Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File:                     zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier:          rJROS9ECjJg8howoI3x8mEajY6chkoQmdxTFpel8ty0=
Subject key identifier:   B7:F8:7E:E5:E1:FC:40:9F:CD:43:78:99:00:3A:E3:64:E0:E3:17:A1
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer:       /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial:       01962E986B25CCA06648F19CBEA646BFC33A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: O6fiQK62mwvf798uTmCHjtLk3RRx3x6jYBOBUa9UuMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:25:cc:a0:66:48:f1:9c:be:a6:46:bf:c3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=b7f87ee5e1fc409fcd437899003ae364e0e317a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:ad:ad:b4:44:be:e6:c0:2d:b1:1e:68:dc:
                    4f:e0:a3:e1:f9:c4:d3:cd:05:38:f1:0e:7b:0c:35:
                    43:5c:17:f2:ca:29:e1:da:4e:1a:26:54:2d:85:ef:
                    11:b3:50:82:b8:b0:e9:a8:4f:28:85:4c:d1:c8:e6:
                    e6:bc:de:ac:b0:ea:62:74:e1:af:51:cd:f5:08:ff:
                    1e:f1:91:55:68:08:03:16:08:23:3c:74:94:ee:6d:
                    df:c0:c6:1e:86:11:73:6d:12:8d:59:70:5a:fe:c1:
                    1b:96:1b:ca:ca:1f:f7:d3:25:35:dd:23:6d:8a:9c:
                    7f:27:2f:fe:9b:cb:bf:0d:2e:86:5a:07:f4:d6:81:
                    ac:34:cc:c8:b3:88:98:cf:78:e2:1d:62:c9:23:bf:
                    64:44:ef:ea:99:27:88:13:19:8b:aa:a3:1f:0c:28:
                    c1:1b:46:e4:a8:a6:76:80:f6:ae:ff:42:4e:2b:64:
                    57:5e:c7:d0:1b:79:5e:c9:60:81:b0:12:2d:35:02:
                    e4:dc:a1:44:98:28:fe:3b:ac:1e:90:14:8c:47:80:
                    89:42:1e:58:5a:03:71:22:f7:65:8c:be:14:60:f9:
                    6c:ff:f9:7a:d8:60:e7:94:0c:a2:1c:a2:c5:ca:ee:
                    2a:40:24:e0:ea:bd:28:a6:ae:69:25:80:db:5e:84:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:7E:E5:E1:FC:40:9F:CD:43:78:99:00:3A:E3:64:E0:E3:17:A1
            X509v3 Authority Key Identifier:
                keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:6a:00:c6:3c:72:b0:c6:9b:3d:69:15:bd:f5:ac:37:2c:
         72:93:06:25:af:36:14:8b:83:cd:1c:9a:07:71:dd:19:76:20:
         d7:01:56:f4:d2:27:cf:c1:18:d9:b7:d4:03:6d:27:7b:12:58:
         03:f9:14:93:eb:81:a4:29:26:91:fe:b4:f1:aa:76:22:73:53:
         2c:b4:58:55:7e:d2:74:13:b1:27:f0:b9:58:1e:dc:59:df:76:
         21:11:5f:ba:30:1b:ae:ad:21:62:68:70:af:00:58:61:8f:7b:
         e2:f5:a4:97:5a:36:ae:6e:ac:bb:39:33:31:0b:53:2c:36:63:
         6d:51:9d:20:c8:94:ab:81:e4:6f:c6:96:0d:8a:38:3d:92:00:
         7a:2a:43:99:ed:63:f4:3e:8b:18:6f:5e:cb:c1:6f:34:08:9b:
         4f:ab:9b:20:69:dc:85:8a:a3:85:6f:8a:d5:d6:65:2e:fd:fa:
         89:43:b7:9b:8a:58:5d:35:1b:3e:6d:b7:74:5c:36:f7:50:9f:
         09:06:56:a7:e1:18:d5:55:a5:4f:e7:99:bc:88:e9:a8:38:67:
         cc:6e:18:90:03:5b:c6:90:ea:16:88:98:05:47:16:54:2b:b5:
         64:da:8b:40:6c:d0:49:4f:a4:db:44:93:ba:9c:f3:d0:71:8f:
         e4:bd:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----