Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          /I17Vn8A/dh3bUvX0I5ASdMZyJ2NcaUX+5ENpIZGqOs=
Subject key identifier:   CF:B3:B1:35:0C:CA:D0:E2:80:E9:88:42:00:53:F7:63:FF:19:A0:19
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       01962DF3A1B6E1C92FEA55941C9004FE8024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0645
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: 4gv/35WiaN36Vse8hPpOtuGWVVKPDGaMpVqDpFvqWZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a1:b6:e1:c9:2f:ea:55:94:1c:90:04:fe:80:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=cfb3b1350ccad0e280e988420053f763ff19a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:29:4d:ab:38:34:09:12:17:aa:59:2b:9d:
                    44:57:05:29:2f:e1:23:3e:ef:19:11:05:29:64:e3:
                    12:ae:3b:d6:d9:d4:38:0d:0f:e1:cc:7f:0b:98:65:
                    a4:a0:d7:87:51:cb:94:7a:e0:37:bc:b6:58:08:f7:
                    ed:8d:12:41:83:49:09:5c:e5:d6:70:7b:17:f6:6a:
                    37:d8:dc:73:b8:bb:30:64:01:74:40:18:ac:93:bc:
                    69:d6:14:14:f4:2b:f8:2e:ad:da:0b:7a:d1:1c:40:
                    75:b6:72:b6:5a:61:62:0b:b6:6b:3c:85:87:d5:48:
                    84:c8:af:3d:a1:b6:02:d9:2f:70:f8:3a:b2:87:67:
                    81:a7:e6:1e:29:84:8c:6f:f2:c1:1a:f4:30:2f:02:
                    b1:5d:89:85:29:4f:fe:44:52:fe:ec:64:89:00:61:
                    e4:c8:2f:2c:4b:0a:1d:ae:e4:61:37:20:b3:2e:5f:
                    f9:d7:b7:6d:e9:b0:35:c2:e6:55:c7:98:45:3e:01:
                    02:3c:3c:2a:1a:f2:33:b9:59:19:df:15:60:14:9c:
                    04:ca:84:c4:24:e3:0c:2a:9b:9e:b7:c2:1f:b0:bc:
                    a5:c4:bb:19:f0:98:a7:ac:6f:4f:c2:fd:ba:ce:11:
                    32:55:ca:d9:4a:3f:37:d0:ba:e7:7b:7e:73:6f:92:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:B1:35:0C:CA:D0:E2:80:E9:88:42:00:53:F7:63:FF:19:A0:19
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:ca:51:3e:cb:f8:81:fc:ad:18:01:cb:09:52:e8:3a:32:
         57:cc:3d:40:47:19:da:b6:c3:7e:a4:30:c8:fa:76:c2:f0:e1:
         60:ac:d1:3b:86:a7:f2:04:1d:d0:60:3b:e7:d1:4c:37:df:21:
         17:d1:20:86:36:07:60:de:e3:eb:3e:b3:a0:d7:d3:79:7c:8d:
         ab:d5:98:dc:69:ab:68:18:04:80:7f:f7:ea:55:b1:f8:2a:d6:
         0d:d5:e7:f7:f3:7d:c3:2b:31:5a:c6:16:92:24:bf:2e:9b:ca:
         6e:21:97:d0:fe:43:b4:c6:6a:8b:15:44:c2:11:d2:f6:bb:27:
         d2:f3:48:f2:aa:e2:29:38:e7:19:f9:66:13:db:98:f5:c9:70:
         f1:61:a6:49:c6:3c:44:1a:59:94:12:ea:62:6d:dd:64:c5:17:
         70:b5:f9:cc:04:f5:02:30:aa:82:7c:0f:f9:3c:6f:b5:66:f4:
         68:b4:d3:0b:19:5d:d8:3e:2b:13:b2:7d:26:86:86:0f:ae:74:
         68:81:7d:06:06:0a:32:f5:67:99:69:c8:ba:0d:2c:02:f1:c9:
         58:e3:d4:a0:7c:11:fa:85:c8:6d:1b:67:02:9d:4b:04:0d:23:
         c4:e6:aa:62:c7:d6:25:2d:cc:c9:9f:21:2f:43:35:28:9f:70:
         4a:c1:77:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----