:ba:e8:0f:45:a3:a7:81:
                    fb:aa:3e:50:6c:0a:a3:dc:f0:ff:83:c5:18:de:1f:
                    9e:68:03:88:eb:42:e3:28:b4:12:ec:07:5f:44:be:
                    ce:d1:96:c9:b7:29:5e:b8:7f:43:4d:f8:37:c5:99:
                    a1:9f:02:b0:8d:1a:71:7d:4f:94:52:f4:10:89:dd:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5B:3D:F1:8B:4D:0B:97:BE:A6:E6:19:E6:83:F9:82:DF:6A:3A:27
            X509v3 Authority Key Identifier:
                keyid:AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:ad:09:f3:0e:8e:b6:d3:70:12:e3:c3:04:94:fd:72:77:
         25:03:c3:41:65:e2:88:30:d0:a7:56:2f:90:85:13:83:31:ce:
         01:a5:aa:21:c4:34:89:b4:ee:4c:a9:68:29:97:5a:59:de:9c:
         05:f9:f8:2f:56:98:ce:55:df:a0:20:4e:0d:6f:be:44:dc:b1:
         53:67:64:c2:ec:65:0a:9d:1c:8e:9c:78:df:bf:a5:cf:69:e8:
         9e:7d:17:b9:4a:ba:25:b4:3e:da:b0:71:c1:97:40:4e:62:12:
         05:67:ec:f3:8f:a5:2b:70:c4:c2:99:ed:b4:47:3f:8e:12:45:
         9d:29:ed:fe:42:43:24:9a:c6:e0:5d:c5:15:d4:8c:9c:f0:02:
         d4:69:40:5f:22:a7:ca:dd:4a:64:a1:33:d6:c0:e2:5e:18:4d:
         5a:b6:93:bd:70:f5:f2:9c:3b:06:6b:70:b8:00:5e:13:dd:13:
         ad:72:b2:45:26:d1:77:84:01:ef:33:05:67:49:b0:3b:58:2e:
         ea:db:ff:c3:2b:d6:13:f1:33:a0:98:85:ce:52:a9:97:93:33:
         28:f6:5d:6d:9f:99:3e:7c:96:2f:32:5c:c5:e5:1f:0d:8a:01:
         1e:da:75:0b:39:08:08:18:c6:91:44:85:9a:76:a1:c3:bc:e6:
         68:4e:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----