Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File:                     z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier:          j8k7KwHrz2yN+Qq6UDgb2Or1zNaxYK4RBh1E0zz5f2o=
Subject key identifier:   D2:01:8E:82:8E:68:3F:7F:09:EF:F3:B0:5F:0C:14:1E:82:62:59:AB
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer:       /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial:       01962DF3B75DF5DAD30BAE6CCB90B939403E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: GAe9bVE8hFsp/CiA4SyiYgcEETZJC5udcGAgkr6Uw/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b7:5d:f5:da:d3:0b:ae:6c:cb:90:b9:39:40:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=d2018e828e683f7f09eff3b05f0c141e826259ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:22:86:ba:08:53:0d:be:48:99:45:8d:88:
                    1a:88:5e:2f:cd:ca:f3:16:a3:ed:a3:eb:28:91:67:
                    90:44:57:8f:3d:18:6a:8d:0e:e6:31:8e:30:bb:1e:
                    da:3b:22:cb:03:19:a6:ba:33:ef:e6:a4:3e:34:4f:
                    47:61:b6:f2:13:bd:02:c3:a0:42:54:bc:2c:e3:7d:
                    24:39:5b:44:a1:26:ad:bd:07:dc:c2:61:b8:95:10:
                    a2:76:ab:a1:80:d8:53:74:cb:bd:3c:1f:5a:27:a0:
                    bb:d8:bc:fa:ea:d4:56:6a:af:90:26:b0:af:64:ea:
                    d3:cb:62:c5:2a:00:90:25:62:e0:e7:2b:65:72:55:
                    7d:d4:ab:22:fc:9c:f2:81:00:f1:5a:77:a1:a7:c3:
                    ff:98:2f:8d:61:17:33:b3:8a:8d:eb:b6:08:62:87:
                    61:2e:5f:67:7b:7b:8f:54:9b:37:12:58:83:51:0f:
                    58:8b:f3:40:96:a3:be:ec:57:06:17:96:73:54:51:
                    43:6e:f3:30:ec:58:e8:8c:b4:61:dc:72:c8:0a:e3:
                    91:bc:f1:15:d2:6b:c0:e6:50:6d:f9:c5:13:e6:48:
                    70:ac:93:78:a2:85:f5:9a:9e:d6:5b:52:45:63:46:
                    61:24:12:7e:1b:f3:da:ce:9d:45:62:17:62:4f:ab:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:8E:82:8E:68:3F:7F:09:EF:F3:B0:5F:0C:14:1E:82:62:59:AB
            X509v3 Authority Key Identifier:
                keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:89:53:8a:b0:00:e0:59:ec:54:1e:f3:03:e4:4b:9d:13:
         c9:e3:cb:24:04:47:98:78:aa:a0:4a:c5:db:29:ad:25:31:9d:
         82:12:19:98:ce:98:87:24:d9:c9:39:2f:3d:ae:bd:8e:1b:9b:
         09:8a:c6:b5:63:94:08:8a:20:d8:32:a2:10:69:1d:bd:ac:29:
         92:55:5b:92:f6:0f:97:71:a5:42:f3:78:8b:9d:c2:ae:f9:f7:
         23:2f:f5:dd:0a:8b:dc:cf:8a:94:5c:20:ca:96:5d:35:97:92:
         a5:2c:56:3e:47:76:3c:1a:cc:c7:bd:57:85:aa:97:fa:80:42:
         91:b6:8e:43:98:a7:2c:73:62:b5:cb:fe:46:3f:90:2c:3a:99:
         ce:40:d6:29:99:4c:28:b8:2f:2b:29:46:c3:74:49:de:b1:54:
         af:d5:7f:72:5b:b0:dc:ef:08:24:4e:97:5d:58:6f:1e:cb:c3:
         40:21:9c:98:c5:60:95:c2:f0:fc:33:fc:c2:7e:d0:9f:ad:29:
         18:3c:55:30:f0:a8:5d:6b:49:13:9f:a2:3b:bd:44:d9:97:12:
         be:c6:56:22:61:64:72:7d:2c:f5:31:d2:e7:df:c5:e2:4e:fe:
         ca:47:ed:cc:13:36:da:ea:dc:41:5f:02:11:b8:66:e5:15:7d:
         7f:25:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----