Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File:                     z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier:          OrFPu5R1bXz0bWkdT7/bM6XdADwqqzUk6Z3beSAJx+g=
Subject key identifier:   66:F3:1D:35:A5:B8:2E:0F:85:A3:97:6B:D5:46:03:AB:C3:2F:88:C7
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer:       /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial:       01962E997954A4BE18664FC53DA45AACF6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: Up1uAqsSZgv2fBsZHUAV/R1VDB5gV1yXKaEOLKPoMOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:54:a4:be:18:66:4f:c5:3d:a4:5a:ac:f6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=66f31d35a5b82e0f85a3976bd54603abc32f88c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:0d:5b:88:db:cd:a3:b9:3f:b6:b3:8a:34:
                    0a:2f:41:76:12:8d:06:49:de:3f:64:97:92:ce:8a:
                    13:51:d5:22:88:ca:02:5f:a1:8d:f1:42:4e:02:0d:
                    21:1c:3b:01:72:b5:2e:4b:67:94:c6:d4:da:a3:3c:
                    19:16:00:76:0f:34:0b:1c:ae:27:0e:6f:b7:46:6a:
                    71:3c:5b:c6:82:d4:2c:b1:fa:8c:6e:e4:97:f0:1d:
                    a1:dd:ba:16:98:e8:e7:52:36:d4:58:08:cb:c8:ab:
                    c0:82:95:8c:18:ca:b3:6e:12:42:14:22:6d:f9:1b:
                    ba:a0:bc:a2:73:9b:9c:2c:9e:1a:37:e1:99:1f:7d:
                    0c:ec:e7:83:b7:30:25:20:09:93:f7:92:68:f1:08:
                    3c:11:6d:c8:e4:82:a9:32:03:2f:74:71:a5:2b:95:
                    66:e0:0f:4c:17:27:07:82:2a:6d:db:2e:98:b9:4a:
                    1b:77:6a:25:69:3a:cb:80:c3:d3:80:b8:a7:33:8f:
                    34:aa:81:cd:39:99:73:2a:33:8c:e1:58:b4:56:84:
                    62:72:97:91:e8:c5:30:be:01:f2:d6:ee:a2:c6:85:
                    04:a8:dd:01:89:7c:c8:bc:42:0b:6b:c6:ef:9e:d5:
                    92:72:81:d0:91:36:3c:34:fa:d6:8d:81:cb:6c:95:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:1D:35:A5:B8:2E:0F:85:A3:97:6B:D5:46:03:AB:C3:2F:88:C7
            X509v3 Authority Key Identifier:
                keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:99:7a:58:d3:9c:b4:b6:16:3f:b2:09:22:15:62:32:96:
         6b:b5:16:e9:da:05:52:21:f1:f2:22:77:81:6d:12:15:99:fd:
         46:06:af:f5:9e:d0:71:05:d4:9a:c9:d6:e6:18:4e:82:9c:8b:
         24:e3:5a:9f:34:fd:bf:f7:96:9f:42:98:b4:f3:ed:27:0f:ea:
         4a:1e:8f:33:53:1a:c8:86:f1:85:5d:14:2c:86:bb:62:3a:db:
         41:b6:21:fe:e4:0f:5e:5e:2c:e4:9f:b2:41:7f:3d:2e:5f:ea:
         ef:16:fe:6b:b4:de:08:03:93:35:e4:13:bc:26:12:9e:15:7a:
         36:27:f1:21:8f:44:20:e2:bb:55:3b:6c:bc:9a:cd:88:65:8f:
         17:37:b5:5d:44:6b:8e:26:df:fb:c5:f4:b3:bb:c1:48:c1:c2:
         7d:b1:f0:00:1d:aa:f1:dc:2b:4d:19:92:ba:19:95:29:29:f9:
         91:8c:d7:67:22:43:77:bc:ca:dd:a3:22:f8:32:01:68:a5:8a:
         fd:56:40:52:3a:80:9a:38:a2:30:1b:0a:a2:6f:bb:5a:23:a7:
         f8:16:ab:f0:8c:ec:db:35:2e:3c:23:54:dd:22:75:c8:f2:84:
         2e:ac:08:c4:dd:06:86:32:70:4a:43:d8:43:6b:ff:fd:0f:52:
         5a:da:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----