Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File:                     z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier:          X+nvCI7nw4+mRtPnLAyE7K2NPqscw2lD6Las77ftdJs=
Subject key identifier:   09:D6:6F:CD:30:E0:85:54:4B:0A:AD:0A:20:F7:A1:63:6A:F0:34:D2
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer:       /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial:       01962DF3C9CE511ECE30984E5DE9718AF8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number:          0A82
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: yhcwo2qlISHA7NG9Yhucz8qz6ctihz/lHmgDzScXJUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:ce:51:1e:ce:30:98:4e:5d:e9:71:8a:f8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=09d66fcd30e085544b0aad0a20f7a1636af034d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:bc:1e:aa:80:50:8e:bb:6d:41:7c:38:82:
                    dc:4a:cf:fe:86:bc:30:ff:3b:f8:b4:46:18:ed:5d:
                    bd:a3:17:1c:e8:2e:3a:5b:2b:33:46:c3:16:27:95:
                    1b:9d:77:4a:a6:e2:50:b0:69:94:95:d3:e9:71:bf:
                    35:c8:43:30:89:73:33:1f:9a:c4:8c:47:88:8c:b0:
                    04:7f:b1:01:ca:84:22:b5:bc:56:cd:a6:65:6f:a9:
                    c1:70:88:80:d2:0f:2b:50:a5:4f:f2:07:1e:aa:ca:
                    e8:f6:dc:de:db:82:41:3c:58:29:e2:98:ca:10:56:
                    9c:1b:d5:c1:6e:a6:b6:ca:59:30:10:e1:15:3b:09:
                    49:6b:1b:ff:76:63:c9:ed:89:45:fc:b1:bd:52:d4:
                    8e:ab:81:ec:b8:56:8c:0f:b0:87:06:d3:10:fc:eb:
                    81:8b:60:ce:f6:19:92:f9:72:ff:d7:65:c0:73:76:
                    de:0a:cd:5a:5f:de:cd:bb:49:c8:51:98:83:b0:f6:
                    26:1b:b2:b2:fb:1c:a5:21:90:f8:df:32:8e:12:87:
                    17:37:7b:93:50:d3:9d:b2:36:78:9f:fb:ec:00:8b:
                    e0:8c:f1:61:5f:83:e5:5e:88:10:7b:51:cb:b9:9a:
                    31:42:e4:87:c0:bb:15:cb:de:6d:9d:66:b9:9f:a0:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D6:6F:CD:30:E0:85:54:4B:0A:AD:0A:20:F7:A1:63:6A:F0:34:D2
            X509v3 Authority Key Identifier:
                keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:56:70:75:5e:d7:e2:96:bf:79:e2:2b:62:e6:bb:f5:62:1e:
         96:30:d7:c5:0f:25:51:30:06:ce:3a:14:fc:9f:2e:9f:06:c2:
         f6:a9:8e:41:b8:1e:19:40:aa:3d:87:bc:c4:ec:6d:2c:a3:d8:
         b1:87:2b:64:d1:c8:44:7f:8f:65:25:0c:de:7a:00:92:34:13:
         5e:c5:49:57:ca:e0:03:cc:84:5a:eb:a6:b0:17:c2:82:4e:76:
         cc:60:72:a6:5d:be:ba:96:cb:bb:21:2e:11:dd:df:f4:c3:95:
         5c:4b:36:fb:dd:67:33:81:50:ee:d6:b1:6b:5c:5d:6f:44:df:
         0a:b6:9c:e1:43:dd:6c:ec:33:74:d8:80:d7:3b:05:e2:31:bb:
         83:9d:9f:63:ed:99:05:e0:d7:b6:ce:6e:07:1e:90:3d:81:6b:
         37:1a:5a:50:d2:6f:c8:15:a0:56:c5:99:6c:30:ea:63:ac:c2:
         db:f5:15:a4:b4:a6:5a:ad:bc:32:ee:37:bf:e5:7e:84:65:16:
         ae:b1:ba:79:be:70:0f:31:54:b5:c1:8d:0b:e9:93:f3:8d:0b:
         4a:a4:a8:50:59:0d:6e:9d:88:fe:53:3f:d4:37:3c:ba:2e:33:
         16:38:ed:84:26:35:af:5d:9a:4c:e7:df:ba:b5:8c:71:e5:72:
         99:6f:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----