Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File:                     _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier:          61RHcbfOtWKBGqEXf3IeJa2zcKC3ikD/RQee8zWYvKI=
Subject key identifier:   BE:0E:77:4E:DD:32:95:2B:5B:E5:1C:3E:C2:D9:B2:EA:F4:C3:30:78
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer:       /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial:       01962DF3A3E07B58B3DA8ABAAF6FC7CCA353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number:          0406
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: V6U1vuoDa4oDfOCAzmpRsfy0dKBOfT7m/YyDmz9h+Es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:e0:7b:58:b3:da:8a:ba:af:6f:c7:cc:a3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=be0e774edd32952b5be51c3ec2d9b2eaf4c33078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:0d:87:95:37:79:31:62:c7:47:76:19:21:
                    bb:89:a0:dc:c0:07:0a:a2:be:02:b7:d9:66:04:21:
                    7e:9e:14:9e:3b:3f:77:56:85:61:1f:8f:fd:b4:ce:
                    db:a9:56:08:e0:11:db:ea:92:02:cd:df:31:4b:46:
                    2a:92:e4:34:1f:09:de:50:83:83:32:6e:27:19:0d:
                    e1:9e:3e:5f:6f:f9:2c:7e:25:3a:75:cb:62:32:86:
                    a0:87:43:35:72:8b:7f:6e:fe:32:2d:f4:c6:be:0d:
                    2c:5a:c0:66:64:60:d0:de:fc:3b:e3:0f:51:57:8f:
                    15:bb:f3:0e:83:bb:b0:e1:73:7a:c0:c6:6c:f9:06:
                    8b:40:b0:0c:e0:f0:74:51:af:51:7d:03:c7:1c:f9:
                    c7:07:1f:34:48:d4:7b:06:a1:db:d4:89:cc:5e:90:
                    8b:31:04:37:75:46:9f:db:e7:9a:50:4d:99:d6:c9:
                    c1:9d:ac:c2:bd:2f:0f:56:8d:8d:4a:1b:b6:f6:68:
                    2a:11:03:cd:36:9c:0c:3e:f3:1c:bc:b9:f2:5b:37:
                    35:ff:14:1c:5b:4c:03:52:58:31:d9:ec:49:f9:1f:
                    32:5c:05:ea:14:20:f4:93:f4:3d:4d:ac:3c:6b:ba:
                    81:3e:5f:7c:3f:cf:9f:94:ef:a1:dc:cd:11:a1:e6:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:77:4E:DD:32:95:2B:5B:E5:1C:3E:C2:D9:B2:EA:F4:C3:30:78
            X509v3 Authority Key Identifier:
                keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:17:57:ac:1f:01:19:56:75:1d:dc:a2:03:52:71:61:f2:
         a9:9c:a8:8d:4c:8b:6c:d3:9e:98:4c:eb:d7:e7:ad:f2:cd:32:
         b6:c1:e3:e3:92:bf:8f:c5:08:ca:f0:ae:5f:95:64:a3:1a:ed:
         38:03:4b:e5:6a:19:47:3d:2d:2b:50:64:65:bb:cc:3a:3d:41:
         74:8c:5b:7e:13:61:59:b7:ab:2f:cc:f6:94:66:f5:b0:4c:b6:
         ce:a7:08:e8:34:45:76:b0:a8:26:ad:8f:f9:52:c1:fe:b7:16:
         e2:35:03:38:c3:bd:ad:55:c4:f0:ae:1a:0d:54:ff:54:a5:e7:
         7a:20:b6:3a:28:11:bb:50:c6:dc:05:36:1f:7c:e3:fe:d9:55:
         bd:a9:d1:5e:77:ed:97:d6:c4:8a:f1:cc:e6:fc:c6:c8:cc:7d:
         ca:89:46:eb:e6:96:47:d1:e9:0f:47:9a:02:e2:66:ae:76:9b:
         63:f3:86:2b:b5:5a:81:33:4a:27:56:90:21:e3:f8:88:70:b3:
         44:18:e7:cc:47:31:fb:e0:42:4b:48:f1:a6:94:f7:46:08:05:
         cb:36:ab:88:07:82:0b:48:fa:cf:73:88:b3:ca:82:a5:0b:aa:
         4b:0f:7b:c6:83:7a:46:89:9b:a2:ef:3e:a2:b3:9d:2b:e6:b5:
         be:fc:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----