Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.mft
File:                     ZReSZYA7eATQ_M9ZYqixY3Q-DR4.mft (raw, json)
Hash identifier:          uftP6SXOhEziE8sm1KgJIj+mOxAxueczbbTrQWLWgzI=
Subject key identifier:   8A:53:A1:E3:0E:30:92:65:A6:DB:74:B0:FA:FC:CC:50:B7:B2:29:46
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Certificate issuer:       /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial:       019346DEC69E922BD7F74345BD93E07B334B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.mft
Manifest number:          0522
Signing time:             Wed 20 Nov 2024 00:00:25 +0000
Manifest this update:     Wed 20 Nov 2024 00:00:25 +0000
Manifest next update:     Thu 21 Nov 2024 00:00:25 +0000
Files and hashes:         1: ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl (hash: bRRbo7v15ZqWm00ef1zxysuBi2J9WT0m+GopzIqEFYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:de:c6:9e:92:2b:d7:f7:43:45:bd:93:e0:7b:33:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
        Validity
            Not Before: Nov 20 00:00:25 2024 GMT
            Not After : Nov 21 00:00:25 2024 GMT
        Subject: CN=8a53a1e30e309265a6db74b0fafccc50b7b22946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:19:5c:f1:90:bb:00:81:ba:55:42:03:23:
                    d7:3a:bb:ac:cf:26:5a:01:f7:32:92:dd:3c:fd:20:
                    48:22:08:58:4b:b3:42:63:1a:59:8f:ca:a0:c3:ab:
                    b6:22:31:07:8f:91:ba:2b:55:49:3b:91:20:62:be:
                    6f:ad:a0:ef:4a:42:5f:8b:a7:b2:e3:77:15:9a:c0:
                    e9:5c:f1:3d:59:79:3d:94:3e:ef:78:a2:27:a0:96:
                    08:2f:5a:d8:94:a2:8a:42:c3:4f:25:1d:89:48:f3:
                    94:17:93:30:63:97:3b:25:b2:b8:ed:54:14:d2:68:
                    47:a9:26:7b:89:4e:49:cf:95:f4:b6:a9:8d:44:0e:
                    9c:64:7b:96:46:68:a4:e2:9e:76:75:a2:ab:46:ab:
                    30:ee:5c:8c:d0:e6:b2:f5:9d:c4:f2:e4:a6:02:c8:
                    bd:0f:2d:de:0d:05:1d:27:52:6d:b7:46:7d:0a:a0:
                    2d:f8:e2:8f:47:dd:f6:b5:04:75:95:81:9c:a0:e0:
                    e6:e0:07:dc:a3:ad:8c:51:89:d8:4e:f8:55:aa:d3:
                    8f:e5:d8:40:c9:d3:ba:f8:54:9f:f6:64:57:df:2f:
                    ca:55:ae:8e:7f:fa:fa:cc:ea:ed:ca:77:9b:45:cd:
                    88:dc:ae:db:27:b4:42:99:d8:06:a5:f7:58:fd:5c:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:A1:E3:0E:30:92:65:A6:DB:74:B0:FA:FC:CC:50:B7:B2:29:46
            X509v3 Authority Key Identifier:
                keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:7e:5f:c0:68:7d:18:d5:df:42:a0:40:24:83:31:cd:8f:
         eb:2d:02:eb:8b:99:35:4e:d7:e6:5e:6c:d7:50:e4:4c:5f:ce:
         bf:50:77:00:19:e9:26:e2:e8:70:4e:4e:4d:69:6f:cb:54:0f:
         5c:06:21:a6:c2:06:e9:0c:6c:70:e5:0b:b9:44:2e:50:e3:3d:
         fb:6c:64:00:2f:dd:e5:2a:e7:0a:ab:1f:f4:d0:91:0e:05:98:
         49:d2:e7:01:a7:a7:49:a0:32:0d:87:8c:2e:6a:9b:f1:14:69:
         1e:a0:3d:74:fd:bf:91:7c:bd:1c:ee:54:45:4d:db:86:0b:e8:
         e1:f9:b6:55:25:db:3c:96:ee:43:f9:dc:7f:52:65:d5:33:4f:
         58:a1:08:bb:e8:6f:ee:72:59:fb:ce:8a:1a:d0:9a:06:72:e4:
         6c:89:5d:94:85:06:93:7e:d6:6f:cb:2c:44:8b:6c:9f:a5:e5:
         d9:bc:86:c6:fc:ba:b3:35:bb:f4:94:25:c5:0a:1e:a8:b3:9a:
         7a:ae:05:56:b0:c2:2a:aa:fb:ad:ec:2d:d9:03:95:3b:ce:9d:
         8e:9e:21:71:45:ce:0d:c7:27:65:ec:b3:3c:20:f9:13:71:de:
         d5:b1:8b:eb:38:b8:ab:09:87:1e:13:f7:88:5f:85:0f:63:f8:
         82:bc:53:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNG3saekivX90NFvZPgezNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTc5MjY1ODAzYjc4MDRkMGZjY2Y1OTYyYThiMTYzNzQz
ZTBkMWUwHhcNMjQxMTIwMDAwMDI1WhcNMjQxMTIxMDAwMDI1WjAzMTEwLwYDVQQD
Eyg4YTUzYTFlMzBlMzA5MjY1YTZkYjc0YjBmYWZjY2M1MGI3YjIyOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukZXPGQuwCBulVCAyPXOruszyZa
Afcykt08/SBIIghYS7NCYxpZj8qgw6u2IjEHj5G6K1VJO5EgYr5vraDvSkJfi6ey
43cVmsDpXPE9WXk9lD7veKInoJYIL1rYlKKKQsNPJR2JSPOUF5MwY5c7JbK47VQU
0mhHqSZ7iU5Jz5X0tqmNRA6cZHuWRmik4p52daKrRqsw7lyM0Oay9Z3E8uSmAsi9
Dy3eDQUdJ1Jtt0Z9CqAt+OKPR932tQR1lYGcoODm4Afco62MUYnYTvhVqtOP5dhA
ydO6+FSf9mRX3y/KVa6Of/r6zOrtynebRc2I3K7bJ7RCmdgGpfdY/VwWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpToeMOMJJlptt0sPr8zFC3silGMB8GA1UdIwQY
MBaAFGUXkmWAO3gE0PzPWWKosWN0Pg0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJlU1pZQTdlQVRRX005WllxaXhZM1EtRFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYmU4NjUtNmMwNi00ZDlhLThkYjEt
ZjdiYjZkOWEzYmU4LzEvWlJlU1pZQTdlQVRRX005WllxaXhZM1EtRFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kYmU4NjUtNmMwNi00ZDlhLThkYjEtZjdiYjZkOWEzYmU4
LzEvWlJlU1pZQTdlQVRRX005WllxaXhZM1EtRFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZJ+X8Bo
fRjV30KgQCSDMc2P6y0C64uZNU7X5l5s11DkTF/Ov1B3ABnpJuLocE5OTWlvy1QP
XAYhpsIG6QxscOULuUQuUOM9+2xkAC/d5SrnCqsf9NCRDgWYSdLnAaenSaAyDYeM
Lmqb8RRpHqA9dP2/kXy9HO5URU3bhgvo4fm2VSXbPJbuQ/ncf1Jl1TNPWKEIu+hv
7nJZ+86KGtCaBnLkbIldlIUGk37Wb8ssRItsn6Xl2byGxvy6szW79JQlxQoeqLOa
eq4FVrDCKqr7rewt2QOVO86djp4hcUXODccnZeyzPCD5E3He1bGL6zi4qwmHHhP3
iF+FD2P4grxT5A==
-----END CERTIFICATE-----