Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/945057-def4-4f99-a7ee-046724396afd/1/Z_YSAx7q-eCyehKHoKbPgZlrf7s.mft
File:                     Z_YSAx7q-eCyehKHoKbPgZlrf7s.mft (raw, json)
Hash identifier:          gaUHIinGi9iBBqqxGPBx8BfP7aeiFiPDPC63l4Ys9c8=
Subject key identifier:   63:BE:FA:6C:03:37:F2:D7:58:45:02:97:D5:4F:A4:25:FB:08:07:6B
Authority key identifier: 67:F6:12:03:1E:EA:F9:E0:B2:7A:12:87:A0:A6:CF:81:99:6B:7F:BB
Certificate issuer:       /CN=67f612031eeaf9e0b27a1287a0a6cf81996b7fbb
Certificate serial:       01918D462D18C08FC96F869A056ED60939E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_YSAx7q-eCyehKHoKbPgZlrf7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/945057-def4-4f99-a7ee-046724396afd/1/Z_YSAx7q-eCyehKHoKbPgZlrf7s.mft
Manifest number:          DF
Signing time:             Mon 26 Aug 2024 06:01:12 +0000
Manifest this update:     Mon 26 Aug 2024 06:01:12 +0000
Manifest next update:     Tue 27 Aug 2024 06:01:12 +0000
Files and hashes:         1: Z_YSAx7q-eCyehKHoKbPgZlrf7s.crl (hash: ClP3lkD9uNpyDmUmVquCeHhOogoaBdb136lPpdNsF0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8d:46:2d:18:c0:8f:c9:6f:86:9a:05:6e:d6:09:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f612031eeaf9e0b27a1287a0a6cf81996b7fbb
        Validity
            Not Before: Aug 26 06:01:12 2024 GMT
            Not After : Aug 27 06:01:12 2024 GMT
        Subject: CN=63befa6c0337f2d758450297d54fa425fb08076b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:a0:44:3b:90:b0:cd:32:b9:a5:70:88:e1:
                    82:a0:39:53:94:48:7f:fa:c7:e3:1a:0d:7f:ab:6a:
                    d6:85:1b:eb:86:f9:4d:d9:90:09:4b:f1:37:5e:86:
                    bc:c1:1f:5a:fb:5d:bf:22:71:92:b4:87:5c:c0:70:
                    c9:1b:4d:10:68:2a:cb:cf:da:f6:1e:e9:80:3c:1c:
                    00:c5:26:96:01:b7:f8:7c:1c:fa:9d:0a:f7:92:e7:
                    a5:3b:e1:77:9e:1a:b8:3f:a7:2d:c5:3a:46:95:4f:
                    27:af:11:e8:a5:48:3a:14:61:6e:c4:90:65:d0:d8:
                    e8:1d:dd:82:92:b5:6c:46:93:76:74:18:65:3b:d6:
                    15:eb:e9:71:35:b8:b7:f3:76:ad:66:df:6d:c9:41:
                    99:8a:27:4f:24:eb:5d:35:84:ba:f0:c3:b5:4e:df:
                    c5:82:8b:55:8b:43:97:ea:3a:e2:93:44:bd:a1:00:
                    a4:44:56:2c:a3:20:3b:22:7e:51:92:28:d2:53:f1:
                    87:c6:18:d9:0a:ab:cf:00:a6:76:bc:8e:5e:08:ad:
                    a7:65:a4:50:42:18:35:94:03:8d:7a:a7:5c:a9:6d:
                    78:e6:a1:b4:0d:37:ad:90:8a:e6:8b:9f:ed:d3:07:
                    10:a7:00:69:f4:d9:06:1b:9b:f4:7e:2e:77:6f:a9:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BE:FA:6C:03:37:F2:D7:58:45:02:97:D5:4F:A4:25:FB:08:07:6B
            X509v3 Authority Key Identifier:
                keyid:67:F6:12:03:1E:EA:F9:E0:B2:7A:12:87:A0:A6:CF:81:99:6B:7F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_YSAx7q-eCyehKHoKbPgZlrf7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/945057-def4-4f99-a7ee-046724396afd/1/Z_YSAx7q-eCyehKHoKbPgZlrf7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/945057-def4-4f99-a7ee-046724396afd/1/Z_YSAx7q-eCyehKHoKbPgZlrf7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:f8:fa:b0:f0:03:02:53:fd:6f:d2:c1:bd:2f:9f:43:b4:
         e5:ba:9b:5c:f0:1a:e8:84:54:ca:d9:e0:81:fc:91:55:ef:12:
         e4:14:b3:5f:7f:4c:7a:11:1c:df:10:64:05:27:74:e6:29:84:
         e8:9a:dc:9f:a5:df:bc:91:d6:f2:f6:6a:aa:a7:5a:e8:29:63:
         c9:df:b3:e2:98:18:3e:67:08:c8:fd:e3:48:a1:cf:00:21:ba:
         9c:59:57:3b:57:91:e3:ba:39:76:2f:c8:de:25:b5:33:fc:4f:
         13:05:59:44:09:6c:1a:0d:ba:07:cf:e4:8a:9f:9c:36:1a:87:
         d7:d3:12:7e:59:9c:e3:07:71:9a:c4:48:a5:7d:fb:8c:f6:18:
         51:1d:d5:cb:7a:56:be:11:44:b7:9d:90:1e:82:e1:78:8a:74:
         28:69:3e:23:9c:d2:31:29:2c:8c:dd:48:3d:79:28:43:b9:0f:
         c4:d9:c3:a0:6b:fd:6a:be:8e:7e:09:a7:75:52:3e:2b:12:ea:
         1b:da:ff:9e:6c:41:4a:e3:43:5d:c6:fd:f2:2a:f6:ae:2b:40:
         15:11:20:65:e0:cb:ab:53:68:93:34:75:40:ae:2d:4e:da:7f:
         4b:d3:b5:55:41:b3:1c:74:4a:21:af:6a:44:52:a4:17:fd:5a:
         f4:78:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----