Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File:                     Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier:          exaVGGFYgl6BtmoyAdTG4qWK47l02oS8NR3ohlJ0MUg=
Subject key identifier:   8B:B9:DB:48:9D:94:88:E2:92:6F:3D:A7:BE:32:15:08:0C:8D:45:20
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer:       /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial:       01962F06ECCD036C9EEEA4FCAC18FCD66E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number:          0601
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: n3vcVQ13Eq7xr5nyeteJzlcNxG50KNRwVOuf/mGUYAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:cd:03:6c:9e:ee:a4:fc:ac:18:fc:d6:6e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=8bb9db489d9488e2926f3da7be3215080c8d4520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:57:b1:d2:25:cc:04:37:fb:33:14:bf:e7:
                    20:27:72:43:3a:39:9e:76:1d:11:99:7b:e9:7a:41:
                    a9:f5:c4:05:c9:d5:95:b3:8b:d2:42:bf:0f:99:5f:
                    49:4f:a3:0b:7a:04:49:8b:fb:b0:a9:1c:a2:0b:e1:
                    9e:45:bd:d4:db:bb:5a:78:46:66:50:72:71:d1:66:
                    eb:73:25:e3:c6:96:af:b1:53:4a:51:b6:8d:66:07:
                    f6:f1:c8:58:6c:a3:ae:9a:40:05:0e:b1:42:c1:78:
                    43:20:af:34:01:3e:d5:49:d1:9e:5c:22:a0:06:1f:
                    ae:84:0c:4d:a2:0c:03:f0:02:6d:84:46:b8:d0:cb:
                    25:9d:18:6f:f4:cb:28:41:14:c9:74:ad:00:86:16:
                    ff:6e:33:eb:d1:3b:2e:34:6e:75:58:4a:31:8c:eb:
                    6f:39:d9:6d:37:4b:02:c0:82:0f:e6:ac:a6:9b:c1:
                    ed:e3:6e:ce:8d:78:3c:8c:51:49:54:e8:8e:0a:b2:
                    bb:36:18:09:e4:bd:ea:b4:6e:ce:13:b4:6a:06:e1:
                    3e:08:52:b9:a3:2f:0b:45:9c:f9:81:dd:25:94:ef:
                    0d:9c:c5:59:ae:ce:36:56:ec:2d:a2:33:2e:1c:78:
                    f1:d5:ee:e2:9b:63:68:82:b9:92:a9:19:dd:88:70:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:DB:48:9D:94:88:E2:92:6F:3D:A7:BE:32:15:08:0C:8D:45:20
            X509v3 Authority Key Identifier:
                keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:99:15:25:fd:f3:fd:27:24:9e:0d:52:83:5d:0b:48:3f:
         01:0e:df:6b:4c:37:b6:35:0a:dc:2c:2b:14:bf:dc:e5:d7:70:
         f9:95:42:8e:a6:62:a2:d8:23:dc:df:9d:77:dd:85:05:6c:6d:
         07:71:e6:29:e0:e9:26:f8:4e:32:a8:98:2a:b2:99:b1:7a:50:
         8d:fe:d2:a9:a6:77:44:5b:e2:b3:94:2b:5d:25:fb:c4:1d:11:
         8b:ad:9f:73:8f:7d:b4:7b:c8:b2:b0:5e:1c:32:8c:7d:da:2c:
         5e:bf:63:aa:aa:f4:3d:eb:6a:17:ef:27:aa:3d:62:c3:86:9d:
         4f:0f:ff:73:98:b4:3c:a9:ab:4b:cd:21:92:ef:47:54:fa:6d:
         e8:08:2d:68:39:eb:18:f9:36:d7:35:7a:43:53:e9:7f:61:3d:
         0b:7e:aa:62:0c:cc:d2:c2:be:08:c1:03:0b:23:e6:e2:cd:a7:
         5d:8c:37:43:e2:05:2f:c9:d5:96:55:70:03:28:1a:c5:84:0c:
         28:58:fb:9b:fb:9e:61:10:79:b7:a1:3c:50:36:31:e0:6e:94:
         38:d0:4a:67:89:e8:53:7b:6b:33:b8:ec:23:7a:6b:97:59:31:
         48:f4:d6:a5:73:65:8f:12:16:bc:bc:dd:58:f0:e0:7b:35:9e:
         8d:82:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----