Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
File:                     lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json)
Hash identifier:          BpjCYUD22b3ZXCHuthYpc0YYxvPVOfgn/XQfeSFTeXQ=
Subject key identifier:   A3:F2:DF:31:70:23:B4:1A:AF:13:95:6D:82:2D:B8:75:EC:FC:02:35
Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Certificate issuer:       /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Certificate serial:       01962E99A1DD38039AEF4CE050737E48604E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
Manifest number:          1221
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: jTq9NT+CwHaoEXBhY5jXG2lGuGTORnRBhuhY/EboVRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:dd:38:03:9a:ef:4c:e0:50:73:7e:48:60:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=a3f2df317023b41aaf13956d822db875ecfc0235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:f1:d4:86:57:48:7b:9b:81:2c:03:fa:5f:
                    07:dc:15:47:e2:c9:25:fa:e9:a4:c9:56:94:59:ae:
                    34:c0:a4:7e:af:51:4f:47:46:f6:af:a5:8a:74:86:
                    6e:76:07:96:50:dd:3a:e7:eb:1d:9d:ac:a6:95:00:
                    29:bd:05:30:c3:e0:03:ea:84:38:58:34:ed:c0:c4:
                    68:ce:97:84:69:33:a8:95:28:a7:dd:fb:96:3c:fa:
                    9f:45:7d:a1:8b:0f:91:6b:0c:39:d5:ee:27:64:96:
                    4e:89:03:00:c2:72:4e:f7:28:84:47:5f:82:ab:4a:
                    d6:8c:73:24:51:47:9f:15:eb:0f:c7:a4:55:93:b1:
                    e3:17:c2:86:9e:d8:51:18:1b:97:84:63:cc:86:af:
                    20:c1:6e:ca:c1:91:b5:53:6e:ae:56:2a:fb:ae:fb:
                    e9:15:9c:7c:d7:00:30:87:16:76:29:da:cc:0d:47:
                    70:61:41:d0:8f:a2:0e:3b:80:c7:f5:14:22:f4:d4:
                    9d:95:5a:ae:d0:16:1b:d2:d9:89:dd:9f:94:2d:27:
                    85:3f:84:ed:0b:ec:e2:33:0b:50:c4:23:35:7f:75:
                    3c:94:e4:21:fa:68:60:97:77:01:39:7d:86:8b:82:
                    52:50:fb:6f:0d:d6:9c:b5:f5:0b:ec:1a:08:0b:ae:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:DF:31:70:23:B4:1A:AF:13:95:6D:82:2D:B8:75:EC:FC:02:35
            X509v3 Authority Key Identifier:
                keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:e9:4f:aa:17:8e:0a:a0:9d:09:ac:75:43:12:b3:ab:12:
         61:ff:ee:9a:fd:ad:89:d9:7b:f6:f5:b1:d4:a1:a4:12:8c:3c:
         84:49:83:6f:f4:c0:a9:1e:ec:6c:d6:a5:7b:11:3e:65:c7:bd:
         e7:24:29:31:dc:03:90:ec:53:8e:ff:fd:6c:10:62:fc:7f:43:
         41:d4:6c:06:92:4c:9d:a4:48:af:1d:a8:c5:1b:bb:9c:5c:63:
         c9:cf:7c:a3:ce:3e:24:4a:78:b1:60:11:55:45:7a:88:ca:34:
         b3:fc:b7:fd:7b:df:58:d7:70:6f:ca:5b:b9:04:05:7d:c7:3b:
         38:6f:c8:4b:76:21:fa:6c:be:a5:b8:0d:e3:8f:6d:11:35:6b:
         b7:80:c4:31:17:78:17:8d:1b:95:6d:6e:34:fc:02:01:b8:f1:
         03:79:4d:39:f3:4a:e7:32:58:f7:e5:4c:75:8f:6a:21:ae:ed:
         b3:9d:16:86:d2:fc:50:1a:b8:2a:42:c2:3e:75:ef:6c:9d:bb:
         18:8c:60:eb:23:25:e3:74:dd:26:a3:70:33:a5:b0:b6:4b:bc:
         46:fb:85:ae:79:32:54:5f:9d:2f:f4:1b:38:c9:05:80:47:56:
         86:a8:3a:1a:cd:97:c1:f9:71:3f:ab:fc:d3:25:a0:a9:d3:0f:
         04:a3:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----