Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft
File:                     z727p6-4lqBfaa3SSw-XI5LjMjI.mft (raw, json)
Hash identifier:          X1SxMNkqI7L0IN6v+2L7zgtXVQNQJE+w/zjfYOui6xQ=
Subject key identifier:   51:25:B2:15:8D:46:D4:72:8D:C2:35:A8:2D:A8:CA:07:77:3C:07:7A
Authority key identifier: CF:BD:BB:A7:AF:B8:96:A0:5F:69:AD:D2:4B:0F:97:23:92:E3:32:32
Certificate issuer:       /CN=cfbdbba7afb896a05f69add24b0f972392e33232
Certificate serial:       019347167CF038852FE4EA65D4716FB10464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z727p6-4lqBfaa3SSw-XI5LjMjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft
Manifest number:          1313
Signing time:             Wed 20 Nov 2024 01:01:16 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:16 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:16 +0000
Files and hashes:         1: z727p6-4lqBfaa3SSw-XI5LjMjI.crl (hash: cRVqNtTSXd07oOnjyanoHGP4FPwvDJEU4GtNxCzIBmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:7c:f0:38:85:2f:e4:ea:65:d4:71:6f:b1:04:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfbdbba7afb896a05f69add24b0f972392e33232
        Validity
            Not Before: Nov 20 01:01:16 2024 GMT
            Not After : Nov 21 01:01:16 2024 GMT
        Subject: CN=5125b2158d46d4728dc235a82da8ca07773c077a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:9e:cf:3d:3f:65:63:2a:28:61:55:ae:68:
                    48:08:22:92:f7:39:63:9d:23:92:d4:2f:7e:82:d9:
                    d7:1f:7a:6f:d6:8c:6f:31:a6:15:c9:58:36:93:e7:
                    64:85:96:2e:86:4e:cb:90:61:a1:84:13:de:7e:07:
                    a5:74:ac:ca:43:fc:e5:92:68:68:ba:54:dd:47:47:
                    ac:c1:94:79:c8:58:fa:0c:dd:84:9d:99:24:d0:9f:
                    3b:63:fe:c1:21:d6:65:e4:73:09:ea:3b:f0:9d:12:
                    52:87:e6:83:28:92:b4:8f:88:4e:34:fe:55:b0:c6:
                    b9:c0:78:ec:b7:9a:24:db:66:ce:70:d7:2f:59:6c:
                    c6:1d:89:16:4d:18:70:81:95:2f:e1:86:b2:6f:69:
                    22:cd:fb:67:d9:4e:30:ea:87:89:4f:1b:a9:d8:d7:
                    ff:78:61:64:cd:c9:2a:4c:64:8f:16:ec:2f:d4:e4:
                    d7:1e:09:93:c3:f0:79:a1:fd:9f:20:81:e5:65:6d:
                    d3:82:bb:41:31:02:7f:87:60:90:f2:8e:d4:de:cc:
                    8c:04:16:88:df:35:c0:46:28:a8:a0:5d:66:56:14:
                    bf:d7:b3:41:db:db:da:c7:85:a6:a2:06:dd:67:c9:
                    6e:ba:92:0b:31:c6:40:56:99:d4:67:a7:cd:db:c2:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:25:B2:15:8D:46:D4:72:8D:C2:35:A8:2D:A8:CA:07:77:3C:07:7A
            X509v3 Authority Key Identifier:
                keyid:CF:BD:BB:A7:AF:B8:96:A0:5F:69:AD:D2:4B:0F:97:23:92:E3:32:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z727p6-4lqBfaa3SSw-XI5LjMjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:83:f6:91:c9:5e:ba:9f:45:2e:dc:79:7f:43:76:27:e8:
         b7:e2:19:85:62:76:a2:7a:02:ec:82:dc:3a:9d:43:a0:69:56:
         6d:96:ab:15:c0:bd:ae:1c:50:41:9f:2a:72:c6:51:33:a7:79:
         46:b4:02:f2:0c:fc:9b:0f:11:cd:86:91:e1:cd:4e:29:3e:a8:
         58:d0:4f:4c:a7:31:6e:25:3e:bb:7c:73:2d:29:91:57:1c:c3:
         1c:4f:80:5a:d4:ef:fb:f1:57:e5:de:75:f8:fd:14:8f:b9:8b:
         9f:19:f9:7d:a9:b9:2f:59:19:53:41:68:13:93:15:56:26:43:
         13:cd:de:62:49:76:e2:b5:72:82:02:4b:24:0c:84:c7:14:34:
         e3:f3:48:44:32:0e:38:5b:b0:5d:9a:03:20:9f:91:8a:ad:0f:
         22:db:d4:77:54:03:ab:d5:21:ba:e4:b8:33:ee:f6:ef:cd:a8:
         71:7a:40:d2:5a:06:b9:63:3e:f9:2d:d7:dc:0e:90:7f:e4:1a:
         30:4d:a2:e1:8e:31:4b:c7:ff:4b:bf:53:0d:52:18:e4:19:6a:
         be:99:8f:34:18:87:bd:da:73:a3:bd:1c:0f:fd:cc:59:72:2c:
         32:cc:15:27:e8:8c:61:f8:bb:a0:f2:46:92:12:2e:8b:51:07:
         bc:67:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----