Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft
File:                     VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft (raw, json)
Hash identifier:          4A4mUp7OYySnSxlZwy0U/HayqFdvfe4oCHgPW9lLwvw=
Subject key identifier:   19:05:8E:49:D8:96:34:60:7F:FD:A2:71:6D:92:CF:69:D9:91:81:67
Authority key identifier: 57:32:B4:65:CA:11:B6:EE:72:7E:72:C2:78:19:B8:5E:83:DB:0D:85
Certificate issuer:       /CN=5732b465ca11b6ee727e72c27819b85e83db0d85
Certificate serial:       01934716EFF0FB88A090636A461ECA665D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft
Manifest number:          0B5A
Signing time:             Wed 20 Nov 2024 01:01:45 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:45 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:45 +0000
Files and hashes:         1: VzK0ZcoRtu5yfnLCeBm4XoPbDYU.crl (hash: BcEygxC0AItA/VH8Mquz5bLnmKod2VgkhEtMrQHSsgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:ef:f0:fb:88:a0:90:63:6a:46:1e:ca:66:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5732b465ca11b6ee727e72c27819b85e83db0d85
        Validity
            Not Before: Nov 20 01:01:45 2024 GMT
            Not After : Nov 21 01:01:45 2024 GMT
        Subject: CN=19058e49d89634607ffda2716d92cf69d9918167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:84:bf:d4:c5:46:0e:07:14:e6:89:5a:25:
                    05:e7:79:06:53:17:8c:74:9a:52:fe:50:ea:e6:fd:
                    7d:bf:d6:7d:9e:86:7d:95:2e:92:6f:bc:40:2c:70:
                    db:e1:4f:33:83:5a:22:92:09:de:b4:ec:da:58:fe:
                    b6:12:4f:58:25:c9:ff:41:79:7e:2f:f8:84:f7:1d:
                    d8:28:03:32:7a:50:11:4f:16:a6:fe:7d:e1:96:be:
                    f9:6d:95:44:9a:ef:0e:81:4c:e3:ba:3b:4c:01:45:
                    29:c0:d5:2f:ac:fb:99:c3:3d:8a:ec:2a:85:55:31:
                    0c:97:97:cf:5e:6e:53:80:9d:d7:4c:15:ed:fe:a8:
                    17:61:ae:93:33:ed:c4:49:77:b3:0e:a5:fb:92:48:
                    e5:43:83:3c:eb:c0:5b:a3:27:40:fe:4d:44:c8:d7:
                    08:7b:57:dd:cd:e8:a2:5d:46:fb:0e:81:f0:13:4e:
                    84:c0:08:51:b2:87:e1:99:ab:0f:72:74:5a:57:02:
                    e6:e9:70:64:9d:a2:d2:13:d1:18:7c:b5:44:4c:06:
                    48:92:b2:8d:66:c9:a6:d7:6a:af:6b:ac:d0:61:7f:
                    ac:0e:fd:24:71:c8:3d:cd:7e:e9:eb:7a:86:ec:15:
                    b3:d5:e7:59:b0:ce:75:f3:e9:11:fc:a1:e0:b2:35:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:8E:49:D8:96:34:60:7F:FD:A2:71:6D:92:CF:69:D9:91:81:67
            X509v3 Authority Key Identifier:
                keyid:57:32:B4:65:CA:11:B6:EE:72:7E:72:C2:78:19:B8:5E:83:DB:0D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:b4:e8:9a:b4:15:5a:33:2f:d7:ce:01:68:7d:09:2f:bb:
         16:20:88:4c:fc:2b:ee:5f:27:23:e3:ba:68:b5:0a:32:9e:e4:
         64:9c:7f:15:bb:36:66:0f:93:2b:b8:1a:54:37:16:71:cf:1f:
         00:72:5f:71:e3:50:3e:2d:d3:b6:46:0f:8a:16:2c:a3:7e:20:
         fe:80:fc:9b:cb:a8:3d:aa:38:0c:31:6c:2f:07:3d:c5:11:a3:
         e1:dc:99:90:b7:22:05:27:37:51:e7:14:cb:f4:65:51:16:74:
         9a:89:e0:cc:c5:2b:d5:1b:9a:d0:f5:a3:63:0b:eb:9d:ec:e8:
         64:ee:e2:3b:6b:88:4b:80:e9:c4:bb:c9:07:68:28:ef:7c:48:
         21:da:23:db:29:31:2c:b5:f2:eb:ae:39:15:0f:dc:4b:d1:21:
         01:ab:12:3b:99:3f:0a:2b:dc:19:f4:1e:99:86:51:9a:27:b2:
         b9:7e:4d:41:25:94:96:7e:88:23:bb:a4:ce:22:fc:24:31:4e:
         39:ec:35:b2:61:e1:2e:dc:0b:a2:a2:0f:d3:d1:3b:24:3a:ad:
         06:b1:4e:f2:cb:77:ff:1b:a9:9e:9f:80:3f:50:e4:69:0f:3a:
         a7:35:ba:15:4d:ce:f5:f4:7c:aa:09:c4:29:04:ec:c9:e4:15:
         9d:99:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----