Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.mft
File:                     zlouW-zog41Px2Yr7fL8DnbLs2s.mft (raw, json)
Hash identifier:          PXUGh4r7f4yioXPRt+4fdWqWUuqO6WAZRZZETjeAxxQ=
Subject key identifier:   36:64:C6:36:4D:4A:F3:32:D1:6E:E0:A6:D9:35:C4:00:DE:54:E9:D8
Authority key identifier: CE:5A:2E:5B:EC:E8:83:8D:4F:C7:66:2B:ED:F2:FC:0E:76:CB:B3:6B
Certificate issuer:       /CN=ce5a2e5bece8838d4fc7662bedf2fc0e76cbb36b
Certificate serial:       01852F98E095F0480F5CF35E37A52488E7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlouW-zog41Px2Yr7fL8DnbLs2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.mft
Manifest number:          01
Signing time:             Tue 20 Dec 2022 12:53:46 +0000
Manifest this update:     Tue 20 Dec 2022 12:53:46 +0000
Manifest next update:     Wed 21 Dec 2022 12:53:46 +0000
Files and hashes:         1: zlouW-zog41Px2Yr7fL8DnbLs2s.crl (hash: 2tETgmzNaMHTlYAFfj9paCNdElArGrRYWgiSaMPVJ7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2f:98:e0:95:f0:48:0f:5c:f3:5e:37:a5:24:88:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5a2e5bece8838d4fc7662bedf2fc0e76cbb36b
        Validity
            Not Before: Dec 20 12:53:46 2022 GMT
            Not After : Dec 21 12:53:46 2022 GMT
        Subject: CN=3664c6364d4af332d16ee0a6d935c400de54e9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:43:71:3a:bb:38:5b:3d:5b:a3:79:ea:91:
                    4b:11:c2:34:8a:0c:02:a7:23:eb:11:23:97:e4:f3:
                    12:2c:f6:66:cc:4c:c9:57:5e:9f:a1:20:b4:85:1f:
                    09:53:e6:1e:03:9a:66:25:00:bc:dc:d4:9d:3b:72:
                    a5:88:0c:32:b1:99:b6:3b:f7:87:35:a9:05:5f:66:
                    c5:ca:be:5f:65:95:c6:ee:97:07:39:37:e2:dd:b7:
                    94:f5:22:61:21:9d:3f:f3:d0:6c:41:13:b6:53:09:
                    3c:a6:23:fc:f4:49:80:b5:6c:b9:93:7f:28:b1:4e:
                    fc:2d:76:ae:8d:cd:6b:47:e0:29:56:ce:a5:ee:ad:
                    5b:cd:57:38:e6:6b:8d:4a:ea:aa:6c:38:df:c4:be:
                    7e:5b:ca:1e:b0:42:74:d5:5d:11:8c:66:a2:01:d6:
                    7f:f4:9a:5d:ec:f2:20:81:17:d5:11:c6:e7:bb:91:
                    8d:1d:09:15:dd:c2:46:53:07:c3:4f:3a:0c:79:ef:
                    45:6a:15:6d:b5:5c:61:e6:9a:68:31:0c:94:51:b9:
                    c4:4d:23:81:de:ad:2a:b5:3c:00:cf:43:f3:32:13:
                    4f:05:c0:77:54:1f:b9:53:50:6d:54:9b:8f:a0:c4:
                    b7:a4:99:5c:8e:99:c7:60:46:37:2d:9c:83:72:aa:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:C6:36:4D:4A:F3:32:D1:6E:E0:A6:D9:35:C4:00:DE:54:E9:D8
            X509v3 Authority Key Identifier:
                keyid:CE:5A:2E:5B:EC:E8:83:8D:4F:C7:66:2B:ED:F2:FC:0E:76:CB:B3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlouW-zog41Px2Yr7fL8DnbLs2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:4f:2d:2a:84:e3:bf:0d:97:66:1a:83:d6:f0:4c:fe:5a:
         a2:47:8c:f7:f4:5c:51:1b:e7:84:04:85:5e:c7:52:7c:cc:64:
         64:6c:da:87:d9:79:0f:c4:c3:cc:90:d5:be:3c:6d:83:ba:43:
         35:81:9e:be:af:39:ac:cb:7e:37:9f:e8:d7:bf:53:2e:da:c7:
         c7:a1:b7:e4:7a:e6:14:de:11:a2:78:98:d7:dd:c8:94:b6:a2:
         81:5e:21:dc:fc:b7:78:ce:cb:c2:85:8e:45:42:d5:81:7e:fd:
         18:47:48:f6:e1:46:94:a6:bd:94:80:5b:ad:f4:5c:85:2d:41:
         b0:85:48:53:e5:ad:73:4c:e2:20:2c:ca:66:63:39:9f:f9:e5:
         fc:6e:3c:fe:f5:34:66:30:8d:e3:2a:7a:05:ae:b5:06:09:65:
         39:a2:26:0a:f5:cb:e0:7e:b7:11:7d:8a:6c:3d:b1:ab:2f:e1:
         19:f9:76:a1:b9:04:0e:91:50:b9:77:19:3f:fc:07:ab:fa:6f:
         66:62:e5:1a:70:ff:d6:18:1d:8b:bf:e7:89:18:8b:f8:0b:16:
         76:d1:a9:b3:c5:65:83:5a:ce:20:1d:0f:d1:75:89:55:6f:19:
         8f:c9:6f:f8:d0:62:58:7e:5b:7d:49:dc:8e:e6:84:6e:61:21:
         7b:74:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----