Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft
File:                     OpzyvclyZDBARldYsyWap8kubhw.mft (raw, json)
Hash identifier:          Xy3+zlICi+FZ5TUZTitqzFnUQQ1D0JInXIm6b9b6VGo=
Subject key identifier:   71:42:74:47:25:57:48:2C:0A:D1:BB:7D:75:96:56:79:21:32:0D:8E
Authority key identifier: 3A:9C:F2:BD:C9:72:64:30:40:46:57:58:B3:25:9A:A7:C9:2E:6E:1C
Certificate issuer:       /CN=3a9cf2bdc972643040465758b3259aa7c92e6e1c
Certificate serial:       01962F06FAD7571EC9FCEC58718903CF07AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpzyvclyZDBARldYsyWap8kubhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: OpzyvclyZDBARldYsyWap8kubhw.crl (hash: l4INFwyaX0GUE1GcJT5Na0Z5tRrEZTaa72oe5pYVQiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:d7:57:1e:c9:fc:ec:58:71:89:03:cf:07:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9cf2bdc972643040465758b3259aa7c92e6e1c
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=714274472557482c0ad1bb7d7596567921320d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:ab:35:98:aa:b8:92:75:2d:bc:5a:2a:37:
                    66:e0:c0:69:6f:c7:ea:f8:53:5c:2c:0b:b5:8f:b0:
                    27:50:51:5f:c0:a1:52:bb:b2:06:b5:e9:77:a9:68:
                    fa:83:6c:59:05:93:2a:91:58:dc:a6:ce:23:86:e7:
                    9e:55:6f:1c:fc:64:fa:f8:c0:3e:59:c5:cb:15:f4:
                    75:4c:e9:d8:d2:70:40:eb:bd:68:bc:b1:49:a8:71:
                    3c:dc:0d:b5:ed:23:ef:02:45:e0:df:55:96:f3:38:
                    8e:8b:30:a7:9d:c5:37:2b:93:0e:42:4d:f3:72:62:
                    8a:50:7d:e6:9b:ec:18:b1:fd:b0:ca:97:a9:57:9c:
                    5e:85:3e:e7:68:2d:46:98:ae:df:ce:e9:2c:80:13:
                    a0:f5:c9:e8:e1:9e:2e:af:94:75:bc:b0:86:6c:c0:
                    9d:8b:0c:d8:91:6f:43:ff:4f:ba:8d:59:e8:56:a3:
                    55:1d:43:9b:d1:84:f2:16:fc:73:59:c8:65:a3:6d:
                    ff:4f:59:3d:a4:51:47:3e:da:dc:eb:7b:ce:c1:c6:
                    c1:3d:98:09:bf:63:9a:61:05:ca:8a:98:a5:ef:4f:
                    40:b7:97:39:4c:69:c6:5e:0e:1f:91:aa:69:63:c3:
                    8d:56:20:95:56:d0:b2:3f:d4:78:2f:ce:05:ba:59:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:74:47:25:57:48:2C:0A:D1:BB:7D:75:96:56:79:21:32:0D:8E
            X509v3 Authority Key Identifier:
                keyid:3A:9C:F2:BD:C9:72:64:30:40:46:57:58:B3:25:9A:A7:C9:2E:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpzyvclyZDBARldYsyWap8kubhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:a0:a7:e5:a6:5a:4b:01:8e:6d:70:37:f0:ba:bb:f9:e8:
         5a:03:13:b7:5e:ae:5a:59:e1:cf:c0:74:31:60:70:26:24:b4:
         24:da:a8:09:39:64:86:7d:dc:f8:9d:5e:6b:a1:52:41:11:17:
         f7:a6:1d:6c:f5:b1:97:56:9c:2f:43:4a:45:d1:c2:e9:f8:be:
         45:81:cd:c0:5b:f6:aa:80:f0:ec:94:ec:b8:1c:54:52:14:4f:
         45:6e:41:c4:87:9f:13:2c:d6:ee:b2:a1:f8:f7:8e:c4:e7:8f:
         09:18:e7:4d:4d:15:00:e2:e9:9a:88:c2:7f:a1:ad:ad:76:1f:
         32:25:b8:0a:cc:65:77:71:b5:03:5c:57:3f:7c:2f:b6:ef:d0:
         be:0d:51:77:7f:66:cd:12:2f:df:59:8b:38:11:7d:b8:0a:f3:
         37:b8:1c:a6:ce:10:b1:95:2d:11:6f:12:78:f3:80:ad:a8:8f:
         0e:5b:cf:65:e3:a1:e2:6d:f2:a3:6b:f0:d6:85:72:da:ee:c4:
         2a:fd:07:6b:2b:7a:5b:5f:85:ee:5d:01:65:33:8b:a2:51:d3:
         50:8d:a4:7e:e2:4c:3a:45:d9:82:ae:d2:7e:27:9e:a9:56:1b:
         0a:15:f4:99:82:89:95:44:34:4b:42:fc:ab:6f:6c:cd:1a:8a:
         7d:74:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----