Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
File:                     zRvlrhITa5bNnXilwkykct6Ixlg.mft (raw, json)
Hash identifier:          Zh4oAqIeEP+QTlH0/IAIaL6xNelG8ra0yTabHk7Yvfs=
Subject key identifier:   43:E5:3B:76:D7:A5:4D:63:84:0A:65:8A:D1:DF:D8:1D:3F:DC:E4:3C
Authority key identifier: CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
Certificate issuer:       /CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Certificate serial:       01962F3D6C9344B76FEE700BF66C7FB33A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
Manifest number:          071D
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: zRvlrhITa5bNnXilwkykct6Ixlg.crl (hash: P1xFEPgldptw9sHeBRUj+zIKxiCeUIUR+3qB3xFPU1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:93:44:b7:6f:ee:70:0b:f6:6c:7f:b3:3a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=43e53b76d7a54d63840a658ad1dfd81d3fdce43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a9:f5:7d:11:7f:51:71:b8:bb:42:4a:0d:98:
                    93:96:b8:b3:66:0f:eb:e3:5e:08:9f:84:a8:27:41:
                    92:23:c4:be:c5:09:cc:45:db:87:4e:20:53:cc:35:
                    87:39:21:16:53:be:b2:f3:e2:81:b0:ad:25:7d:f4:
                    5a:1a:b4:7e:17:96:f2:9e:8d:5a:fa:d2:9a:fc:54:
                    49:12:5b:a4:99:77:d6:f6:71:9a:25:0b:7f:b0:4a:
                    7f:2c:29:43:07:ee:1d:41:77:90:ae:bd:46:51:a2:
                    a3:26:b6:85:61:31:bb:d5:8a:7f:f2:28:d6:9d:38:
                    f5:06:aa:f6:c2:39:51:ed:e7:14:78:0c:84:3b:c6:
                    a1:4a:2e:0a:32:f2:e1:10:e9:2d:a6:2c:55:cd:41:
                    b2:be:2d:ec:01:e3:44:63:42:e3:3e:5e:74:9e:4d:
                    86:17:a1:95:90:23:4d:db:4d:8a:f5:dc:d5:72:c4:
                    e1:0c:46:26:3d:6f:6f:0d:ba:6b:9f:dc:a0:33:c0:
                    67:b7:f2:1a:47:a9:be:1a:ce:6f:24:b3:72:44:70:
                    f2:d6:d3:7d:09:c5:93:17:4a:dd:b1:71:be:22:aa:
                    01:7e:49:63:a2:3e:fd:67:f2:3d:7c:01:cb:91:5a:
                    14:e0:6f:ce:56:2f:a2:5e:30:58:93:ae:7d:e5:c2:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:3B:76:D7:A5:4D:63:84:0A:65:8A:D1:DF:D8:1D:3F:DC:E4:3C
            X509v3 Authority Key Identifier:
                keyid:CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:7a:dd:de:d3:b8:28:0d:ec:52:73:e1:e4:c4:15:7d:33:
         43:83:58:6e:72:b7:ba:75:bc:b7:d4:41:24:34:a6:3b:72:4b:
         fc:66:e8:17:ab:e8:0a:5e:16:5a:b4:bc:c2:97:1a:d8:be:17:
         34:45:51:d2:7f:41:7a:15:c1:fe:f3:da:5c:5a:7c:8c:95:65:
         b4:8b:96:62:cb:54:1d:13:eb:4f:07:85:c3:10:98:92:6a:c4:
         c2:b3:97:82:15:65:fb:ee:0c:50:7c:0c:00:c4:cc:c0:6c:85:
         b0:28:f1:73:c8:d7:8d:38:85:d2:99:5d:84:0c:a2:82:fb:6d:
         69:4f:b9:0c:35:de:b0:6a:98:7b:13:b0:90:4f:32:7b:33:cc:
         98:48:fa:db:39:19:46:8d:fc:03:2f:24:74:01:fb:89:72:71:
         0d:88:24:75:43:55:7a:f4:46:ac:d7:20:a8:53:35:63:c3:f9:
         67:2c:06:f5:f8:a5:a2:e4:c2:39:a3:6a:67:ae:c3:44:14:c2:
         03:92:a8:08:e0:17:23:42:78:c5:58:76:ef:5b:74:7d:ba:ad:
         07:77:40:d3:67:da:e1:2e:b3:06:0c:dd:4d:ff:fe:9e:3c:a6:
         19:e7:96:90:a4:a1:3e:73:eb:18:66:87:c3:7b:f6:17:9e:30:
         59:5c:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----