Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f980ba-e91f-49b8-8df8-ef89bc267c0d/1/sZ5ilXD4q1joJu2O92031gIZFec.mft
File:                     sZ5ilXD4q1joJu2O92031gIZFec.mft (raw, json)
Hash identifier:          dkcJHb6WQ/MPbNBazi4xzi2ctcVlwyCwGn/g7/81vVk=
Subject key identifier:   80:D0:17:C2:D3:2E:0A:04:1D:26:81:09:14:D3:5E:52:B8:48:CC:7B
Authority key identifier: B1:9E:62:95:70:F8:AB:58:E8:26:ED:8E:F7:6D:37:D6:02:19:15:E7
Certificate issuer:       /CN=b19e629570f8ab58e826ed8ef76d37d6021915e7
Certificate serial:       0192AD051608EF8D7C9AE6AF6570744B43F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ5ilXD4q1joJu2O92031gIZFec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/f980ba-e91f-49b8-8df8-ef89bc267c0d/1/sZ5ilXD4q1joJu2O92031gIZFec.mft
Manifest number:          086C
Signing time:             Mon 21 Oct 2024 03:00:44 +0000
Manifest this update:     Mon 21 Oct 2024 03:00:44 +0000
Manifest next update:     Tue 22 Oct 2024 03:00:44 +0000
Files and hashes:         1: sZ5ilXD4q1joJu2O92031gIZFec.crl (hash: MNabxlcXHeGXEODzLM0e/kgHIHW/o0+gJzcuYLf2MVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ad:05:16:08:ef:8d:7c:9a:e6:af:65:70:74:4b:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19e629570f8ab58e826ed8ef76d37d6021915e7
        Validity
            Not Before: Oct 21 03:00:44 2024 GMT
            Not After : Oct 22 03:00:44 2024 GMT
        Subject: CN=80d017c2d32e0a041d26810914d35e52b848cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:da:dc:c9:79:81:35:69:38:d2:cb:7b:f2:
                    9d:9a:ab:f4:ca:6a:3a:58:f1:c5:92:34:92:e9:ec:
                    88:04:e6:9a:75:b6:62:86:9a:dc:9d:2f:78:c8:b5:
                    8f:5e:25:00:b9:50:94:38:fb:c2:3e:24:52:a7:54:
                    d3:35:c3:a1:54:75:31:e8:3d:ec:b1:b4:d2:8f:4f:
                    a9:98:7f:dd:2d:86:2b:2b:fd:a7:e9:4d:27:bd:cd:
                    08:a3:47:3a:89:3d:22:35:01:e1:4c:03:aa:9f:4e:
                    38:e9:4e:ed:2e:27:8b:4a:86:ed:e6:e4:a7:12:42:
                    49:1a:9f:e0:07:b9:9b:35:bd:4f:8f:d1:92:23:ac:
                    91:95:84:65:b5:ed:34:dc:9c:69:61:2c:14:3b:f1:
                    b4:ca:16:0e:dd:a9:87:4a:fc:2e:92:11:00:a1:1e:
                    02:98:55:d8:3b:ea:ce:66:99:13:24:6b:bc:b3:a2:
                    58:84:52:b8:5e:34:54:b6:48:61:30:4f:17:39:f4:
                    75:cf:2d:f8:e9:bc:46:a4:bb:77:e7:07:8a:7f:54:
                    2f:a9:a7:e2:1f:9b:ae:25:52:09:97:ae:a2:18:8d:
                    1e:f6:1b:8e:10:c7:f9:73:6e:89:cd:9e:7b:1f:c5:
                    1e:54:21:28:31:3e:ba:96:96:cd:42:a9:a3:4a:e8:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:17:C2:D3:2E:0A:04:1D:26:81:09:14:D3:5E:52:B8:48:CC:7B
            X509v3 Authority Key Identifier:
                keyid:B1:9E:62:95:70:F8:AB:58:E8:26:ED:8E:F7:6D:37:D6:02:19:15:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ5ilXD4q1joJu2O92031gIZFec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f980ba-e91f-49b8-8df8-ef89bc267c0d/1/sZ5ilXD4q1joJu2O92031gIZFec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f980ba-e91f-49b8-8df8-ef89bc267c0d/1/sZ5ilXD4q1joJu2O92031gIZFec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:29:c3:3e:34:b5:76:94:9b:76:ed:cd:06:f7:57:36:f4:
         60:26:52:a6:88:69:a2:49:3b:ae:a1:9a:a0:34:38:18:5e:c0:
         10:93:fc:43:99:ea:e0:d4:1d:78:24:7c:a8:33:de:9c:31:39:
         92:68:07:f2:c1:8a:22:55:af:a6:a0:76:e7:ed:cb:74:8a:74:
         8e:c2:99:d9:ed:76:21:62:fc:34:84:31:25:1a:cc:de:e9:59:
         1b:e3:c2:78:d5:bb:e8:85:f0:c7:eb:4a:c1:d4:0e:a4:4d:69:
         47:73:84:38:01:a2:3a:98:15:f5:15:95:a2:57:85:81:8c:0a:
         5c:12:52:ba:6c:97:e7:bb:96:d1:0a:f2:3a:57:7e:e8:1d:39:
         92:61:81:a0:96:f2:dc:88:a0:f5:9b:1e:e9:29:34:bb:e0:8c:
         ae:c8:f9:06:78:b6:c2:53:c9:ea:88:3e:25:33:ac:a2:8c:58:
         88:d0:41:9e:30:a3:14:35:28:2a:a0:67:6a:4d:69:4e:5a:4a:
         ea:b4:3a:37:57:73:8d:18:6b:bf:7e:55:5c:63:47:58:36:e1:
         23:68:ba:e2:b7:56:0c:90:1f:72:13:15:ac:4f:22:8e:3d:58:
         ba:fc:d6:6a:4c:84:7d:e0:23:58:d7:85:11:e2:c5:7f:b1:82:
         c9:47:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----