Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File:                     cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier:          dGIDaOhqYqytDgt6AsS8ZF4HSrX2j2ILGarqwA61aUY=
Subject key identifier:   2E:AD:E1:4B:21:A8:B9:15:57:B1:76:3D:E3:87:6B:1B:FB:B0:41:DC
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer:       /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial:       01962F0716ADD61CE83B72F341624C08865A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number:          03E4
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: er9gO3ZYU6osAn4e8dkULu/xvpQH3xdYFC0MWvkTZPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:ad:d6:1c:e8:3b:72:f3:41:62:4c:08:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=2eade14b21a8b91557b1763de3876b1bfbb041dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:09:5c:44:93:e9:22:2f:4e:e4:fa:d9:0c:
                    3c:e1:b7:a5:a2:4e:cc:2a:58:c4:27:71:aa:16:81:
                    23:cd:59:e3:a3:a2:a4:a7:f5:49:f1:69:1b:94:9f:
                    c8:51:90:39:87:b1:ce:28:b8:e8:d5:20:33:0e:41:
                    b5:c1:02:ba:6c:36:a1:eb:3f:f6:d0:d7:ee:d4:fb:
                    56:8e:cf:08:6b:d5:24:07:96:9e:c4:c0:e6:c1:c1:
                    48:09:c3:74:9f:3f:7b:3e:4a:2e:f9:e2:9e:1e:d9:
                    7e:42:40:40:49:ca:0c:f9:ad:61:60:2a:71:0a:4e:
                    91:0c:7d:f0:77:ed:a3:b5:47:ba:8d:2e:d1:fe:02:
                    d7:35:97:9f:1c:b5:e9:16:82:03:d4:f0:16:61:a7:
                    af:bd:3c:36:2d:de:b9:d9:6d:e7:89:54:1b:8f:06:
                    f3:49:0d:d5:a3:8f:0b:62:83:5c:5d:c9:c1:0e:cf:
                    73:9d:f7:80:ff:dc:b6:e9:26:d0:e4:70:36:92:2a:
                    44:15:de:ce:24:6c:c0:67:63:12:2b:dd:3c:e9:43:
                    3a:69:66:5a:09:47:6a:3c:92:32:6f:ef:3b:a4:c3:
                    63:dd:ad:e5:5d:e8:db:cd:00:d2:6d:cc:a0:61:1e:
                    86:2a:db:9c:ce:dc:e5:29:d9:52:d0:b3:d7:d4:6f:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:E1:4B:21:A8:B9:15:57:B1:76:3D:E3:87:6B:1B:FB:B0:41:DC
            X509v3 Authority Key Identifier:
                keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:2d:a9:11:56:df:c7:ab:15:d3:6d:1c:0c:0b:12:46:4a:
         d3:90:85:67:9c:75:73:00:69:eb:cc:68:bc:44:e2:d0:57:67:
         af:bb:13:b0:af:6b:6f:e6:45:88:2e:6d:b5:60:f8:b0:a2:07:
         4a:0c:ea:7d:94:f7:d5:2b:5c:79:5d:b7:99:6f:a8:be:ab:37:
         47:f9:b6:33:3b:96:c7:82:91:c8:e8:b1:00:e3:5f:f9:1c:0d:
         ab:16:69:39:96:58:bd:bc:56:72:df:c6:c5:5c:77:9e:0c:c2:
         12:fa:92:ff:e5:4e:2a:df:83:b9:45:03:a8:e0:0f:02:5d:18:
         b5:f4:b3:bf:3c:9a:43:0c:47:c0:b9:97:36:d1:b7:60:7e:bf:
         d8:25:dc:c3:36:1d:c6:4c:34:c5:91:2b:5e:80:88:5f:ac:c5:
         5f:6e:15:43:41:72:de:d4:29:38:89:42:93:27:d0:77:f1:63:
         8f:19:b4:97:f5:1d:cf:77:0f:25:58:f9:97:ba:83:58:7e:64:
         c4:c5:d5:0c:79:e6:7a:8d:3c:89:57:b7:5f:fe:c5:bf:57:90:
         fd:0d:64:00:cd:50:85:53:30:81:70:fe:54:c2:6d:84:14:44:
         08:99:f2:f0:4d:3e:06:40:c5:b6:65:50:89:30:12:5a:7b:e2:
         62:ac:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----