Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File:                     kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier:          rVgd+mNH2MxTEPmQwHb5MS91awZ7hSqZ+bKiDnAkDa4=
Subject key identifier:   27:54:39:E9:74:04:44:6B:5E:58:DF:E1:FC:E6:03:63:BC:EE:F2:FC
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer:       /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial:       01962F0660423BEC1F9A2B57AC275EE8DA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: 0WdLuUlmGGEgFu6nL2i61XnSUMuH9nzux6k6na8xlMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:42:3b:ec:1f:9a:2b:57:ac:27:5e:e8:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=275439e97404446b5e58dfe1fce60363bceef2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:56:e4:ae:36:af:e1:d9:9a:f3:12:12:a2:
                    6c:f5:f6:c3:51:c2:99:97:c1:bd:52:f9:d0:35:92:
                    a4:02:b3:88:c0:42:fb:32:78:8b:ef:2c:6e:16:e3:
                    ae:45:95:8d:14:62:e2:19:2f:f4:58:00:15:09:5b:
                    e4:9e:fe:27:cd:3b:23:87:d9:a7:15:ff:f7:d4:23:
                    43:81:bd:7b:20:bb:41:21:77:67:e6:e7:a7:f8:a5:
                    d1:cc:76:0e:8d:11:d0:84:4b:5c:ac:73:db:a3:39:
                    d6:53:ce:14:69:e0:f8:bc:b8:59:c0:68:0a:5d:35:
                    ac:f7:20:fc:0c:dd:a0:1b:3d:09:bb:30:f0:68:7a:
                    7a:fb:70:6e:55:27:59:b3:1a:03:82:a1:a1:0e:b4:
                    8b:89:36:66:49:e0:c5:93:0c:0c:67:3f:ae:7c:0a:
                    63:00:5a:74:86:04:39:47:ef:54:3c:fe:0a:96:c1:
                    29:30:5b:5d:49:ce:40:81:1e:d9:58:f6:0d:b3:26:
                    a4:55:1a:39:a4:75:e9:ab:d9:11:93:6d:4c:28:0b:
                    f1:36:3c:f4:4a:5e:e4:2d:51:04:48:5f:6c:8a:af:
                    fa:ca:db:ec:56:c5:48:7e:2d:25:d3:1e:5d:80:01:
                    38:25:9a:1e:4a:2c:c2:5f:96:93:0f:39:35:02:1b:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:39:E9:74:04:44:6B:5E:58:DF:E1:FC:E6:03:63:BC:EE:F2:FC
            X509v3 Authority Key Identifier:
                keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:90:45:12:ab:c7:82:a3:0a:8a:00:83:7c:9e:d6:3b:cf:
         a0:25:af:b5:b4:bc:f8:5b:8b:1a:77:ec:bc:b9:0f:c9:72:f1:
         2c:68:fe:8d:a9:29:a8:9a:94:75:fc:85:c9:75:0b:e2:f7:5f:
         a6:77:3d:ad:ef:55:a6:bd:ed:f3:09:f9:b5:f9:a9:23:c1:3d:
         0d:af:fd:66:98:1b:44:0b:55:df:c0:e3:2f:03:2e:38:7c:08:
         01:c2:13:c9:58:25:53:be:70:2f:e3:9d:30:2c:26:04:80:d0:
         6d:c0:84:cc:95:78:42:2a:1a:41:e2:48:7f:85:e7:0f:ce:1a:
         1c:9f:e3:4b:da:14:8c:5a:d8:f8:8a:cd:d7:84:36:f5:91:1a:
         67:bd:0f:f3:53:1b:74:8c:e4:df:b9:49:67:53:e6:28:17:c4:
         b9:84:8d:25:99:19:d1:31:b0:aa:cc:3d:2b:0c:3d:49:d0:7c:
         6f:70:d4:ff:02:bd:27:84:57:af:4f:b8:31:cb:d2:d1:6f:07:
         67:6c:6a:ee:d0:97:45:c7:e6:ed:a6:f0:27:27:76:8f:d5:1a:
         08:c5:5f:64:37:b8:e8:ce:92:a9:44:76:f5:8f:92:0f:85:fa:
         9c:13:e4:da:b9:a3:36:a6:b3:23:9c:ba:39:9e:f8:91:22:79:
         4c:13:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----