Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File:                     cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier:          s3fF7CqYUjmGG45ZmuHxEhA1vXxJik/mhm/UhseP4OM=
Subject key identifier:   FF:DC:A3:21:6A:07:C0:A9:42:C4:00:D2:D9:B3:39:87:25:B5:B2:6F
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer:       /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial:       01962E98A43173205BC5694EA097186DAB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number:          1139
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: t+ykaD5xuvSh9ze9fqEr/00r80j2PDSOCKj8M1Z2v9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:31:73:20:5b:c5:69:4e:a0:97:18:6d:ab:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=ffdca3216a07c0a942c400d2d9b3398725b5b26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:4d:c0:ee:aa:1a:21:a7:e7:33:fb:3c:77:
                    51:81:91:bb:7c:20:6c:af:ff:85:fb:07:c7:88:62:
                    e6:c3:93:0d:6b:87:55:2b:a7:25:11:33:b1:4a:14:
                    d6:71:9f:38:93:1d:4a:47:f2:dd:bf:9c:7a:3a:f0:
                    f7:e4:b9:9a:68:80:ad:55:dc:27:d9:90:3b:35:1e:
                    55:45:98:ca:3d:c3:a2:51:db:bd:23:86:17:31:39:
                    2f:af:f4:26:67:a7:e2:19:a3:cf:ce:c6:df:94:ae:
                    b4:e4:1d:29:b2:62:7a:76:37:71:c4:d1:6c:39:11:
                    36:56:73:a7:ce:09:5b:64:3e:70:c6:f0:5c:98:8d:
                    e5:8a:a8:1b:e5:cc:85:2b:79:06:9c:8d:77:c9:ce:
                    8b:fc:b8:ed:8e:93:57:10:07:6f:a8:1d:44:43:ce:
                    60:43:49:b0:94:88:c5:1f:7f:a7:b4:b8:f1:19:e6:
                    27:fc:b6:df:50:62:74:24:0d:00:0e:b6:3b:c7:5a:
                    99:b4:13:69:67:5b:ba:21:82:ca:17:e1:af:e4:45:
                    a4:f9:92:72:48:e5:87:92:5a:a5:51:5f:6f:20:24:
                    77:bc:c2:38:38:d1:96:25:61:90:9e:e8:16:75:85:
                    2f:54:08:b6:b1:93:19:ec:e5:62:62:ab:6d:27:3a:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:A3:21:6A:07:C0:A9:42:C4:00:D2:D9:B3:39:87:25:B5:B2:6F
            X509v3 Authority Key Identifier:
                keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:45:59:09:43:ef:3c:93:70:b0:34:8e:99:06:d3:8a:ca:f0:
         fd:1b:6e:d6:04:cd:a9:bf:24:53:b1:dc:e0:1e:f0:23:fa:b4:
         6c:52:b5:d2:03:5c:b9:ab:0a:7b:a0:cd:59:12:a1:6b:36:93:
         de:22:ba:49:21:b9:a0:19:6f:bc:fe:4e:7e:7a:2a:9e:be:e5:
         da:e0:41:c0:1b:54:41:a0:69:55:93:0a:af:7f:fc:3b:bb:00:
         bb:85:7b:5f:4b:b7:69:dc:ca:90:5f:e4:cf:88:db:88:07:3a:
         4e:90:4d:12:c2:51:b5:9c:b0:3d:77:0a:59:06:28:ad:0c:a1:
         b9:6d:27:46:82:be:c4:cb:fa:9b:4c:00:85:75:ba:4b:8e:22:
         5a:f1:58:31:7e:35:d9:e5:78:43:7b:35:13:0e:d8:82:ec:e9:
         8d:85:e4:d3:2c:a9:e3:b4:90:23:7e:e4:d9:15:f6:a5:98:b5:
         e2:ee:a3:21:5b:96:a0:cc:bc:52:fb:35:f8:8c:da:12:b9:a7:
         bb:52:3e:ed:78:0a:05:0a:3f:1e:76:6d:f3:b6:71:f9:93:55:
         2e:29:4b:a2:ab:5c:15:74:63:f3:33:f9:c3:29:12:d1:35:fd:
         c6:9d:6a:84:4b:9a:69:9d:ea:54:69:25:f1:5f:fc:c3:a6:d5:
         cf:81:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----