Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft
File:                     ZYXp3VrJv25gAFvDzOValUwxmM8.mft (raw, json)
Hash identifier:          uFQpaH7vrnfpZJ2WP+SNkpzQ1Vx97YDu9RwMQf38Fak=
Subject key identifier:   DF:68:A3:79:7B:B2:81:86:A2:96:F1:6A:EF:D2:43:1E:A3:51:EC:16
Authority key identifier: 65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF
Certificate issuer:       /CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
Certificate serial:       0193463A3011E817832B9FA34BAB0A70B995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft
Manifest number:          0FFB
Signing time:             Tue 19 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 19 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 20 Nov 2024 21:00:38 +0000
Files and hashes:         1: ZYXp3VrJv25gAFvDzOValUwxmM8.crl (hash: 0s/S/cxBcJPC9a4QOjuqq489aQqbEct4zzaLGghFRoU=)
                          2: wfiBXvp0psiDXmZIUYF-LmCbN-U.roa (hash: hTXhUqVSmE2iU5Qqawr8uuzYR/K4Ypidz476nXsKYMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:3a:30:11:e8:17:83:2b:9f:a3:4b:ab:0a:70:b9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
        Validity
            Not Before: Nov 19 21:00:38 2024 GMT
            Not After : Nov 20 21:00:38 2024 GMT
        Subject: CN=df68a3797bb28186a296f16aefd2431ea351ec16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:87:ff:22:c7:7b:71:80:1a:b6:b5:02:ce:
                    7f:fe:f0:e8:22:c6:4d:22:18:3e:10:09:c1:36:87:
                    a7:12:5b:7d:c3:ad:d7:27:08:11:6e:fe:1b:3d:d3:
                    16:4a:f2:11:f7:16:d2:b3:fd:e7:84:3b:41:b4:b4:
                    94:bb:b0:40:d3:c9:a3:aa:8c:be:83:d3:d2:03:a9:
                    44:c6:ff:0e:0e:72:3e:32:1d:af:92:d4:89:d5:cc:
                    f9:2f:f5:33:bd:68:f3:22:10:6c:80:9e:50:ca:a8:
                    5a:33:99:b4:5f:9d:9d:ae:b8:9a:dd:f9:e6:8c:f5:
                    75:b8:0e:8a:4f:1e:ec:65:ea:9e:22:a4:23:9b:bb:
                    09:72:7c:c1:94:37:f2:c0:92:85:76:e4:21:71:e8:
                    3f:db:10:c0:34:ec:44:2c:68:f9:2b:a3:00:65:41:
                    5d:25:84:de:62:2d:63:d4:31:6e:2a:01:5d:98:dc:
                    2f:f4:15:c9:0a:82:c7:06:67:a5:59:4c:56:22:f9:
                    cb:96:5e:98:01:8a:4b:f3:90:ae:ea:e7:24:8d:15:
                    79:31:3d:dd:6f:e3:64:e5:2c:ed:a7:ee:47:1a:b8:
                    39:d0:51:6a:6f:2d:d6:93:a2:95:ab:85:69:f6:2c:
                    46:1f:77:70:22:9c:ef:9b:35:22:ab:8c:f1:32:7d:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:68:A3:79:7B:B2:81:86:A2:96:F1:6A:EF:D2:43:1E:A3:51:EC:16
            X509v3 Authority Key Identifier:
                keyid:65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:73:6b:04:d0:02:e6:a6:86:fb:b2:72:f8:0f:50:d7:c7:
         f5:28:12:76:81:78:64:a9:07:10:e0:eb:d7:58:26:cc:7d:62:
         04:93:73:cb:15:cc:b1:e4:ab:3a:9c:a0:d0:bb:26:72:c8:f7:
         bc:0b:b2:27:a2:b8:b3:8f:e9:8d:26:5e:2b:ef:36:c9:9a:1f:
         50:50:09:a5:f0:c2:00:d3:26:fe:c9:70:8b:9d:66:0a:31:ec:
         6e:c5:d0:1b:e9:40:8a:c0:2e:28:c0:a1:67:80:52:2e:cf:01:
         f6:d4:f7:2b:a3:37:25:43:c5:5d:0d:dc:74:20:4a:6f:14:44:
         4d:80:46:13:52:b7:fd:d5:75:38:fd:44:66:ab:ea:9f:ca:bf:
         2b:75:bd:79:b5:6e:7c:bc:6f:8a:d4:f6:32:8a:18:ff:cb:5a:
         40:7c:5b:d6:76:ef:e2:a3:af:46:a6:e4:46:e4:79:b3:31:08:
         52:9d:ef:ad:03:85:89:4d:1d:26:64:3e:3d:bf:99:1a:bc:b4:
         45:a8:8f:7e:da:3f:ba:21:25:3d:cc:cf:6d:92:5a:a0:9e:56:
         27:15:11:3c:27:f6:93:c0:51:ed:dd:1c:af:80:7b:b4:47:14:
         cf:49:00:ae:6e:06:26:8a:35:6a:cb:a9:aa:c4:55:2a:2b:6e:
         fe:cb:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----