Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File:                     zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier:          d4dXcLWiNcJ1LTaKwfReYgAN4C7/yBlhH1kpFKhpHNc=
Subject key identifier:   B0:4D:8D:C6:A6:E8:F6:87:97:75:38:79:2C:22:30:74:97:16:9E:C3
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer:       /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial:       01962E2B105FB3EAD2FA159D39B2B27A50A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number:          044B
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: 9FIcf8bDzDEVYqn1wToYUUtE2WdxxNLcOFccjJue31s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:5f:b3:ea:d2:fa:15:9d:39:b2:b2:7a:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=b04d8dc6a6e8f687977538792c22307497169ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:63:4d:11:d8:5c:dc:bc:17:2c:db:d7:07:
                    ae:07:15:5a:da:40:2e:35:f9:a1:61:08:87:87:0f:
                    4d:5f:3a:ce:78:7f:45:e7:24:b2:d5:be:e4:11:c6:
                    1f:79:29:59:e0:35:fc:48:7f:b2:33:24:82:06:8b:
                    b6:fc:e7:f6:7f:cc:4c:0d:95:7b:97:c6:02:1d:16:
                    17:d7:44:f7:92:2d:a7:43:76:f4:18:1b:11:d4:28:
                    77:a8:c6:88:7a:1a:e7:e1:f5:d7:9b:6d:62:04:9e:
                    d8:bf:64:60:02:83:46:3e:3e:76:ec:9a:f0:25:6f:
                    73:37:c9:bb:7b:bc:db:cb:af:67:b9:01:a5:97:81:
                    b6:de:dd:ea:34:13:8f:2a:04:16:8c:2a:2c:11:31:
                    1b:22:03:7c:e8:48:48:dd:e5:03:f8:4f:7d:9a:63:
                    70:92:7d:d0:c8:6f:86:03:93:dc:ca:02:ff:1d:59:
                    eb:94:92:82:ca:9f:9c:83:14:5a:2d:4c:f4:5f:b0:
                    65:c9:61:c0:66:53:84:81:8f:98:6e:1e:30:15:aa:
                    be:d9:8d:c1:4f:80:ca:de:5d:f5:82:f7:4c:c3:d6:
                    77:4f:17:b1:6d:cb:64:45:d1:7a:7d:54:56:64:9f:
                    17:0f:59:47:bb:2e:e8:0f:81:5c:9f:74:17:51:88:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:8D:C6:A6:E8:F6:87:97:75:38:79:2C:22:30:74:97:16:9E:C3
            X509v3 Authority Key Identifier:
                keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:17:2a:af:23:a8:7c:b3:84:8a:70:76:0a:db:33:5e:ad:
         4c:7a:a6:9b:12:fa:bb:6a:1b:04:a5:45:0f:4a:12:3e:da:97:
         aa:28:cb:24:2d:15:24:70:e7:a8:79:45:85:d6:81:42:7e:8f:
         a6:f1:15:13:dc:be:e6:4d:d4:16:53:0f:08:c5:91:52:a2:ce:
         94:b1:b0:d1:a7:3b:5e:8b:6a:72:4c:82:06:10:94:42:c1:86:
         d1:79:59:3d:4f:93:6a:4b:bb:de:2e:57:c9:ee:5a:67:27:f8:
         23:09:11:1c:d8:67:23:1b:20:dd:b0:5d:ec:ca:a6:d0:64:f6:
         ec:f4:51:28:dd:17:29:b4:80:66:55:bf:98:fd:e6:c7:16:4c:
         77:7a:7a:0a:b3:3a:10:12:a1:b5:75:09:2d:a4:7a:38:05:d8:
         08:61:de:a6:76:bb:8d:a0:36:41:46:48:13:9e:b7:6e:47:60:
         fb:8e:3c:4e:ff:43:db:a5:d2:96:1f:7a:95:df:bc:cf:f6:90:
         09:ec:c0:fc:eb:71:b8:06:d3:5c:3b:f3:d2:e5:e4:b7:1c:ec:
         8b:bc:a6:8d:3e:9e:00:59:08:7d:07:f4:75:5d:ca:7a:59:35:
         61:86:2c:fe:e8:0b:8d:e9:66:1c:9b:77:6e:8d:d3:79:19:9a:
         f6:90:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----