Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
File:                     hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft (raw, json)
Hash identifier:          ZP1+uoUVdx6GToir2vISqY00EuSZJ/9D6v/6ry1idQg=
Subject key identifier:   99:BC:DA:5C:88:B4:66:55:91:D2:CA:4B:C9:2F:B0:47:B2:BC:83:9B
Authority key identifier: 87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
Certificate issuer:       /CN=8737f3371adbad0e23d90293f8935361edc48c79
Certificate serial:       0193FAB1526DF7C9A08849842C3C226A827B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
Manifest number:          0494
Signing time:             Tue 24 Dec 2024 22:02:24 +0000
Manifest this update:     Tue 24 Dec 2024 22:02:24 +0000
Manifest next update:     Wed 25 Dec 2024 22:02:24 +0000
Files and hashes:         1: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl (hash: S40jDrHCkpWlfDF0PyXnqi99+F0l35IzwPWQlPC6SXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b1:52:6d:f7:c9:a0:88:49:84:2c:3c:22:6a:82:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8737f3371adbad0e23d90293f8935361edc48c79
        Validity
            Not Before: Dec 24 22:02:24 2024 GMT
            Not After : Dec 25 22:02:24 2024 GMT
        Subject: CN=99bcda5c88b4665591d2ca4bc92fb047b2bc839b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:e5:7e:a6:ba:92:92:e4:7e:36:42:2e:db:
                    0b:b4:f7:fd:64:6e:dd:9b:58:bf:fd:ef:4b:01:6d:
                    b2:d9:26:37:fb:03:51:1e:6e:b4:7b:90:93:da:ee:
                    38:f3:83:6a:6b:1d:dd:e4:ce:42:70:dc:b6:4f:40:
                    80:d5:4a:fc:2e:61:fc:6b:b5:30:61:f3:73:b4:c3:
                    28:44:ea:fe:5a:c3:16:ca:a5:21:f1:1c:62:8e:d9:
                    50:50:6e:2a:4c:8d:99:f2:51:47:0b:00:2f:03:68:
                    ee:b1:8d:97:3a:47:5e:26:ec:18:e9:bc:c7:f4:5c:
                    8d:99:21:90:bd:92:fa:b8:13:d9:86:b8:18:c5:53:
                    b2:f9:02:c4:4f:f1:54:51:dd:b0:bc:80:b9:65:62:
                    ae:47:c0:6b:b1:d1:22:1d:7b:32:56:96:2f:b2:b5:
                    ee:ab:18:24:4b:d3:3c:d2:c1:1f:77:5e:18:4e:17:
                    08:4c:88:2d:5f:97:de:7d:10:6e:f4:d7:11:48:10:
                    da:7d:bf:20:ea:f7:82:a2:a3:99:be:2a:67:f6:f5:
                    32:36:bf:30:e3:df:2a:1d:75:3a:01:ff:48:8c:1c:
                    07:89:c0:23:c5:c9:7c:b7:a3:26:7f:ab:95:aa:85:
                    57:fb:da:19:22:6a:24:59:71:70:ce:00:05:5a:e0:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BC:DA:5C:88:B4:66:55:91:D2:CA:4B:C9:2F:B0:47:B2:BC:83:9B
            X509v3 Authority Key Identifier:
                keyid:87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:be:cf:98:01:80:a4:12:64:9f:76:8e:06:02:05:d4:d0:
         4e:3e:ee:8f:ef:50:4b:ef:52:06:b2:32:d2:27:40:6c:42:76:
         86:5a:d7:85:ca:4d:5d:6e:ed:8a:e8:4f:c3:d6:d6:88:2b:2f:
         e4:7f:7a:23:f1:75:b0:22:84:27:c9:76:d9:c4:8b:b4:7d:bb:
         42:da:b8:c4:19:bb:43:ca:ff:b8:b7:4b:e8:3b:2d:96:4b:d2:
         8c:71:b5:7b:24:48:02:af:7d:d0:53:e0:9e:60:14:a6:9c:5d:
         84:4d:d6:62:c4:ca:72:ae:05:a6:23:88:27:09:e5:ab:66:28:
         00:76:6b:6d:8a:2b:7f:0d:31:78:20:bc:95:29:f9:44:de:30:
         95:22:30:40:9f:20:17:e2:35:a8:66:56:33:7f:b6:96:19:b7:
         4b:ba:98:27:ea:53:be:24:a0:8c:42:53:33:c7:f6:67:9d:7c:
         18:6b:49:ee:4b:2b:2e:c5:45:33:80:a0:93:d4:63:f2:ad:5e:
         f8:0a:6f:ed:51:c6:5c:65:7e:2c:0d:c8:de:2e:17:f6:95:20:
         d4:83:99:61:8c:ef:ef:17:b6:0b:46:65:63:20:26:81:48:31:
         fc:e9:6c:25:4d:9b:af:71:67:21:61:e9:f0:f4:f3:87:8a:06:
         91:a9:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----