Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File:                     Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier:          xcM+OGZTT2wu+JBPGuHuBiFpGEJ2bisGmD54Y4Hbm14=
Subject key identifier:   9E:BF:D5:6C:0C:7E:C6:A1:7E:52:13:34:A6:A7:68:E4:2B:D2:1A:8C
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer:       /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial:       01962DF3EEF0D0C9882015FB075D532E3E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: kv+c/d2yzVo6BLwbHa/GE4CieI5AMERrm1Nqm80Ce2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ee:f0:d0:c9:88:20:15:fb:07:5d:53:2e:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=9ebfd56c0c7ec6a17e521334a6a768e42bd21a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:02:dd:5e:d1:63:db:a2:24:6b:8e:6e:47:
                    77:dc:49:af:c8:e2:48:78:a0:e6:b5:d5:67:83:9f:
                    05:d1:71:65:7b:b7:11:37:24:c4:26:31:ee:fd:f1:
                    52:9d:c9:68:d5:5e:74:8a:ed:e5:94:0c:4d:d2:2c:
                    21:0b:ab:f7:de:43:8e:32:32:5d:1b:8f:03:fc:8e:
                    66:8b:65:bd:94:0c:0c:4f:7f:73:1e:ef:07:5a:22:
                    1e:01:3f:19:9d:52:78:a9:88:3a:0d:88:c3:67:cf:
                    ed:21:4c:0f:a1:7a:ee:99:94:18:8c:e3:57:ea:e0:
                    3f:62:62:39:ea:fb:65:36:21:3b:b2:c7:c7:76:7d:
                    a3:7f:00:d2:40:93:90:50:61:ba:50:84:4b:7c:6f:
                    b7:cc:5b:13:b2:00:e0:42:6c:3d:5c:78:da:26:4d:
                    fd:c1:1b:ee:3d:12:17:21:0c:b6:7d:01:22:e8:3c:
                    f8:51:a9:ee:ef:ab:ed:82:0f:03:a7:1c:74:ac:e0:
                    b1:bc:aa:55:76:78:69:11:ea:b2:4e:7e:ce:cd:b9:
                    5a:0e:61:bf:d6:d8:8a:11:c6:72:20:a7:4d:0b:eb:
                    72:9b:34:e1:0b:b2:fa:21:d4:ed:18:95:bf:e2:c5:
                    fb:61:bf:bb:98:ef:cc:1b:67:2e:a0:28:19:69:88:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:D5:6C:0C:7E:C6:A1:7E:52:13:34:A6:A7:68:E4:2B:D2:1A:8C
            X509v3 Authority Key Identifier:
                keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:e4:21:a7:f4:e9:1a:74:86:9f:65:03:30:1d:ba:ce:c5:
         60:16:6a:a3:3a:e9:d1:6c:90:8e:ce:a6:fb:9d:76:d3:3d:8b:
         2b:24:e5:89:71:d8:b5:42:1e:f6:c9:88:f9:12:46:f2:dd:56:
         a4:eb:3f:f1:d3:fe:3b:97:c5:25:b4:b5:28:c1:ef:62:0f:49:
         25:77:ea:b3:72:26:e6:d2:8f:8f:3d:93:d1:d8:ca:f2:23:cd:
         f1:a8:84:37:2d:51:5a:3e:4a:92:c7:14:29:fe:9c:de:55:95:
         6c:ba:87:59:09:b0:ab:d6:09:78:30:31:20:e6:4d:c3:94:01:
         68:b4:72:ff:be:e9:92:d1:c1:4b:22:bc:7e:ca:84:61:84:14:
         5d:ad:2c:58:78:27:41:a7:35:1d:ad:0b:2b:7f:de:8e:f3:30:
         56:0e:c3:5e:82:a5:4c:02:4d:fd:b1:af:e7:a6:f7:04:f3:7c:
         03:a1:38:24:a8:60:b9:62:0a:99:e6:64:b4:d8:93:ba:58:31:
         56:6c:d9:63:f2:92:54:07:b3:1f:1a:48:7d:ed:ae:19:e8:33:
         6f:74:29:a2:c4:d6:0f:25:b5:a4:bf:57:cc:80:20:6b:36:eb:
         92:b3:0f:5b:4e:c2:92:89:a2:f4:af:8b:c2:3b:64:53:db:52:
         51:ed:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----