Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2f7ba7-70d8-4c58-8899-0b5b58405906/1/ZezAHI7Vea0qjNaOm3xMiJZee9Q.mft
File:                     ZezAHI7Vea0qjNaOm3xMiJZee9Q.mft (raw, json)
Hash identifier:          hNSHqnNv8+qTfcispoilH0k6umQuqpQRkCdWFQicvp4=
Subject key identifier:   64:2A:E8:28:C5:D8:FB:B2:D1:32:5D:21:9D:C7:2F:1A:B0:D2:FB:5D
Authority key identifier: 65:EC:C0:1C:8E:D5:79:AD:2A:8C:D6:8E:9B:7C:4C:88:96:5E:7B:D4
Certificate issuer:       /CN=65ecc01c8ed579ad2a8cd68e9b7c4c88965e7bd4
Certificate serial:       018EEB49BC9E69D973D5410199DA4ABBA7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZezAHI7Vea0qjNaOm3xMiJZee9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2f7ba7-70d8-4c58-8899-0b5b58405906/1/ZezAHI7Vea0qjNaOm3xMiJZee9Q.mft
Manifest number:          012B
Signing time:             Wed 17 Apr 2024 09:01:01 +0000
Manifest this update:     Wed 17 Apr 2024 09:01:01 +0000
Manifest next update:     Thu 18 Apr 2024 09:01:01 +0000
Files and hashes:         1: ZezAHI7Vea0qjNaOm3xMiJZee9Q.crl (hash: g2lzWNIFjgq7deqXGsnmd2nxHL+/zAOWwqHro8MBzYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:eb:49:bc:9e:69:d9:73:d5:41:01:99:da:4a:bb:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ecc01c8ed579ad2a8cd68e9b7c4c88965e7bd4
        Validity
            Not Before: Apr 17 09:01:01 2024 GMT
            Not After : Apr 18 09:01:01 2024 GMT
        Subject: CN=642ae828c5d8fbb2d1325d219dc72f1ab0d2fb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:84:66:9f:ba:b5:94:7d:6b:1b:34:b5:0b:
                    cd:e2:0a:02:dc:af:84:b0:1d:3c:70:81:d5:31:e5:
                    ad:c7:eb:79:d1:ad:b8:75:6a:45:ea:62:85:9d:d6:
                    41:13:5c:36:01:d6:31:27:64:ff:56:dc:ce:f5:f0:
                    fe:c9:8e:12:56:96:e0:9c:15:03:5c:ff:4c:ed:f5:
                    6f:8b:71:e1:ea:ae:8b:ae:8f:1f:ee:4c:7e:cf:00:
                    a0:83:9d:12:32:cc:49:3d:10:f2:c1:62:16:2a:54:
                    80:fb:8c:30:bc:ad:c7:74:8f:31:b9:57:f1:7f:39:
                    66:a5:1a:59:1f:74:27:6b:6d:9c:eb:44:7e:a9:4d:
                    45:71:73:a6:72:e5:a2:53:ab:6a:f6:b0:df:fb:7a:
                    d0:0c:42:88:e2:a6:a2:4e:28:93:c8:09:4f:c7:6b:
                    ca:5d:e7:09:b8:36:ba:e8:64:cb:0a:8b:b5:b4:e6:
                    f7:49:d1:af:8a:1c:77:80:d4:82:49:16:74:03:b0:
                    22:a3:bb:4a:06:5c:b9:72:4c:be:e6:8f:c1:97:40:
                    71:2a:47:72:a0:97:32:43:9d:ba:3b:6e:0c:48:dd:
                    bc:5e:4c:77:23:0c:a7:e8:6b:f3:e7:0d:12:e7:37:
                    ba:2d:95:8e:a0:a4:5b:a1:89:9a:45:53:5d:f7:75:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2A:E8:28:C5:D8:FB:B2:D1:32:5D:21:9D:C7:2F:1A:B0:D2:FB:5D
            X509v3 Authority Key Identifier:
                keyid:65:EC:C0:1C:8E:D5:79:AD:2A:8C:D6:8E:9B:7C:4C:88:96:5E:7B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZezAHI7Vea0qjNaOm3xMiJZee9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2f7ba7-70d8-4c58-8899-0b5b58405906/1/ZezAHI7Vea0qjNaOm3xMiJZee9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2f7ba7-70d8-4c58-8899-0b5b58405906/1/ZezAHI7Vea0qjNaOm3xMiJZee9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:de:9e:d1:6d:88:40:92:b6:4e:a1:f9:2f:79:28:39:32:35:
         dd:4b:99:a8:8c:08:7e:ae:70:86:61:19:9b:a2:43:84:01:fc:
         72:4f:84:28:98:c6:7a:b5:4f:73:bd:6f:ec:3e:5b:e4:60:77:
         61:3c:dc:27:e8:8e:f5:8e:d6:98:0d:74:77:88:35:4d:99:50:
         da:d9:cd:4f:ed:92:ae:72:73:2f:60:2d:e0:60:4e:d3:c2:47:
         13:7d:ff:b7:bf:61:db:0b:ca:9a:bf:47:17:b9:34:01:95:69:
         c8:8c:a2:33:cf:b1:ee:26:2d:74:8f:cc:b4:f2:6b:96:aa:fc:
         f9:b2:06:9b:07:71:89:f9:37:06:56:d7:e4:f4:9e:e3:50:58:
         70:d4:ab:30:af:3c:f2:b2:4d:80:a1:4e:96:75:03:bb:b8:89:
         34:92:bd:cf:46:f5:da:88:03:0a:29:53:d4:80:96:fe:a8:16:
         ed:a6:4e:b4:e0:18:c7:9f:c4:02:24:8c:a4:9f:a0:4e:9e:20:
         56:b1:85:27:18:40:0c:17:27:5e:bb:63:21:3e:da:e6:f7:85:
         77:44:3d:8d:f2:14:c1:a0:6e:45:0c:ac:d1:9f:8b:75:cf:f4:
         5a:11:38:a3:bc:44:39:14:90:01:f6:b6:75:f5:b5:3a:43:41:
         ab:67:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----