Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File:                     z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier:          mcLijmw0RjbdagrTAMZVMLkJ/uhKe1lpFK2M70blHQs=
Subject key identifier:   E1:06:0D:ED:F9:FA:36:6B:ED:7B:F7:8E:8B:6A:54:65:35:71:EE:C1
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer:       /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial:       01962E99C1CB473B0481ADB432AEADE91F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number:          0E77
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: KhSbjbFzX/4iuQrZNt/68LvSX16zx9w/6yjiImawQNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:cb:47:3b:04:81:ad:b4:32:ae:ad:e9:1f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=e1060dedf9fa366bed7bf78e8b6a54653571eec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:e9:c7:69:cc:c2:54:ed:7b:08:43:7d:fa:
                    29:0d:a0:3c:9f:40:72:0a:36:a2:f3:fb:5a:d5:f2:
                    ca:be:96:92:ea:ee:53:c3:2d:1e:c8:77:c4:a5:b5:
                    85:c7:04:10:8b:bb:33:aa:60:2c:f9:f9:b3:8d:37:
                    e5:f7:85:a3:36:e8:08:be:ca:ac:3a:10:1d:2b:08:
                    5a:46:7e:78:6d:34:40:50:57:be:a8:61:df:53:cc:
                    2d:92:9c:2f:b1:3d:ce:45:57:c0:e5:c4:00:2a:c2:
                    f1:07:ed:53:3c:7d:5c:68:43:d7:83:c3:0f:a0:52:
                    c0:44:6a:9a:6f:f2:92:86:d9:43:54:98:73:ef:a4:
                    f9:22:29:dc:bb:38:a4:00:b3:75:11:06:1c:8f:48:
                    42:b4:bc:65:18:8d:3e:d2:d6:4e:45:28:f1:d0:29:
                    3a:68:a6:17:47:30:82:99:e2:6e:49:2c:a4:66:88:
                    b0:3a:83:32:0d:83:26:f8:d0:75:b8:e7:f3:bb:cb:
                    e7:9d:8b:ae:35:55:3b:35:a9:cc:b6:d5:5a:9e:ed:
                    c2:22:0e:b1:06:24:9a:5e:e1:26:09:ff:80:70:be:
                    9c:5f:dc:7e:8f:9a:4f:8c:53:90:98:75:2e:a0:b7:
                    c2:8a:cb:93:6e:cc:eb:83:29:9a:72:1e:d2:2e:8c:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:06:0D:ED:F9:FA:36:6B:ED:7B:F7:8E:8B:6A:54:65:35:71:EE:C1
            X509v3 Authority Key Identifier:
                keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:0b:47:02:a5:45:e4:ea:9f:66:32:26:fb:d1:e1:41:34:
         41:26:c0:32:d8:f1:58:8c:ce:00:76:ed:4d:c8:69:a4:34:76:
         53:fb:60:ae:45:64:6a:42:8b:a2:67:28:f4:50:e8:bc:d1:7b:
         5b:2a:1e:27:c2:7b:cd:b2:63:70:e4:72:6f:de:78:a7:16:7a:
         18:bf:18:e2:a5:c8:ed:08:49:89:79:3f:f3:12:c2:2f:09:d4:
         6e:a1:f1:6c:6e:cb:cc:4a:88:a5:28:1c:c3:fc:75:41:b2:e7:
         05:0e:90:d0:34:96:e6:5b:28:84:8b:0c:1e:b9:69:76:c0:1d:
         70:25:c9:2c:42:93:32:9e:d5:f8:11:91:b8:94:33:34:46:e2:
         65:64:a1:ba:39:53:f5:b9:d8:04:51:f7:14:69:d1:02:37:c4:
         65:44:0f:15:c4:06:63:69:0b:87:86:48:85:42:ed:f0:31:03:
         2c:92:39:f0:94:73:7e:61:b4:2c:e7:37:e8:a2:79:80:d6:b9:
         33:82:7e:e2:bb:f4:e6:7b:3d:fc:44:4c:af:53:41:b8:1e:f8:
         05:5a:84:54:cc:04:ed:93:94:e6:c1:f4:5c:e2:01:16:a2:69:
         f7:7e:7e:5c:35:58:b4:28:05:bc:b9:2b:df:60:f1:14:70:43:
         ff:7a:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----