Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File:                     MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier:          TGLE0QwXmJlw7xlJTqVLh+oGaOu4ekVbxHmTotXeCpk=
Subject key identifier:   59:EF:E0:9F:E4:AE:EC:BC:69:70:A4:F4:6F:5B:CB:91:5E:74:43:DE
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer:       /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial:       01962F3D92F7D7BC4863293841A5B96BDA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: Ww7P++aXwUkXbT4x4BjfS+hxAGcHWHMKlGl05N6i0CA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:f7:d7:bc:48:63:29:38:41:a5:b9:6b:da:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=59efe09fe4aeecbc6970a4f46f5bcb915e7443de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:6e:74:e7:b9:b1:83:84:2a:f7:06:fc:82:
                    3e:3d:af:b5:31:83:f9:21:85:b0:41:fe:34:4f:3c:
                    54:7d:1c:21:a4:a5:82:96:2d:f8:b9:50:05:66:5e:
                    dc:05:a8:f0:d1:74:e4:53:d4:f2:18:08:8e:91:a9:
                    03:ac:39:1c:84:07:6f:28:77:61:f5:9f:e7:e9:f0:
                    28:c9:b6:13:3c:53:76:b8:44:83:fe:f6:24:58:c5:
                    cc:cd:0d:3d:4d:0f:3b:f5:c2:83:07:17:d6:a3:9e:
                    1a:7a:e7:de:d6:ff:a7:43:6f:d0:04:4c:1b:32:c4:
                    b8:dd:ae:9c:21:4b:8b:1b:20:d9:a1:f6:2a:24:a4:
                    d8:d0:f3:83:ab:e3:e2:04:be:9e:89:a7:0d:92:38:
                    66:46:12:2e:5c:b8:36:1d:e9:34:3b:2e:57:56:00:
                    c1:00:68:74:83:ed:87:36:a9:a5:5e:2a:11:ad:56:
                    9f:32:63:ec:73:15:d8:9c:9a:94:0a:fb:e7:4c:35:
                    56:cd:4c:d0:0d:b7:32:93:00:b9:23:42:65:28:bd:
                    84:fe:b7:00:e6:4b:b7:8e:34:d9:6e:56:f8:2e:8a:
                    04:74:db:07:af:61:47:12:91:2f:0b:46:79:93:00:
                    f7:ed:db:d3:6a:6e:9a:70:f2:cb:bf:96:9f:0f:7a:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:E0:9F:E4:AE:EC:BC:69:70:A4:F4:6F:5B:CB:91:5E:74:43:DE
            X509v3 Authority Key Identifier:
                keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:f2:c1:3a:26:68:91:52:bc:77:12:52:4f:26:e3:7e:c9:
         be:0d:ad:53:a0:1f:45:01:79:47:b0:2b:43:b1:1e:b3:b1:fd:
         9f:c5:8f:24:65:b8:19:61:f7:e9:12:94:cf:5e:3d:6d:23:6f:
         d3:42:48:6a:bd:5d:e1:8d:6f:ce:ec:09:80:84:62:f7:05:75:
         e7:75:84:c8:b5:ed:2e:e6:5a:e5:1f:27:ff:33:6e:b0:a4:35:
         39:30:d6:ee:31:ba:f5:f1:75:df:4b:4d:08:13:75:85:a7:60:
         96:1c:e6:da:e6:e1:32:ad:1b:ff:62:b5:57:1c:18:83:8c:d0:
         aa:0e:43:a2:e0:84:cf:d0:d3:46:a1:0b:f4:c2:29:16:dd:17:
         21:87:13:5a:72:7c:2b:a5:db:04:b1:8e:3e:a3:c8:3e:4a:c1:
         58:9a:37:86:6f:9a:f0:b5:49:9b:1f:b4:28:9b:2a:59:b9:e9:
         14:0b:2e:bb:2f:57:dc:03:0a:86:bd:54:a8:9e:2b:0a:74:cd:
         c0:c1:c0:da:89:77:fc:41:1b:8f:0d:a5:ed:fb:29:ca:6d:12:
         5f:2c:9c:ff:2f:98:8f:f7:ca:34:8e:c1:92:eb:0a:ef:ab:61:
         11:72:20:ce:1b:bd:e8:dc:5f:4a:3e:db:dd:41:8d:4a:7a:c0:
         94:b4:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----