Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File:                     KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier:          01wsjeX8gKg8M3OYZXOJ1c+nWclrYGvlqxObB6B3eQU=
Subject key identifier:   A8:30:7E:D3:5F:00:BF:8D:08:C0:32:17:BA:11:03:B3:FB:D5:C1:D4
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer:       /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial:       01962DF4490E76539BF11961EB7A46A76C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number:          08A4
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: 6YLIiBYPePw36YqvsrSKMKsAqWHYQ3C3DdaYXUdkRLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:0e:76:53:9b:f1:19:61:eb:7a:46:a7:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=a8307ed35f00bf8d08c03217ba1103b3fbd5c1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:2e:f1:fd:87:9f:6a:e8:33:02:86:3a:07:
                    64:c3:4b:1e:a6:f4:86:2f:9f:3b:a7:27:93:1e:db:
                    e1:a5:fc:77:c6:ab:e8:d5:ab:a8:58:09:7a:47:4a:
                    1f:f0:77:15:49:f6:7f:6a:ec:7f:7a:2c:2c:84:2f:
                    65:64:78:f9:ee:ed:0f:28:02:33:e9:15:19:f0:2b:
                    e6:96:8f:0b:d9:39:d9:60:6d:05:3f:06:23:bb:78:
                    76:26:6d:f2:52:d5:a7:85:58:45:9e:8c:27:e5:cd:
                    07:3f:98:83:1f:49:e6:c8:6f:1f:59:12:cc:21:0e:
                    64:71:ff:df:49:ff:99:fc:5d:01:53:05:a2:5e:f4:
                    42:0a:33:e7:a8:fe:45:14:0a:86:88:44:d1:7c:ec:
                    3a:1d:c5:38:c5:a9:f5:16:87:f5:6b:dd:22:6c:ef:
                    fb:8a:0f:f7:e3:3f:8e:d3:12:d7:9f:92:19:ff:fd:
                    5e:66:35:31:d4:4f:59:d2:bd:59:42:c6:58:94:10:
                    91:ab:fd:06:a6:e1:8a:23:0f:ff:9b:e7:47:16:fb:
                    42:84:e4:01:05:ca:01:a7:47:b9:4e:a7:fe:ed:ae:
                    70:82:10:41:cf:f7:6b:f7:cc:4a:85:03:e0:4e:35:
                    32:4c:81:98:32:01:35:18:c5:03:19:af:1c:c7:f8:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:7E:D3:5F:00:BF:8D:08:C0:32:17:BA:11:03:B3:FB:D5:C1:D4
            X509v3 Authority Key Identifier:
                keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:e3:91:fe:b3:a1:64:39:59:d4:af:08:82:ee:77:13:18:
         b5:16:07:4e:8e:10:53:95:22:95:29:1a:1a:9f:84:1f:c5:1b:
         51:69:cd:2b:e9:de:91:1e:85:2c:13:bd:35:ef:a3:66:02:d8:
         74:38:e4:ed:56:43:aa:a2:02:ec:13:fc:53:1c:4f:39:cd:b6:
         c6:4f:f9:e0:5a:6e:10:a9:b1:36:bd:f6:99:32:84:a0:0d:30:
         59:2e:7c:91:4d:ba:b4:e6:fa:6f:5c:44:fc:5f:8d:8a:88:27:
         cb:95:ce:28:0f:bb:1a:af:49:38:50:13:ed:dc:53:66:85:38:
         04:94:3e:99:bb:ee:08:16:b3:92:3a:27:b9:c0:4b:a7:20:12:
         c3:8c:7b:fb:10:68:a5:14:4d:07:95:90:eb:9a:ac:82:20:d9:
         69:3d:47:42:2c:9b:7e:46:32:da:40:bc:8e:79:2b:d3:2e:06:
         53:0c:af:93:bc:10:2f:b7:90:15:69:92:00:9a:b9:c9:76:55:
         1d:7e:2f:b9:24:f2:46:de:41:59:0a:35:ac:72:7b:4d:da:65:
         be:23:d5:36:0f:0d:2e:70:f4:c0:fa:e1:8d:06:53:5f:c9:f3:
         a2:3f:14:18:25:2e:e8:7f:2c:7b:23:1f:92:08:21:f4:24:1f:
         6f:3c:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----