Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File:                     Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier:          A/70ZjIvOe+ZL8B/zoXVt3h+yPpE3pIZGpSAsgbU7p8=
Subject key identifier:   91:F5:95:6C:40:6D:25:EB:5D:CB:14:41:80:DE:C4:DE:1A:F0:B8:6E
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer:       /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial:       01962E98781D1D5685184BD88313362FAB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: GUTJTnnlSB7S6dvEiLc34nPvjzRPXlnX1Cj2YltvOww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:1d:1d:56:85:18:4b:d8:83:13:36:2f:ab:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=91f5956c406d25eb5dcb144180dec4de1af0b86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:61:9a:a0:7e:47:4a:b7:ef:8b:ee:a6:40:
                    38:0a:24:2a:fe:41:40:55:c9:4c:f2:47:4d:7d:d7:
                    3c:59:1e:68:f4:35:05:a2:b6:df:93:04:0b:33:20:
                    a0:71:a9:e1:7b:b9:05:9d:83:4a:97:52:bf:c0:b9:
                    2d:48:b7:48:f2:47:12:d7:23:f2:ba:00:76:66:fc:
                    1a:a9:23:87:dd:db:7d:70:d1:de:44:fa:d7:ad:8e:
                    5e:a7:72:5f:33:99:60:b6:6d:3c:ce:d2:9d:3e:4f:
                    9e:6d:40:ad:d1:fc:23:37:b0:73:af:00:d5:95:ea:
                    f5:07:b5:76:24:e1:13:c9:b6:f4:b2:c2:7a:fc:98:
                    3d:29:89:81:db:11:c5:49:79:99:60:f6:51:a7:18:
                    c6:79:a7:b1:a0:85:06:9e:eb:da:6c:67:14:0e:8f:
                    a4:02:f6:c6:78:59:be:45:cf:32:07:5e:5b:09:b9:
                    6e:aa:b5:ee:65:86:9c:fe:8a:d7:41:57:13:7f:da:
                    50:9c:88:01:8a:ce:64:2e:e8:27:3b:e7:b5:05:3e:
                    3b:f5:f7:8d:c5:eb:94:a6:3e:fd:c8:0a:28:3f:92:
                    0b:3c:5c:90:50:26:1d:55:9c:c4:49:88:1e:c5:6a:
                    0f:ba:97:e4:00:b3:12:f0:48:c6:2e:a6:27:df:ff:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:95:6C:40:6D:25:EB:5D:CB:14:41:80:DE:C4:DE:1A:F0:B8:6E
            X509v3 Authority Key Identifier:
                keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:81:bb:1b:80:81:1d:b5:0f:8d:e6:99:f5:bf:5a:ac:2b:
         a8:53:8d:e5:3c:74:c3:b3:79:0b:34:50:dc:bf:43:93:a2:10:
         31:86:3f:4b:78:87:d0:25:52:5f:5e:d5:24:f3:54:02:e1:89:
         59:68:ac:d1:6b:4a:51:a9:52:18:b4:42:8c:f2:88:39:cf:a0:
         b2:af:15:34:c5:09:0a:af:91:2e:20:6e:7e:1e:cc:48:36:4c:
         63:24:b5:1a:c1:a6:2b:63:2b:e9:b2:65:e7:b0:14:33:9a:b4:
         5e:f2:ea:41:2d:61:7a:7b:c0:06:a9:b2:ee:28:65:3a:59:d6:
         c6:4e:79:58:48:2c:3c:f7:bf:fd:1f:e0:8a:66:5f:cb:81:fb:
         50:48:a1:2c:d7:20:a2:1c:f0:6a:9b:46:e3:c2:04:92:cc:bf:
         f6:ee:59:f0:33:8a:32:4f:90:83:31:3e:41:e8:1d:e5:25:7b:
         be:ca:57:a2:90:8a:10:fc:e5:03:cf:34:c0:49:e2:ff:47:2b:
         ab:0f:58:a5:c6:ad:7d:fb:f6:0e:a8:02:11:d4:b4:c6:59:d0:
         52:c1:19:89:d8:2d:f5:39:4d:c0:0b:6f:ef:0c:87:79:33:6c:
         d6:73:35:3b:bb:cd:d2:92:cd:49:c4:3c:51:91:8f:8a:9e:4c:
         9f:53:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----