Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
File:                     zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft (raw, json)
Hash identifier:          hQJCYw5m9wLNOO3ShIl+u2j7+zb+DYCcU8XrBlcnYI4=
Subject key identifier:   EA:8A:9B:9B:8A:B1:45:7B:8B:A4:E6:60:E9:37:F8:11:20:24:CB:9C
Authority key identifier: CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65
Certificate issuer:       /CN=cca3af4dd56a0197c5730761606dae527de09265
Certificate serial:       019546DA0C4731D79196F5BD32A3BD794497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
Manifest number:          0783
Signing time:             Thu 27 Feb 2025 10:00:49 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:49 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:49 +0000
Files and hashes:         1: zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl (hash: hY01RuKLejtXVPD1jteN3sFGdvuLPskEwOgDaXkDu6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:0c:47:31:d7:91:96:f5:bd:32:a3:bd:79:44:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cca3af4dd56a0197c5730761606dae527de09265
        Validity
            Not Before: Feb 27 10:00:49 2025 GMT
            Not After : Feb 28 10:00:49 2025 GMT
        Subject: CN=ea8a9b9b8ab1457b8ba4e660e937f8112024cb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:3f:4e:be:8d:39:db:67:04:c0:ef:0a:86:
                    ea:fb:b8:9d:b2:4d:7e:fd:2c:56:73:96:c9:55:71:
                    84:a5:14:8b:93:eb:7f:12:0e:f0:0d:d3:a7:cd:20:
                    40:e7:e9:8b:ed:5c:7d:5a:e9:c3:3b:fb:57:58:1f:
                    5c:fc:aa:1d:b9:a1:ad:5c:7f:05:af:70:11:28:02:
                    fa:5f:fa:54:80:2e:6f:b3:33:64:09:20:9f:e9:07:
                    d8:82:2e:4c:0a:65:07:9d:cf:12:43:fa:54:fd:69:
                    86:a0:af:9d:89:04:a4:a2:7e:65:8d:8a:97:22:b2:
                    0f:32:49:06:ab:37:f5:f0:09:d4:45:78:28:f7:22:
                    00:66:78:04:04:86:18:66:99:0a:23:22:45:13:20:
                    2e:2f:6e:92:8a:29:12:05:bf:78:be:07:dc:af:8d:
                    79:d6:95:72:40:02:85:84:66:7f:00:17:85:1c:20:
                    88:87:cc:57:aa:92:56:db:a9:40:55:44:66:47:59:
                    45:23:1b:cc:7f:22:c8:26:77:73:cb:07:0f:0a:37:
                    64:3b:ba:97:ad:a0:6d:00:f5:fc:e5:fe:0c:74:8d:
                    b9:da:55:18:69:d7:b4:df:c7:47:08:ec:79:83:09:
                    bd:a8:71:7a:90:cc:42:26:a0:93:ab:22:15:f6:70:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:9B:9B:8A:B1:45:7B:8B:A4:E6:60:E9:37:F8:11:20:24:CB:9C
            X509v3 Authority Key Identifier:
                keyid:CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:45:77:61:3e:63:98:19:2d:48:8b:f4:5e:9d:0b:dd:b9:
         ba:48:75:cc:93:65:7f:ef:b1:0f:ca:6f:f8:24:6b:b2:b8:1a:
         a4:b0:d3:f1:a6:cd:8b:65:c8:53:58:ab:b5:22:2a:0d:b1:e9:
         71:40:90:4e:a3:b0:d1:3e:26:91:cc:e3:e7:59:db:09:d3:59:
         74:ad:71:96:fc:c1:c8:70:29:65:9b:25:3c:77:9d:ce:e4:9b:
         da:9c:42:55:c0:36:a8:44:d2:75:49:04:b9:b5:24:92:f8:c1:
         5d:e4:af:3a:59:16:71:a4:4e:33:6a:17:8e:6a:ae:8a:da:26:
         0d:39:97:01:c1:4e:a0:74:bc:1c:b5:8d:9a:da:09:71:bc:b8:
         11:1f:ee:7a:b4:5a:f7:50:46:d5:70:32:7a:ec:98:a2:f2:60:
         b6:cc:99:f6:16:54:3a:09:88:77:a3:f3:d1:1f:03:18:91:a6:
         1d:80:1b:9c:a1:22:e6:68:1d:5c:77:d8:9d:82:55:f5:df:c1:
         ed:7a:67:fa:e8:ac:8c:b7:f7:91:ad:a3:30:56:08:61:47:3e:
         9c:9c:fe:30:15:38:9d:c1:6d:12:e2:b0:06:3e:21:8a:a7:84:
         5b:1f:73:35:41:50:83:01:0e:e8:0e:2b:ed:2e:c9:69:70:63:
         51:c4:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----