Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
File:                     ZEXzBZOZaa2QDVjfmskeenW0MY4.mft (raw, json)
Hash identifier:          niXLpu1qHIy+VuFHnVbAEdsznKs52roFDaOGEgwPGHc=
Subject key identifier:   B8:F7:36:8B:44:7D:CA:51:FA:7B:4A:6C:D2:B2:B1:39:90:1F:2A:35
Authority key identifier: 64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
Certificate issuer:       /CN=6445f305939969ad900d58df9ac91e7a75b4318e
Certificate serial:       01962E994BF729E113D385FCF3B46A806C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
Manifest number:          0F44
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: ZEXzBZOZaa2QDVjfmskeenW0MY4.crl (hash: ufHfldCCepoHZ/LmvO3toMTlWCF5NvY7Gz7FGjfIrnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4b:f7:29:e1:13:d3:85:fc:f3:b4:6a:80:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6445f305939969ad900d58df9ac91e7a75b4318e
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=b8f7368b447dca51fa7b4a6cd2b2b139901f2a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:39:83:7e:ba:c7:5e:a0:84:f0:f5:3c:3b:
                    3e:14:06:34:27:71:79:4c:37:52:4b:c9:f6:31:80:
                    12:24:ab:7d:c8:d0:6c:d1:8c:6d:de:8f:69:15:60:
                    3a:7e:8d:3c:aa:32:1e:99:40:06:dc:e0:f4:a7:4e:
                    55:a7:56:a7:89:ed:56:a1:f1:bd:c5:de:89:c4:f6:
                    93:df:1c:1a:b5:85:df:b9:63:b8:e8:84:8f:c0:a8:
                    bf:ec:4e:4c:7b:64:09:61:32:40:04:bf:b9:4e:b0:
                    4d:9c:b2:6a:e2:7c:34:8c:a5:30:d6:66:7a:00:a5:
                    a2:85:c6:bd:d1:b0:e9:16:f2:74:7a:a4:9c:41:c5:
                    75:42:64:ac:4d:9e:af:9b:e0:15:25:d3:bc:5a:7e:
                    94:bc:46:5c:9f:27:b1:d3:b4:87:77:7d:06:4a:5c:
                    01:dc:c4:ba:e6:9a:17:46:c2:fe:25:26:d9:06:62:
                    f7:1f:b3:63:84:c4:7f:5e:9d:39:c5:f3:76:0b:84:
                    a3:4d:55:ae:cb:68:48:7e:2a:f0:dc:94:13:3d:00:
                    2b:98:42:e1:f3:fe:ac:ff:12:d7:65:e6:c8:23:79:
                    69:e9:a1:eb:37:76:8a:27:ca:a9:2b:4b:aa:90:17:
                    d7:b4:06:44:03:d8:42:91:4f:f0:be:f7:41:5e:27:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:36:8B:44:7D:CA:51:FA:7B:4A:6C:D2:B2:B1:39:90:1F:2A:35
            X509v3 Authority Key Identifier:
                keyid:64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:8c:93:09:20:ba:d7:b6:e6:24:09:7c:20:fc:70:43:a1:
         06:04:ca:f7:4e:19:75:93:e3:23:b1:3f:12:b6:df:ce:a0:18:
         41:31:2b:f3:2e:d2:22:5d:ac:28:42:05:17:a6:00:db:51:85:
         e6:21:34:03:73:65:2c:78:d2:90:c6:65:61:dc:c6:be:2c:39:
         31:10:12:ec:10:87:4f:3e:77:25:e8:91:0c:50:33:ff:e3:db:
         08:87:69:8c:f2:9d:40:69:84:03:c2:f8:89:ba:85:1f:0b:93:
         45:b7:98:25:12:fb:15:12:b8:ec:00:74:36:0d:45:f3:c0:c7:
         6f:2b:4f:36:6b:21:96:76:66:08:47:6f:ee:1a:55:b1:0d:08:
         ac:bd:7e:f4:38:86:80:6e:26:25:fc:e1:cc:ad:db:ad:b1:70:
         a9:7c:33:47:84:fd:c3:e5:3a:d4:7f:2c:31:91:a9:e7:de:7a:
         95:d4:5d:8c:cc:2a:ec:f7:58:04:12:15:8d:d3:b0:e8:79:6d:
         4c:b9:93:6a:b3:88:e3:ee:7f:07:ac:16:be:6e:fc:9a:36:75:
         b8:63:c8:29:76:69:41:2e:06:35:dc:4d:05:e2:ce:dc:80:bc:
         d0:e4:20:86:cd:5f:e6:65:42:31:22:dd:73:5e:38:2a:79:14:
         3c:23:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----