Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File:                     ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier:          0+duECeP0UWrM+zWPRPrTiwyASzQ9LY6kP6MGCm4eoA=
Subject key identifier:   45:8E:58:61:92:9B:96:56:DB:CA:88:DD:FA:82:69:97:24:07:C3:C0
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer:       /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial:       01962E99C24BE594D438BBFCD29A19D0DEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: NyyO+SVmi+eLCrme6tRas8dEULbVb6FKVqJ8vhNFMNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c2:4b:e5:94:d4:38:bb:fc:d2:9a:19:d0:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=458e5861929b9656dbca88ddfa8269972407c3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:61:08:45:50:97:bf:eb:cc:ad:f3:60:a6:
                    27:f1:f1:86:32:db:e6:bd:61:1b:d9:60:15:15:11:
                    e2:a3:c0:a2:b6:23:21:e1:ea:95:84:fd:40:93:f4:
                    89:ce:6b:68:ed:48:8e:94:f9:16:0f:55:69:60:01:
                    86:1e:05:84:ae:24:38:2f:6f:39:1c:78:68:d8:fb:
                    16:9c:ef:d6:cc:18:aa:43:3f:7d:a6:95:38:4e:a7:
                    01:39:c4:bd:a7:e1:4c:90:22:65:a5:f0:8f:16:04:
                    97:10:41:c9:58:8c:d8:87:13:61:58:37:26:10:c3:
                    07:48:e4:de:94:79:2f:e6:8f:9b:2c:05:8d:b5:94:
                    c1:ec:9e:b4:3a:a3:8e:5b:6a:f7:e3:ae:a2:bb:be:
                    c2:e6:3e:33:ec:22:ee:45:5d:fa:f1:1b:1f:d9:a6:
                    d0:01:89:ab:4f:8f:9f:b4:78:65:22:39:11:6d:db:
                    00:98:b5:49:1a:3c:ac:ba:99:75:21:c4:b3:45:18:
                    ff:61:94:5f:9e:09:aa:ef:ae:cd:ba:16:f0:c7:4a:
                    51:c0:42:80:85:26:d0:b3:52:61:85:06:9a:a2:55:
                    37:ed:ef:bd:96:d5:ce:5c:c9:d3:6d:7a:e4:20:d1:
                    fb:cc:67:4b:e0:01:e6:c8:d2:31:6f:16:46:ca:a8:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:58:61:92:9B:96:56:DB:CA:88:DD:FA:82:69:97:24:07:C3:C0
            X509v3 Authority Key Identifier:
                keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:76:c1:38:d7:f7:25:93:bf:55:e5:e2:e5:69:15:02:74:76:
         7c:96:1c:51:ef:a4:f2:41:8b:35:d2:ed:e7:c6:5d:86:98:db:
         63:dc:c1:4c:37:b1:4b:ce:6e:30:a8:e7:96:0d:40:01:db:8b:
         4a:57:93:d6:d4:3b:cc:c2:4c:84:62:d4:3e:fe:55:80:09:bd:
         e8:3a:a0:f1:4f:cc:fc:47:f0:61:e6:da:86:3e:9c:d6:eb:b7:
         03:42:23:78:28:aa:09:44:71:d2:ce:8c:4f:5e:9d:c8:a9:b2:
         4c:ca:ec:3b:7d:99:66:c2:a3:cb:ae:fe:cb:7e:f6:b0:82:8d:
         2c:40:41:f9:17:27:85:4f:82:0a:91:f8:ec:bd:3f:93:d4:4c:
         a2:49:fc:1f:47:75:3c:f5:53:2e:af:05:35:aa:a9:b8:61:49:
         37:91:a6:8b:82:7b:d8:47:73:c5:9f:44:12:d6:32:6b:8b:cb:
         4e:a4:c3:0d:fc:d9:4c:eb:56:f6:09:71:60:36:27:04:8d:59:
         94:79:b4:bf:b6:93:d1:8e:66:92:0c:df:94:56:ee:33:20:48:
         25:71:2a:15:9d:ef:a4:70:a0:57:9d:99:22:44:93:b5:0f:e1:
         2d:b7:12:23:d8:02:d4:43:10:9c:e8:3f:85:bc:e9:f4:f8:d8:
         0c:30:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----