Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft
File:                     ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft (raw, json)
Hash identifier:          EKClxYf1sl3fmXGXRGF+i/Cwh/bn9a5mK8OPSB/R2RM=
Subject key identifier:   2D:83:0D:BC:F7:80:0C:DF:E7:97:B1:96:97:94:C1:2B:F2:39:08:49
Authority key identifier: 66:40:F7:7C:5A:99:12:28:90:4F:B5:C9:B0:4A:5B:80:C1:3B:18:86
Certificate issuer:       /CN=6640f77c5a991228904fb5c9b04a5b80c13b1886
Certificate serial:       0192B07534A38C5F42262E94F8840C5D2077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD3fFqZEiiQT7XJsEpbgME7GIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft
Manifest number:          1317
Signing time:             Mon 21 Oct 2024 19:02:04 +0000
Manifest this update:     Mon 21 Oct 2024 19:02:04 +0000
Manifest next update:     Tue 22 Oct 2024 19:02:04 +0000
Files and hashes:         1: ZkD3fFqZEiiQT7XJsEpbgME7GIY.crl (hash: BL7RCQunjBiJgOqjZ1hlSro3OT+1Ole/rhtRhjmjPE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b0:75:34:a3:8c:5f:42:26:2e:94:f8:84:0c:5d:20:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f77c5a991228904fb5c9b04a5b80c13b1886
        Validity
            Not Before: Oct 21 19:02:04 2024 GMT
            Not After : Oct 22 19:02:04 2024 GMT
        Subject: CN=2d830dbcf7800cdfe797b1969794c12bf2390849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:ae:3a:c8:9b:41:76:44:6b:4a:fe:98:97:
                    99:e6:d1:dc:61:d7:bd:dd:f1:95:88:c2:34:e1:43:
                    67:f4:63:0a:3f:5e:bb:8c:08:5a:1a:f5:22:f6:19:
                    c6:87:b0:6d:e7:78:d6:65:81:9f:34:46:9f:f5:a3:
                    ff:b7:e0:c0:e3:a9:48:dc:50:91:c9:34:d3:64:0d:
                    22:40:3e:79:5e:24:87:cf:2b:dc:7a:e7:c2:24:1d:
                    d5:d9:c0:f8:c4:90:a3:ea:27:7d:18:e0:6e:29:84:
                    96:65:b5:a1:e1:7b:da:2a:67:98:e9:31:54:9a:22:
                    06:29:16:38:53:44:5c:5d:3e:33:bf:a3:0e:28:22:
                    c5:94:3a:58:33:6f:ef:fc:5c:3e:0c:e0:cc:9f:0e:
                    20:b1:24:9b:29:6c:cb:40:b6:21:41:bf:87:bd:74:
                    f2:0f:ab:77:c0:05:c3:4f:9c:db:bd:80:77:7c:d2:
                    90:92:8c:df:67:33:f9:60:f0:6b:96:ec:54:c9:33:
                    7c:ac:52:e0:ac:69:b9:11:93:a1:fd:07:c6:86:f4:
                    47:4d:64:0e:75:77:63:1a:9e:ad:37:10:5f:6d:45:
                    cd:ce:e4:47:da:cd:d5:de:64:45:d1:ba:8d:6e:21:
                    fa:a1:eb:0f:cc:7a:c3:33:4e:ce:c1:30:cd:d9:85:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:83:0D:BC:F7:80:0C:DF:E7:97:B1:96:97:94:C1:2B:F2:39:08:49
            X509v3 Authority Key Identifier:
                keyid:66:40:F7:7C:5A:99:12:28:90:4F:B5:C9:B0:4A:5B:80:C1:3B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD3fFqZEiiQT7XJsEpbgME7GIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:34:25:8b:03:13:a8:85:14:ea:7c:d8:a1:cb:49:48:40:
         87:a0:d8:34:02:ab:ad:4e:50:eb:8d:65:32:a9:38:89:b8:6e:
         d1:28:25:14:26:f4:cc:cd:d2:13:58:09:06:dd:57:14:53:2f:
         23:81:30:99:52:e2:9d:5c:fa:8e:f6:e4:be:7e:07:bc:8b:a3:
         88:3c:85:6f:3f:55:90:4d:d4:b3:51:d5:3d:41:e0:68:79:8d:
         b0:65:36:7c:62:4b:9d:bf:d6:81:1a:19:dc:2c:a6:21:e0:a3:
         82:25:de:e2:0d:af:4d:19:59:77:32:68:ec:4f:3b:1b:dc:0e:
         7a:f2:c0:15:a0:5f:48:ef:66:b0:6d:54:94:03:00:6c:66:5d:
         85:b5:e5:7c:a1:39:09:26:b8:b7:2a:37:a4:eb:c0:52:7f:80:
         4b:c2:9a:62:5d:2a:c0:71:23:f2:22:c9:3d:e7:65:97:87:93:
         66:de:fa:9f:de:f2:38:ea:1e:ee:ee:f1:75:e8:43:e2:91:e1:
         21:a4:ad:c9:c4:8d:1e:07:f5:c9:1a:ca:ea:b2:5e:3d:a2:bd:
         8c:32:c8:11:c4:5f:34:22:81:da:e5:5b:3c:54:43:31:0b:57:
         15:d2:e8:3a:2a:25:6a:d9:63:0c:fc:dc:ee:08:05:1e:09:00:
         aa:aa:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----