Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File:                     zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier:          rdrvFL+PrTYVJrwYKy4mUPEBdKwZ2OR89UyLxpwn9XU=
Subject key identifier:   9D:A0:9F:90:E3:67:05:B4:8B:1C:D5:FF:FA:90:AD:B3:C4:E0:29:BB
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer:       /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial:       01962E9864589CAB26541FEAB8170E0A70DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number:          0C83
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 490sOyrjeE3j/7fHUA6kqsUlmfLvQTNFXQY0TujRv2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:58:9c:ab:26:54:1f:ea:b8:17:0e:0a:70:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=9da09f90e36705b48b1cd5fffa90adb3c4e029bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:3a:f3:26:06:9b:27:98:5f:0d:6c:07:1c:
                    73:22:77:74:d5:14:6a:aa:2a:c7:53:f8:74:cc:a0:
                    f1:01:49:9e:0d:83:ae:bb:f8:26:6c:5e:54:14:07:
                    7d:6d:27:3b:50:58:3a:f7:bf:f4:a0:22:b2:43:34:
                    03:2f:94:cc:59:78:8b:64:7e:e3:29:84:63:b4:e3:
                    64:3d:12:06:d4:38:c5:73:90:36:d8:11:69:09:8e:
                    0f:27:26:40:48:43:da:eb:bb:60:e3:70:1b:13:ea:
                    e7:10:85:f7:76:13:ed:64:fc:d4:8f:8e:a0:33:75:
                    c7:bb:6d:59:54:63:a9:13:c9:ce:9e:58:8b:40:15:
                    69:ad:e8:88:21:ab:6b:0d:6b:91:3b:dc:ef:b8:67:
                    1d:31:b2:d8:d2:f9:d9:1d:cb:cf:6b:c9:b2:42:94:
                    5e:f8:d1:9d:10:30:6e:d9:a2:3e:c2:49:f3:31:72:
                    35:ff:de:7e:82:10:a5:e3:8b:7f:e4:b8:3e:db:37:
                    96:ff:d2:88:f2:1b:1b:60:cc:72:1e:c1:27:82:13:
                    1f:5a:83:7a:b1:26:a7:14:10:dd:9a:68:00:02:9f:
                    15:6e:98:89:8d:62:dc:85:db:17:4a:27:3d:ab:3d:
                    27:fc:dc:04:5b:ee:8e:51:10:24:6b:50:99:fa:88:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A0:9F:90:E3:67:05:B4:8B:1C:D5:FF:FA:90:AD:B3:C4:E0:29:BB
            X509v3 Authority Key Identifier:
                keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:79:76:41:6c:9d:59:b8:aa:f9:cc:38:76:5b:5d:77:a4:34:
         b2:6e:fb:fa:ac:55:fc:13:96:42:71:a3:6e:12:46:4d:8b:16:
         01:a4:b4:5c:a8:8c:e6:58:f2:94:03:cb:1c:a0:2a:f5:e2:3d:
         0c:80:f6:c8:7b:bd:4e:59:03:81:83:d6:e6:83:da:50:e5:41:
         02:f7:d4:0c:31:cf:46:7f:a4:2d:a2:36:1b:eb:0f:d5:5a:63:
         8d:15:20:60:69:43:53:c7:63:22:83:a5:5b:16:f5:83:98:67:
         f5:89:d5:c5:db:a7:a2:2f:a2:0d:41:6c:a1:62:5c:37:d3:fc:
         17:6a:e6:d5:db:cd:50:b7:ae:47:d5:b5:98:07:70:7d:4c:2d:
         ff:43:e3:70:94:56:8b:d2:00:34:94:ae:61:9d:67:c8:77:a4:
         42:ee:e5:02:46:f6:ef:f8:d1:ba:8f:22:aa:95:60:22:0b:7a:
         22:99:0c:d1:05:06:5c:99:1b:ff:74:4f:63:e8:ac:1e:f7:9b:
         16:ab:d7:c1:86:6d:1f:af:e4:26:5a:52:3d:75:82:13:11:e4:
         58:3e:77:16:90:a5:dd:c6:ed:4c:3d:2a:9c:2f:a3:85:18:eb:
         1f:8e:63:0f:b9:c3:0a:da:1b:10:e3:65:ee:4b:4c:2c:3b:67:
         ce:a2:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----