Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
File:                     ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft (raw, json)
Hash identifier:          Aj49hUt/zddSGYgLu/kHtV5S1/flu8klyWSC3bVXbqE=
Subject key identifier:   6F:82:AF:B5:3B:37:65:7A:81:BB:7A:80:59:85:CB:B6:22:DD:0F:AC
Authority key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Certificate issuer:       /CN=65865968a1d8f4f377865c913af3b9af890d7cce
Certificate serial:       0193FA41B7BBB526A60EC4BB8326418BAD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
Manifest number:          13C8
Signing time:             Tue 24 Dec 2024 20:00:31 +0000
Manifest this update:     Tue 24 Dec 2024 20:00:31 +0000
Manifest next update:     Wed 25 Dec 2024 20:00:31 +0000
Files and hashes:         1: ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl (hash: i6oSAMSGAO/l+xYnk6sE7da/libfGbs/XGc+u/xKC4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:41:b7:bb:b5:26:a6:0e:c4:bb:83:26:41:8b:ad:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65865968a1d8f4f377865c913af3b9af890d7cce
        Validity
            Not Before: Dec 24 20:00:31 2024 GMT
            Not After : Dec 25 20:00:31 2024 GMT
        Subject: CN=6f82afb53b37657a81bb7a805985cbb622dd0fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:86:ce:4c:8c:86:dd:b3:43:30:9a:f1:65:
                    d1:da:c9:88:7c:2f:a5:4b:c1:f7:2d:83:a5:cd:17:
                    6c:7a:e8:e7:b9:8e:af:cd:5d:3e:b8:a8:b9:25:43:
                    a9:2a:bb:44:52:bb:3d:56:f2:5d:da:73:ed:ab:15:
                    d5:3e:3b:31:09:7a:d1:5c:aa:2e:7e:f7:b3:11:59:
                    e8:15:13:eb:b3:b4:8f:39:53:b5:16:dd:da:73:fa:
                    ef:20:50:85:f8:97:31:bf:56:b6:07:bc:d9:3b:c0:
                    64:b3:19:b2:54:d4:ae:07:f4:b2:b2:49:89:1f:81:
                    30:51:71:1e:0c:81:12:cc:8e:33:e7:70:75:d4:ee:
                    97:fb:75:8d:f6:d2:4f:65:62:99:d4:8d:7e:f5:f7:
                    23:02:a7:68:19:47:fe:ea:d8:a5:ad:9c:6d:e5:1b:
                    8a:5e:d6:f2:3b:c2:7f:e9:c7:13:31:98:c7:06:cb:
                    8c:ad:f8:f7:ce:80:8f:2b:3a:77:5a:13:10:12:56:
                    0c:22:ad:50:7d:b5:c5:53:9b:6a:5d:47:30:5c:2f:
                    20:c2:55:d8:4b:a2:54:82:48:c2:71:2a:74:c5:a6:
                    70:e1:e2:1b:73:62:65:44:14:72:57:33:e3:db:3a:
                    37:17:42:9f:b5:c5:20:55:40:88:98:3c:a0:a5:7f:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:AF:B5:3B:37:65:7A:81:BB:7A:80:59:85:CB:B6:22:DD:0F:AC
            X509v3 Authority Key Identifier:
                keyid:65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:7e:06:a0:b6:17:e5:bf:96:bf:f7:48:d8:21:d1:be:0e:
         49:32:c0:a2:97:45:a1:12:ae:bf:4b:c6:24:b7:5d:fc:c8:d9:
         a1:19:96:cc:c5:f8:6f:f1:d2:c2:05:f9:1c:48:f3:95:c4:0b:
         b7:aa:71:57:68:ad:bc:f8:b8:26:42:c4:f0:53:65:24:a4:45:
         d5:f3:9e:b2:10:7f:d5:74:b3:6b:79:f2:ba:bd:de:db:9e:23:
         d3:a6:6a:61:e2:0c:e0:86:6d:a8:77:3f:4c:0d:1e:7d:e9:8c:
         77:de:0c:4f:59:f3:0b:5a:f4:ba:d6:95:5c:b0:fd:7f:0a:47:
         05:d3:7f:81:7c:fd:03:eb:b9:b5:b1:cb:40:ab:78:d6:94:17:
         ad:6d:20:41:58:b0:64:49:9d:55:08:73:ea:ab:42:68:ad:85:
         9a:29:a8:09:c7:c4:0b:55:82:e0:eb:29:0c:33:0f:85:13:95:
         7d:8d:87:0a:f2:59:04:46:ff:5a:c1:38:14:65:48:35:32:f9:
         5c:55:ac:df:0d:04:7e:40:92:37:b4:ae:d4:33:57:8e:3c:e9:
         ff:60:b0:ce:01:93:14:34:8d:07:a5:5f:16:2f:2b:05:49:a6:
         1e:50:4e:f9:d0:13:7c:6e:3f:d4:d2:36:d7:42:01:86:a1:63:
         05:d7:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----