Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          rL4dsjwsghRgqBlNu/3GQFydk9SwJMUfon8/QAF+g0A=
Subject key identifier:   50:9C:F6:E0:05:CF:2D:9C:FA:77:81:35:2F:FF:97:D8:43:E8:0F:A4
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       01962F065A4679A92D3F56D3475B651997C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: nS3yOuyrQbUzWX2W3xScAlZEQN7t2kkLQncp8qnsHn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:46:79:a9:2d:3f:56:d3:47:5b:65:19:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=509cf6e005cf2d9cfa7781352fff97d843e80fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:60:a1:cf:14:f8:eb:cb:80:3a:7e:96:ee:
                    8e:7a:78:31:91:28:58:6b:9c:72:3b:c8:23:2a:53:
                    57:9e:df:fc:6a:e0:b3:e1:f1:f6:52:95:11:8f:57:
                    0b:46:d8:95:8a:f2:29:a1:6c:26:ac:01:ac:fe:c5:
                    b3:07:e3:a7:52:da:2e:d6:7f:0c:ff:5a:12:05:94:
                    b5:7a:95:cf:81:a2:3b:2f:ad:d8:7f:25:ee:04:0d:
                    a3:7e:84:15:3f:92:42:0a:f2:ec:27:09:8d:b8:3b:
                    38:4d:04:0c:15:b8:bc:91:49:b8:72:7f:57:2a:a3:
                    54:d4:75:57:00:22:03:e7:fa:03:0b:d8:6c:1e:0b:
                    08:dc:d2:ae:46:ff:76:42:e1:2b:cc:e9:d2:1c:d1:
                    12:d9:94:54:5d:27:69:36:bb:65:44:49:4c:fc:e1:
                    c4:1c:3a:3b:5b:57:f4:6c:8a:65:bd:92:47:be:ca:
                    37:8d:67:84:8a:58:c3:b0:8c:2e:5d:d0:9f:f7:12:
                    34:28:7e:97:15:8b:0f:07:ff:b6:00:4d:dc:be:4a:
                    46:35:ae:2e:43:95:70:8a:0c:b2:e5:8b:42:cd:c9:
                    51:6d:6b:3c:49:c8:57:8a:17:52:7b:2e:f1:80:00:
                    e2:79:df:3c:56:af:62:c5:5b:e7:bb:40:b0:b9:c9:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:F6:E0:05:CF:2D:9C:FA:77:81:35:2F:FF:97:D8:43:E8:0F:A4
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:67:16:84:70:f3:0c:f0:99:39:a4:1e:89:7f:24:63:28:
         1d:95:e8:9f:54:ea:ed:d9:4b:dc:40:92:1e:48:b2:10:a9:fd:
         a1:7d:d3:87:04:af:cb:05:2c:82:d9:71:4b:fc:c8:de:b8:b9:
         d7:3a:94:67:6d:c0:14:3e:b2:4c:dd:21:8c:86:3c:e5:10:74:
         29:30:00:c4:eb:8a:54:ef:b1:52:57:a3:9b:b8:3a:36:72:63:
         47:ce:37:31:b7:8f:dc:3c:3d:c6:39:e2:8a:fc:99:5e:b6:0f:
         3a:30:8d:07:33:53:4a:db:a0:51:be:f0:50:be:36:15:e9:59:
         dd:1a:61:a7:ac:32:e2:8d:a4:04:4c:00:08:21:27:c7:67:95:
         6f:f3:6b:9c:fa:d6:8f:7b:4e:66:a9:8a:03:a9:c1:30:8c:3e:
         04:07:9d:b9:0f:5e:91:c7:e9:06:43:1e:66:cd:3f:1f:75:2f:
         99:49:da:c9:be:6e:1d:53:d1:25:1f:7d:0a:fb:8a:b5:ba:07:
         4c:0d:ea:67:95:3a:a7:cb:af:5f:df:0b:1d:3d:dd:e1:73:41:
         ad:3a:d5:2a:15:b5:89:a1:a1:6a:c6:d6:b9:81:08:4f:a3:50:
         b6:47:9e:d7:e4:3e:ab:56:7c:d1:00:57:19:71:81:f7:43:7a:
         e8:74:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----