Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File:                     Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier:          VmhO2kGzaWM9mh28QRKWu3LWMfKLrk6KI3C8w4qxfeA=
Subject key identifier:   45:45:5A:40:24:27:A8:00:EF:A7:43:A0:C6:68:49:B7:1D:A4:01:E6
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer:       /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial:       01962E98FD6A7EE1DB763CF6718AB12351B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: i078tKpsIvyHhoPTZqGMf8O7xsTtxZ7Hd/2o/K1oU2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:6a:7e:e1:db:76:3c:f6:71:8a:b1:23:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=45455a402427a800efa743a0c66849b71da401e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:e7:02:ac:a0:f0:25:0c:86:83:a3:6a:c3:
                    a1:9f:b4:0a:e7:6e:d7:7f:9d:aa:ae:f7:52:26:b6:
                    4a:d0:dc:4f:9c:b5:49:a3:73:93:75:da:42:7f:98:
                    c7:84:0e:52:85:6b:68:a1:ef:c2:00:e5:d2:44:e3:
                    95:ef:0b:c1:24:91:93:6e:ae:dd:7d:7d:c8:be:04:
                    6b:e3:83:d2:55:78:14:fb:d5:77:d9:2f:92:61:56:
                    b8:01:9c:88:7c:a3:6d:3f:22:ce:bb:0c:e0:90:9b:
                    f5:32:c3:77:01:9f:85:e5:4f:97:bb:79:2f:b5:9a:
                    9a:b5:4e:14:20:4f:cb:82:b4:dc:5f:e0:52:ed:36:
                    9b:89:73:a6:22:d9:95:9a:ca:b5:88:10:c8:da:72:
                    88:ad:55:11:f5:d0:33:09:c0:52:4a:26:c3:f6:9c:
                    67:0c:90:da:b4:97:6b:10:47:96:b8:8d:ea:87:77:
                    a6:38:4b:e9:74:e9:3c:a1:73:93:ed:72:7f:88:2f:
                    3f:76:13:3e:de:9a:ea:27:aa:a6:28:23:16:7d:3a:
                    06:fd:7e:e5:19:26:cd:e2:75:65:3f:9b:56:82:25:
                    e3:70:1a:cc:f7:93:9c:89:d9:b3:25:9c:77:ed:d8:
                    08:cd:28:3d:96:12:18:99:5f:1c:2b:8c:cf:18:fe:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:5A:40:24:27:A8:00:EF:A7:43:A0:C6:68:49:B7:1D:A4:01:E6
            X509v3 Authority Key Identifier:
                keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:61:3a:ae:67:10:33:6a:a4:3b:d3:ce:8a:7e:09:9a:17:9f:
         4a:aa:35:d3:4e:ee:c7:60:7c:87:f4:a9:84:db:16:8e:95:84:
         8b:ca:36:5e:68:d1:8b:4a:92:09:1e:79:71:92:df:e3:0f:6f:
         20:03:47:6f:32:d8:d0:74:67:9f:fb:17:56:a1:a5:de:e5:ca:
         71:9d:fa:09:bd:c0:f6:09:26:c2:63:6d:d2:0c:1d:58:0e:d6:
         2e:03:66:a5:0f:10:2a:6e:86:62:0d:51:fb:1c:66:ba:3d:7f:
         9b:58:32:94:85:43:86:e9:45:7e:0b:c2:66:f7:56:d2:14:e6:
         56:6d:85:e8:b8:c0:4b:1c:3f:36:d7:a2:b7:de:7c:1e:16:f9:
         3e:7d:54:66:c0:c6:65:2c:0f:66:d6:f5:6e:8f:49:ca:79:dd:
         77:a8:1e:30:e1:d1:0c:20:32:8d:51:ec:f1:8b:4a:20:37:72:
         b4:44:46:3c:53:c7:69:49:73:6c:39:2e:90:1a:d4:2c:c0:fd:
         f3:1b:bb:a3:16:3c:9d:0d:3d:37:d4:ac:50:7e:9e:69:fc:1b:
         cb:e3:2d:f8:ff:c0:bf:28:52:6d:0a:9e:50:e3:61:ff:60:2d:
         3f:b5:db:ee:f2:0e:81:3d:a4:9c:d8:4d:65:48:0a:9c:d7:eb:
         b8:1d:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----