Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft
File:                     dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft (raw, json)
Hash identifier:          m/S/ysryxVR2qH/3eUx90zBeZrrTFCCgk08SSi+PYIk=
Subject key identifier:   EE:F0:C7:B0:86:42:47:A9:74:B9:7D:2B:59:BF:B3:C0:A2:43:62:EA
Authority key identifier: 77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
Certificate issuer:       /CN=77358867f21914e152fbf46c8bcc06109abfe0f5
Certificate serial:       018CC8E01ACE9C255977B9C6D2A692558D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft
Manifest number:          034E
Signing time:             Tue 02 Jan 2024 06:32:59 +0000
Manifest this update:     Tue 02 Jan 2024 06:32:59 +0000
Manifest next update:     Wed 03 Jan 2024 06:32:59 +0000
Files and hashes:         1: AOGXwmsiBtrct66DqsVZGizivSk.roa (hash: zjzHxT+3dYroR+yjoek34D7qnCCeNEPIsOV5FbKHUBg=)
                          2: dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.crl (hash: O6CxY7LSj8mLqiNd0I8Bdf7wirS80cHDiJ/R1tbFris=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:e0:1a:ce:9c:25:59:77:b9:c6:d2:a6:92:55:8d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77358867f21914e152fbf46c8bcc06109abfe0f5
        Validity
            Not Before: Jan  2 06:32:59 2024 GMT
            Not After : Jan  3 06:32:59 2024 GMT
        Subject: CN=eef0c7b0864247a974b97d2b59bfb3c0a24362ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:58:95:e1:33:6e:d5:93:21:e6:0c:78:08:
                    fb:9f:68:8b:07:c7:eb:19:77:42:82:4b:93:50:ee:
                    88:da:3a:d1:09:50:9a:17:df:2f:33:06:1f:0e:d0:
                    9c:24:f7:f3:bd:a5:13:3c:fd:f6:1c:f1:c0:9e:9e:
                    02:5e:ba:8b:9d:8e:73:22:ca:37:81:d1:b3:7c:99:
                    de:b3:14:d9:b8:52:cf:0b:78:d2:30:f9:2e:92:77:
                    a6:c8:e7:d3:15:56:5f:08:72:14:cc:53:75:85:fb:
                    be:e6:20:2e:f3:57:a1:58:c4:7c:4c:34:59:79:c2:
                    e5:11:29:0a:fe:9e:0f:83:0b:68:2d:52:1f:25:d3:
                    45:b2:a8:a4:2d:a4:08:47:f6:7e:e3:d1:16:3a:ff:
                    07:5d:4a:fb:a6:4f:e3:a9:e8:be:9d:63:e8:29:73:
                    e3:3a:e0:f4:34:fb:e8:8f:18:79:0a:25:34:25:90:
                    16:ef:4b:11:69:59:08:7a:48:7f:84:d6:4e:fc:73:
                    d2:84:c8:b3:df:ad:a8:33:43:d0:33:4e:b4:9d:b4:
                    b4:c4:44:2d:e6:64:71:23:68:fa:32:0d:0a:c2:03:
                    33:cf:1c:c0:e7:d1:b3:83:ba:a6:ec:7e:e5:96:9b:
                    3f:9d:7a:c4:bf:84:ee:7d:8e:24:96:5c:bd:dd:f3:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:C7:B0:86:42:47:A9:74:B9:7D:2B:59:BF:B3:C0:A2:43:62:EA
            X509v3 Authority Key Identifier:
                keyid:77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:63:f1:69:41:f9:c8:7b:1a:34:dd:70:19:11:64:26:5a:
         f3:df:ae:45:36:19:cc:b4:95:2f:d7:5b:e9:99:3b:30:78:cb:
         39:38:ef:ac:84:ee:08:7a:b4:18:d4:64:de:11:fa:be:b5:86:
         b8:ed:2a:c3:79:80:77:c5:b9:3d:59:95:92:23:16:65:9e:62:
         38:72:b7:62:8a:80:e0:78:6f:87:8e:5d:f7:ab:e4:7f:f7:47:
         90:9e:61:54:28:d4:f3:77:a6:74:22:ef:77:5e:a8:6e:81:8d:
         7d:1a:71:c2:db:20:34:d3:e2:a4:26:44:4a:0e:0a:f4:e5:f1:
         b4:fd:27:94:0d:ec:f5:39:ab:de:fb:0f:c4:e8:57:e7:31:6e:
         b3:07:ef:6b:ed:f6:30:99:c3:0b:5f:ab:40:d3:e2:0f:cd:25:
         f2:54:ed:02:22:a7:5a:79:5f:cd:2d:ea:be:7a:60:b2:fd:8d:
         d9:d2:ff:b7:b7:5f:6f:4e:cd:5b:08:46:f0:96:af:92:b0:18:
         9d:6c:af:ad:52:86:5a:28:4c:20:3c:96:73:62:0f:67:68:a9:
         a8:c6:5d:55:1c:9c:d7:f2:36:0e:79:84:73:74:b4:b0:83:1b:
         ac:20:c0:60:8f:a6:2c:53:71:3d:7c:e0:61:1e:d0:cd:85:ea:
         6c:7c:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----