Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.mft
File:                     Zp-2H5S2edzphVdU8qqEJNI9aVI.mft (raw, json)
Hash identifier:          3VL9YpnZhBJ/4mfBKx/TiMu5d0YrUxJlWjuIn39OA8A=
Subject key identifier:   32:48:99:65:0C:DE:13:C1:F2:10:4A:81:60:FC:B9:79:DA:A9:68:EB
Authority key identifier: 66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52
Certificate issuer:       /CN=669fb61f94b679dce9855754f2aa8424d23d6952
Certificate serial:       0182D8748FE9E857C5519037514C60F0BD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp-2H5S2edzphVdU8qqEJNI9aVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.mft
Manifest number:          084B
Signing time:             Fri 26 Aug 2022 04:41:33 +0000
Manifest this update:     Fri 26 Aug 2022 04:41:33 +0000
Manifest next update:     Sat 27 Aug 2022 04:41:33 +0000
Files and hashes:         1: Zp-2H5S2edzphVdU8qqEJNI9aVI.crl (hash: VKAPu6bn5VThAIQ01BJi6r4F2qftuL31zM+P1B6gaNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d8:74:8f:e9:e8:57:c5:51:90:37:51:4c:60:f0:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669fb61f94b679dce9855754f2aa8424d23d6952
        Validity
            Not Before: Aug 26 04:41:33 2022 GMT
            Not After : Aug 27 04:41:33 2022 GMT
        Subject: CN=324899650cde13c1f2104a8160fcb979daa968eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:c0:31:a1:df:99:a7:74:f3:14:f7:c1:b7:
                    73:30:f7:5d:14:e1:90:0c:2f:96:6d:64:34:50:37:
                    c0:f4:4d:5c:c3:86:e1:41:fd:97:af:1d:a2:7d:09:
                    df:fd:18:df:ef:a4:a1:00:38:6e:56:fb:7e:70:08:
                    1d:eb:62:89:0b:e0:68:a9:65:41:6e:b6:80:76:49:
                    65:e7:61:7b:b1:42:f5:06:af:38:06:70:43:19:95:
                    bd:3a:33:a0:13:6e:05:61:b4:5d:05:85:88:84:af:
                    32:46:53:aa:91:c5:64:23:c4:94:3f:ed:f3:e6:c4:
                    55:a1:db:e5:d9:5b:2e:de:84:c7:9f:68:99:7c:9a:
                    f9:04:dd:35:45:71:a3:d1:b6:c6:99:a5:7c:dd:dd:
                    40:11:fa:24:65:b8:36:1b:fd:6c:e6:26:5e:f9:fe:
                    52:ce:07:1a:4e:4c:28:2a:af:cf:ad:1e:a7:f2:bd:
                    3e:b7:03:8a:bc:57:94:13:b1:40:dd:e8:a9:b1:e5:
                    a0:3a:9e:4a:e4:6a:7f:0a:61:63:42:c3:86:f9:50:
                    03:38:d7:7a:c4:83:38:83:04:2a:e9:1f:bf:1d:e6:
                    a2:31:a1:88:9d:73:50:f9:4e:60:e5:d8:e3:4f:e6:
                    ef:72:e9:91:5d:8f:b9:78:70:28:19:d4:87:3c:8a:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:99:65:0C:DE:13:C1:F2:10:4A:81:60:FC:B9:79:DA:A9:68:EB
            X509v3 Authority Key Identifier:
                keyid:66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp-2H5S2edzphVdU8qqEJNI9aVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:10:97:4a:c3:11:6d:88:e4:f8:83:e6:ef:e6:69:fb:73:ac:
         18:fa:d8:4d:cc:17:66:14:0e:35:d9:94:ab:fa:e6:07:a1:d9:
         8c:76:2a:d8:e1:57:af:84:46:42:16:31:a2:18:9d:dd:6e:f3:
         11:12:1c:a5:4b:c8:a9:38:3f:5a:03:fb:d2:59:42:ae:f2:d0:
         ad:39:40:ac:a1:8f:11:cd:0c:0c:60:12:6f:16:19:ee:96:6c:
         47:c9:c5:ed:2e:00:a6:5b:f6:16:0e:71:42:a6:0a:8f:6b:50:
         2a:04:02:e8:ec:a5:18:57:ae:18:3f:14:0b:e1:14:cb:9a:02:
         cb:da:0f:4d:73:eb:6f:34:7c:89:5a:c3:1a:98:f1:10:18:d5:
         77:d3:ee:86:b6:1a:6b:39:5b:7d:36:ef:bb:9f:09:8a:8f:2d:
         59:f0:0f:4d:29:38:56:4e:4c:46:78:03:97:3e:12:c7:1b:9a:
         d4:05:cf:3e:b4:fb:27:57:ca:5a:3b:11:6d:98:6c:0b:c2:b0:
         93:8e:11:e5:f5:64:ed:99:69:ef:ad:8f:74:c4:50:79:3d:c3:
         a8:d9:60:79:52:61:25:73:5b:1e:ad:41:f5:93:39:f6:07:bc:
         48:62:96:e6:10:dc:64:62:26:c6:0b:af:99:c5:62:32:06:22:
         50:86:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----