Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File:                     ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier:          8/QNf4pH+AO56Y8FkGcL7Z9x6tAV9AvRaFKd0WmczOA=
Subject key identifier:   F1:69:8B:D3:86:72:BF:43:9F:CE:38:FF:37:07:63:25:2C:43:D0:A2
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer:       /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial:       01962DF429CEFA0160EE2FC1570B25241D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: dXyUflXTZcQ4K01eyX9NfPlvgqbemFrpUaYfmwx2bZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:29:ce:fa:01:60:ee:2f:c1:57:0b:25:24:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=f1698bd38672bf439fce38ff370763252c43d0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:db:45:dc:ce:4d:f0:b5:62:c5:93:cb:45:
                    f2:db:04:d6:13:d5:c2:42:f4:52:aa:55:33:a3:58:
                    45:27:f4:d7:1f:75:8e:fc:f9:47:68:f2:41:96:d7:
                    04:45:44:9e:fa:4a:c7:f9:89:1b:f5:b3:e8:88:46:
                    e1:72:35:e6:ca:87:50:88:b6:6b:6e:bf:5d:85:5a:
                    f3:9f:11:8b:9d:8f:aa:0d:c8:0c:d0:d1:e3:8f:7e:
                    f5:07:1e:cb:2f:8e:e6:2a:87:9a:56:4b:4c:e1:67:
                    98:fe:40:14:52:20:ba:57:c7:ca:d4:42:3a:a0:63:
                    b7:05:ad:d2:91:9d:1f:c1:f8:01:56:ce:27:b9:01:
                    e7:ed:95:35:5e:55:f3:dc:d3:3a:13:c9:2a:be:fa:
                    49:10:7c:23:3a:dd:3c:cc:03:63:ee:33:be:5f:e9:
                    62:3e:fd:38:c9:02:43:97:ad:a2:f1:fd:03:21:55:
                    12:f9:50:35:6d:90:b1:2a:ec:30:2c:1f:f0:48:25:
                    c6:48:a8:b7:21:ba:ef:33:f5:a3:5d:f0:0e:bc:01:
                    b2:10:bb:37:2d:e7:90:91:2a:25:7f:9f:4c:15:4f:
                    39:e5:5b:78:9a:f1:83:70:b1:bd:17:be:aa:c5:01:
                    2c:7c:14:d0:59:9f:2d:6d:77:16:94:ac:22:c2:12:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:8B:D3:86:72:BF:43:9F:CE:38:FF:37:07:63:25:2C:43:D0:A2
            X509v3 Authority Key Identifier:
                keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:8e:0d:c6:09:94:2c:87:b8:e2:c8:2b:ca:f4:aa:78:12:
         e9:ac:cf:aa:45:3b:32:ff:53:8a:a1:1f:af:f3:bc:20:fc:6b:
         38:09:cf:c1:c7:86:29:ea:09:23:f1:2e:3d:4a:1e:4f:04:e4:
         ce:94:5a:42:20:7e:df:39:29:17:1a:d7:98:1d:11:3b:b2:aa:
         86:07:ae:32:e7:5d:ac:30:78:f1:2a:ad:69:ee:e7:d7:39:cc:
         ef:bd:b1:4b:1e:d4:3d:e9:cf:36:f3:4c:d2:ac:db:c3:49:ef:
         25:32:34:aa:e8:3d:63:68:2e:2c:49:4f:b8:2a:63:5c:1f:b8:
         36:23:06:8b:6d:4b:df:18:c5:e9:e6:f7:40:09:58:3c:cf:df:
         02:0f:b3:0f:16:91:5f:a6:7f:07:9b:64:91:1f:a3:af:c2:3b:
         30:c6:e8:4b:a8:f3:34:7b:c1:75:13:7e:1b:c3:aa:d5:a4:ee:
         88:3a:d9:3a:4d:50:ea:7c:6e:40:6c:14:fd:72:a9:4d:77:11:
         93:ad:85:36:4a:b4:f7:d8:d8:c2:f7:a0:27:f3:87:4f:90:99:
         e7:d0:66:d8:6b:44:23:81:fe:2d:f3:45:a6:40:a9:05:1d:c3:
         83:e6:fd:87:b2:d3:af:0b:6d:c1:5d:5d:82:33:b7:73:50:44:
         8e:04:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----