Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/16d8eb-ca72-4832-a9eb-cf755354b873/1/ZRuzdLWteTHwNPfmcBupIfepka4.mft
File:                     ZRuzdLWteTHwNPfmcBupIfepka4.mft (raw, json)
Hash identifier:          bgnUZejB+jE9yy4RHxKEfvnZB4oHJWTBEHteQxLRUhg=
Subject key identifier:   E0:4C:2B:70:C0:0D:84:D5:DF:53:3E:3E:4D:95:2B:0A:81:7F:F4:18
Authority key identifier: 65:1B:B3:74:B5:AD:79:31:F0:34:F7:E6:70:1B:A9:21:F7:A9:91:AE
Certificate issuer:       /CN=651bb374b5ad7931f034f7e6701ba921f7a991ae
Certificate serial:       01922F474BFD729BD8D65CD4893FD82D2494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRuzdLWteTHwNPfmcBupIfepka4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/16d8eb-ca72-4832-a9eb-cf755354b873/1/ZRuzdLWteTHwNPfmcBupIfepka4.mft
Manifest number:          017B
Signing time:             Thu 26 Sep 2024 17:00:54 +0000
Manifest this update:     Thu 26 Sep 2024 17:00:54 +0000
Manifest next update:     Fri 27 Sep 2024 17:00:54 +0000
Files and hashes:         1: ZRuzdLWteTHwNPfmcBupIfepka4.crl (hash: E+cy7ehHXpGyvfgdOOaBP8fiWxJ/bOQl5w6LJEOh4CY=)
                          2: atqE3t8Np_1o8omK51FqtdScWww.roa (hash: niIvEdNxHZTmfQRirMqx2NUAeXJuNlhJBiW5SOXW6I8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:47:4b:fd:72:9b:d8:d6:5c:d4:89:3f:d8:2d:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bb374b5ad7931f034f7e6701ba921f7a991ae
        Validity
            Not Before: Sep 26 17:00:54 2024 GMT
            Not After : Sep 27 17:00:54 2024 GMT
        Subject: CN=e04c2b70c00d84d5df533e3e4d952b0a817ff418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:03:89:5f:77:8b:a0:13:ca:55:38:3a:6f:
                    f8:a3:26:24:8b:99:3c:05:73:2d:d0:99:52:1e:20:
                    f2:26:33:00:5b:c0:53:8c:c0:e4:8f:2d:ff:79:89:
                    a9:86:a3:49:30:3f:ec:4c:57:a4:79:8c:cb:05:a5:
                    af:e0:ca:df:0a:a4:08:9c:98:a3:46:2b:f1:dd:8e:
                    09:c2:8b:46:bd:3f:ae:3d:eb:2a:4a:ce:68:73:83:
                    be:cb:54:e9:61:a4:f7:50:c5:d6:6f:83:d9:60:a2:
                    c1:4d:5c:38:5b:c6:b0:dd:76:9e:48:ff:2d:b6:54:
                    94:4b:ec:a2:f9:dc:48:5e:3f:cd:a8:09:41:8d:c2:
                    3b:d7:b8:4c:d0:96:0b:10:a3:0f:b1:40:9a:70:99:
                    4c:06:58:ce:db:a4:bb:50:d8:9e:a2:cf:56:4e:b4:
                    b2:4d:99:2c:21:cf:5e:69:30:5e:a6:a0:2f:8b:86:
                    bf:f6:fb:a4:e4:a8:bf:26:d8:b4:ca:3e:38:72:85:
                    0a:fa:b2:dd:0b:55:c1:e5:23:45:1c:3e:23:9c:df:
                    d5:dd:43:4c:04:f1:f7:6b:c3:36:07:84:3e:04:2a:
                    78:3f:34:6c:02:84:b8:71:14:ca:a5:b6:44:26:34:
                    28:2e:15:b1:a1:3c:13:aa:cd:2a:53:58:57:53:6c:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:2B:70:C0:0D:84:D5:DF:53:3E:3E:4D:95:2B:0A:81:7F:F4:18
            X509v3 Authority Key Identifier:
                keyid:65:1B:B3:74:B5:AD:79:31:F0:34:F7:E6:70:1B:A9:21:F7:A9:91:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRuzdLWteTHwNPfmcBupIfepka4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/16d8eb-ca72-4832-a9eb-cf755354b873/1/ZRuzdLWteTHwNPfmcBupIfepka4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/16d8eb-ca72-4832-a9eb-cf755354b873/1/ZRuzdLWteTHwNPfmcBupIfepka4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:aa:9c:84:5e:32:50:95:d4:eb:ad:b2:fc:ec:2b:2a:86:
         ee:a2:46:d0:e0:be:26:1d:eb:38:4d:50:6b:2a:93:8e:ff:8f:
         89:80:a0:16:7d:cf:20:c6:06:a0:02:5c:03:85:9b:28:66:fa:
         e3:08:38:7b:20:51:d4:c9:7e:63:d4:ec:ac:ff:97:71:4a:95:
         70:7a:d8:71:01:70:f3:44:d4:c5:37:28:c5:82:29:fd:83:34:
         88:02:08:0c:5e:40:b3:c1:ad:5d:9a:91:c7:8b:ad:24:86:56:
         3d:e8:ff:35:75:bc:13:fd:e8:6b:e7:b5:26:52:67:d8:65:fb:
         4e:59:20:64:16:ed:e0:12:bf:12:65:a9:2f:83:a3:87:33:00:
         db:34:c1:0b:9f:05:91:d1:03:ff:aa:95:07:60:f7:c7:30:9f:
         a3:42:43:a6:06:03:ce:48:86:b3:8a:cc:e9:18:94:7b:d7:09:
         15:45:64:bc:12:12:07:4d:55:01:3b:8a:8f:49:a0:21:dc:32:
         f9:9d:7f:29:38:6e:17:0d:5b:6c:b5:76:5b:7d:50:c4:63:77:
         9a:35:cc:96:af:6c:79:d6:30:af:01:d2:ad:0b:5d:0e:79:20:
         60:aa:23:88:09:cc:e9:7c:8e:39:6b:be:1f:5e:4b:5d:19:87:
         39:e3:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----