Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File:                     2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier:          K3WMHMFqGmawHYxIe+3D2cNEBBrZdAnelK4SQNfBBoA=
Subject key identifier:   58:B1:65:91:D1:DD:23:8B:55:CD:D2:7E:94:38:C4:39:D9:D7:A5:61
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer:       /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial:       01962E9962B34D9181C02FA6B4FC510EB7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number:          0F85
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: vYw4Wc+Cb7KAEnQPDZUgxzsis2Fl+vv9ynf/50TM3NM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:b3:4d:91:81:c0:2f:a6:b4:fc:51:0e:b7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=58b16591d1dd238b55cdd27e9438c439d9d7a561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:72:37:21:6f:7e:9a:c1:9a:9d:b9:40:91:
                    6c:82:38:c5:29:59:ae:2c:49:04:c3:cc:c1:9a:56:
                    ed:36:30:ff:bc:23:1b:e2:14:4a:37:63:10:4d:19:
                    cb:ff:f6:a8:a9:12:69:b5:f0:ba:40:fc:28:40:a7:
                    f4:2e:80:95:9d:8c:f6:99:04:01:4e:2f:8d:5f:c3:
                    48:db:06:40:bd:73:1c:a6:d3:df:d2:e3:0b:6f:4c:
                    2b:ec:79:0f:7e:ed:0d:42:47:2f:2a:9e:b1:45:b6:
                    32:d4:a8:38:88:0d:02:bf:c8:9a:65:a9:87:af:4d:
                    5e:e9:e8:19:e1:9b:21:c5:85:63:b1:67:57:ca:21:
                    49:c4:e4:63:93:8d:f2:ea:5b:dd:a9:b1:3a:70:ac:
                    ca:09:15:56:1a:71:2a:e0:0b:6c:57:f2:24:3f:5d:
                    2d:ac:40:82:af:f7:40:ba:df:bc:2c:24:ef:4f:30:
                    0e:0a:d5:47:45:e7:f6:0f:b5:39:5c:b2:cd:e6:55:
                    95:da:4b:c0:7d:9d:e1:da:ad:58:31:92:dc:9e:04:
                    6b:69:0c:15:7c:94:90:df:d1:3d:27:eb:5c:02:0c:
                    75:85:51:59:db:ea:aa:02:82:21:e3:31:7f:96:22:
                    f1:d2:c4:ee:cd:58:12:6c:7b:fa:e8:e4:1f:ba:13:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B1:65:91:D1:DD:23:8B:55:CD:D2:7E:94:38:C4:39:D9:D7:A5:61
            X509v3 Authority Key Identifier:
                keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:51:19:99:df:86:ac:24:11:58:ff:cc:2e:3c:d8:3e:28:34:
         e8:68:56:7b:b1:dc:23:2f:ca:d6:30:77:a4:79:35:96:83:63:
         02:55:88:fa:22:0b:1f:cf:d7:48:51:c7:99:0e:82:8e:68:27:
         2b:a7:4b:95:a5:dc:45:48:51:f8:d7:e7:20:36:38:b2:04:21:
         81:21:1c:c4:3b:4e:a8:a2:8b:3b:6e:6f:e8:87:1a:f8:c4:30:
         a8:4c:45:b0:47:cf:48:50:30:e2:0c:74:9c:b2:37:be:80:2c:
         97:f5:53:7e:25:33:ac:b2:c1:a5:c9:9e:fe:60:56:2f:57:03:
         fa:d2:27:70:bb:24:09:2e:0e:1a:18:63:bc:2c:ab:94:3c:46:
         bb:47:7d:d8:2a:07:4c:ab:26:aa:51:fb:38:b5:a7:7d:dc:fe:
         98:fc:26:d4:64:60:f8:63:a1:b0:4f:b7:be:be:bc:73:47:40:
         6b:78:2d:37:26:2c:e4:bd:fe:7f:37:49:4e:f5:aa:f4:90:ed:
         f9:f2:17:6a:53:f6:cd:3b:c9:bc:9d:fd:49:ed:98:3b:66:a5:
         ec:41:d7:b3:1d:ad:ed:ea:4b:3f:33:a2:07:46:2b:fc:88:2f:
         6f:af:0d:11:57:e9:00:66:d4:d2:df:02:88:6d:06:f2:c9:a2:
         2e:12:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----