Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File:                     z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier:          hHLb8E7PV7+wg7C7i7KLR68VA8CHw3+f2uxIQ+cmeYM=
Subject key identifier:   9E:40:A0:AB:E0:3E:40:5E:64:12:6C:28:26:7D:79:6A:CC:8E:28:BB
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer:       /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial:       01962E987E83D1E592491997920B2C9ADDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: s8nf48dHEdL7tBRTq9/0migr6x/WHgI68lwAzf7nt/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:83:d1:e5:92:49:19:97:92:0b:2c:9a:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=9e40a0abe03e405e64126c28267d796acc8e28bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:84:10:f2:13:45:2f:f5:dc:5c:be:d4:7c:
                    09:29:5f:73:06:9b:f1:24:15:b9:da:a6:76:77:85:
                    44:7c:d4:48:0f:30:e4:c9:32:20:22:86:3a:92:4d:
                    04:3f:4f:8a:86:ad:00:92:6b:18:14:9e:f9:82:96:
                    88:87:30:fe:06:cc:9c:85:97:dc:13:d5:ac:bc:8c:
                    54:94:f3:9b:68:5e:90:28:9f:c0:63:6a:9c:48:70:
                    7f:1b:39:9c:7f:44:4d:77:90:10:b3:0b:79:20:d9:
                    6f:93:6f:f7:8c:cf:34:5c:bb:a4:97:37:be:b3:0d:
                    85:37:18:ce:30:4d:0e:92:c8:7b:89:f3:ff:91:7a:
                    f8:5d:42:f8:21:02:d5:25:c3:32:65:4d:fc:45:67:
                    db:0e:88:f7:4e:0a:a3:17:ac:69:62:6f:5c:f8:b5:
                    0a:70:7a:af:1d:ac:bf:c8:90:d6:a9:2a:2d:99:3f:
                    1c:5e:77:6b:b7:51:21:91:be:cc:4a:a1:9c:4d:9d:
                    90:21:50:dc:5d:0c:9c:92:c8:7b:f5:d2:27:50:dd:
                    3c:d1:cd:8e:df:20:73:12:24:5c:f4:53:ad:4a:2d:
                    f5:f4:d6:7d:4e:b2:2c:9b:d3:0c:56:bb:a2:a2:60:
                    3c:52:74:78:d7:e3:fc:7f:e7:49:a5:7a:6c:c0:70:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:40:A0:AB:E0:3E:40:5E:64:12:6C:28:26:7D:79:6A:CC:8E:28:BB
            X509v3 Authority Key Identifier:
                keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:ab:b0:09:73:02:38:53:57:23:32:18:92:5e:6d:20:95:
         6a:40:b8:ea:9e:a2:3d:df:07:a7:e4:9c:ed:85:b8:0b:1f:dd:
         32:bf:33:95:d9:4b:d3:c1:4e:81:0f:8d:5c:cd:9a:d0:37:a4:
         b6:21:8c:5e:2a:da:ba:be:75:5a:97:2e:20:fd:bb:3f:b7:5d:
         1d:fa:32:58:a7:1f:b8:de:ae:b8:f3:9e:a5:56:83:15:08:08:
         f2:df:bd:30:a3:ed:09:e4:53:7b:da:08:cb:b4:4a:b6:c4:72:
         ca:2c:a3:cb:54:98:8e:1c:83:74:f9:8a:e4:a5:a6:96:0b:46:
         ea:43:d0:03:ef:0e:95:8c:9a:c0:d5:5a:a9:0c:8f:39:55:7e:
         08:ce:d0:9a:82:1d:7e:2e:b9:02:f3:dc:02:29:f0:18:8f:4e:
         4f:77:d8:dc:57:88:28:db:68:80:c2:5f:1b:1c:d7:9e:16:81:
         a3:be:ff:2a:02:26:b3:b7:a3:66:31:f7:29:61:f9:fb:98:14:
         6d:3d:8c:c9:a9:c8:cf:3d:1f:f4:70:05:cf:0d:3d:d2:4a:9c:
         ba:b0:27:33:09:24:d4:70:e4:63:bd:5a:42:58:0b:c7:c5:89:
         11:0e:ef:9c:23:33:12:02:48:c2:f9:39:00:81:f2:89:f6:82:
         a9:a9:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----