Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/765681-a224-477b-b947-1e069171d3f1/1/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.mft
File:                     1-EZcK5GvgzPNaZsmGBF8e5d2MGg.mft (raw, json)
Hash identifier:          0nhZuQFbFR6BPqBYpx/IWqW1PqzA5QRBuSfsZTz5HSI=
Subject key identifier:   07:54:7E:18:0B:69:54:9D:18:3C:5F:15:F6:93:D9:DF:F1:89:B8:8F
Authority key identifier: F8:46:5C:2B:91:AF:83:33:CD:69:9B:26:18:11:7C:7B:97:76:30:68
Certificate issuer:       /CN=f8465c2b91af8333cd699b2618117c7b97763068
Certificate serial:       018E7CC7CD80D95A06973EC8DEBCF5B24679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/765681-a224-477b-b947-1e069171d3f1/1/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.mft
Manifest number:          0127
Signing time:             Tue 26 Mar 2024 22:00:52 +0000
Manifest this update:     Tue 26 Mar 2024 22:00:52 +0000
Manifest next update:     Wed 27 Mar 2024 22:00:52 +0000
Files and hashes:         1: 1-EZcK5GvgzPNaZsmGBF8e5d2MGg.crl (hash: FihYPzXp8WWAIskGnSoXa30hKmFkwMewk6kfSKsqy+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7c:c7:cd:80:d9:5a:06:97:3e:c8:de:bc:f5:b2:46:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8465c2b91af8333cd699b2618117c7b97763068
        Validity
            Not Before: Mar 26 22:00:52 2024 GMT
            Not After : Mar 27 22:00:52 2024 GMT
        Subject: CN=07547e180b69549d183c5f15f693d9dff189b88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:db:23:c6:9c:95:7e:d7:0a:26:09:bb:02:
                    10:1a:a3:e3:b9:02:6d:c3:70:ba:53:39:80:c0:42:
                    7e:25:6f:f1:07:22:a0:03:49:60:3f:85:ae:8d:b3:
                    e3:ad:7e:0d:53:3c:16:4a:2c:9c:ac:fc:1e:db:43:
                    9f:fc:e8:e6:28:14:23:80:47:70:bf:38:4b:54:41:
                    8c:fc:5a:66:58:e4:62:af:c6:1a:df:c1:af:37:b9:
                    19:6b:51:e6:74:02:ee:4a:31:30:19:a7:91:4e:87:
                    e4:09:bf:79:e5:e2:92:45:d4:3c:29:dc:fe:39:d0:
                    86:3f:14:db:03:75:13:52:26:75:85:c3:1e:d7:9d:
                    0f:da:03:d5:48:b1:a6:13:43:63:73:ab:97:47:28:
                    d5:77:06:0d:43:85:15:4c:c5:09:9a:b2:c6:15:8d:
                    5e:91:54:fa:09:0a:6a:46:89:fa:4c:a5:1a:c5:c2:
                    92:4d:84:b0:05:58:ea:1f:ba:02:c0:7e:b7:48:98:
                    58:a6:13:db:bb:b0:bb:b1:92:30:f8:d6:50:d1:17:
                    70:c2:48:ad:25:c7:89:ad:73:c6:49:2c:a1:c4:ed:
                    bc:9b:29:76:89:23:17:8e:f9:25:f2:b0:f4:57:12:
                    41:aa:ae:73:86:e9:71:9d:3e:ef:a0:91:99:02:51:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:7E:18:0B:69:54:9D:18:3C:5F:15:F6:93:D9:DF:F1:89:B8:8F
            X509v3 Authority Key Identifier:
                keyid:F8:46:5C:2B:91:AF:83:33:CD:69:9B:26:18:11:7C:7B:97:76:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/765681-a224-477b-b947-1e069171d3f1/1/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/765681-a224-477b-b947-1e069171d3f1/1/1-EZcK5GvgzPNaZsmGBF8e5d2MGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:4d:38:36:d4:2c:d8:bc:1a:03:61:66:13:3b:9e:b9:27:
         b7:ca:40:de:3d:58:17:da:c0:cb:66:85:92:b7:11:74:70:b8:
         03:2e:3f:2e:1e:c2:86:86:d2:7f:25:3b:2a:d9:c1:7b:f0:7b:
         cd:a1:dc:f0:16:3d:eb:94:44:de:27:f6:dc:83:60:33:05:44:
         41:0a:a8:35:60:c2:68:f2:b4:09:4b:31:bf:49:bd:ea:c0:12:
         17:1f:69:9f:0e:b9:8c:2f:f0:1d:56:da:36:4d:76:98:b7:6f:
         0a:5a:41:3c:11:6f:cb:c5:a6:7a:ba:0a:4a:83:08:e5:bc:05:
         2f:5d:dc:ac:8a:f6:18:19:cd:d1:12:24:c1:27:ae:96:07:d1:
         0a:2a:78:8c:a3:7e:34:e9:88:5b:c3:84:a6:48:b7:8c:f1:95:
         39:79:97:20:44:ca:34:2d:c8:e8:25:4b:d4:b9:b6:d4:23:85:
         f0:86:99:b4:0b:b5:d1:c3:e5:58:22:a8:fe:67:6a:39:dc:2b:
         e7:14:51:63:ce:dd:83:bb:00:13:3f:fc:e8:e3:ba:f4:8a:c7:
         96:af:b4:93:ad:ba:42:03:28:dd:49:00:4c:19:e4:0b:fb:3d:
         43:56:7e:40:e8:16:89:73:fb:99:75:d2:06:7d:b9:e5:44:d9:
         c4:89:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----