Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          4siEQ2yHpHhBokKjWqgSn9x8J2Vxi56PxUcVaJcxf54=
Subject key identifier:   0D:3C:57:CE:2E:BF:CD:6E:1A:C4:33:3F:FE:91:1B:9F:D1:2A:E7:C2
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       01962DF44A08745D606E257126A2E9ACC0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          0D64
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: HPWLPCU2FIXZj9VkPzNHM8RHkU54Y4l2UnCB2alJxys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4a:08:74:5d:60:6e:25:71:26:a2:e9:ac:c0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=0d3c57ce2ebfcd6e1ac4333ffe911b9fd12ae7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:80:6b:f8:f0:e5:2d:c7:4e:75:db:89:69:
                    70:a7:38:ac:2b:19:40:86:56:d9:45:fc:11:1d:6c:
                    26:f5:ff:c1:13:ae:62:29:20:2e:73:06:ac:a9:8b:
                    e0:8b:79:f7:fc:ed:97:d1:4d:c5:24:2a:98:8e:d3:
                    e2:52:4e:a3:ab:78:ae:0b:0c:77:0a:ae:f3:31:e2:
                    2b:77:b5:91:a6:b7:b8:22:14:26:d6:c0:7b:9f:71:
                    7c:42:66:c1:04:4d:2b:1a:01:b6:3c:b0:d0:89:64:
                    5d:56:46:25:27:89:65:69:aa:fa:71:a4:33:8a:95:
                    ad:cb:6c:bb:af:8f:47:56:7a:a0:69:29:7a:6c:b2:
                    9d:a9:dd:bd:23:66:da:f9:2c:a6:fa:e2:98:97:8c:
                    d2:3d:ac:82:df:2d:63:f0:c2:46:9c:79:ec:e1:8e:
                    a8:46:e0:89:48:ba:d8:0c:3e:12:f9:9f:d5:38:3e:
                    70:a0:4c:aa:a2:27:48:47:6e:b8:3c:38:c7:1f:9e:
                    58:9d:42:cd:b7:78:66:fc:f2:67:43:d7:e8:db:36:
                    a8:37:a1:4c:07:fb:41:0b:5f:ef:3b:de:19:91:16:
                    d2:d6:92:ac:66:cb:ed:9c:8b:74:20:c0:60:f1:97:
                    2a:90:3e:7a:ee:8f:17:90:fd:d3:19:de:37:51:70:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:57:CE:2E:BF:CD:6E:1A:C4:33:3F:FE:91:1B:9F:D1:2A:E7:C2
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:82:3b:a0:f2:34:8b:95:82:ac:ce:83:46:98:66:01:e3:
         eb:d8:0c:b2:b8:f4:fa:f5:96:0d:cf:c0:b6:26:22:da:50:2b:
         bd:62:4a:64:75:0c:a4:0c:7a:f5:68:41:93:6f:43:6b:a9:18:
         53:e2:19:fd:53:84:bc:64:f0:98:ff:a4:35:cc:3a:3c:9d:9d:
         fa:8f:53:83:4e:f9:c7:42:a5:51:bc:55:66:50:c3:59:e5:fd:
         e1:ae:f5:94:91:73:71:0e:1d:3b:eb:cc:c0:83:93:a2:8b:e3:
         88:63:08:f3:67:86:84:b5:a1:2e:a5:1e:51:12:d4:66:c2:40:
         ca:77:fd:b0:09:43:3e:e0:64:f2:5b:26:cb:8f:2d:9a:eb:3a:
         8e:25:4d:03:7b:78:e1:40:62:f5:91:94:6b:8f:4b:a2:82:6c:
         48:75:8f:93:35:8d:82:f3:a3:0f:62:e9:00:f5:17:23:4f:5b:
         cf:35:95:ea:47:3e:27:5f:83:68:32:b1:23:ca:54:36:e5:66:
         9c:fb:49:9d:fd:cc:f5:2f:f2:9a:97:00:d9:ef:06:5b:24:82:
         dc:19:c8:02:da:5c:02:2d:cb:75:19:8f:e5:b1:46:b8:73:95:
         60:14:3d:38:6b:32:05:28:03:9e:85:ca:12:08:2a:46:87:b9:
         10:a5:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----