Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File:                     ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier:          fLX6RVrZ07otcXtQSPbem21ucLPXEkgoBEXqVPUQvYI=
Subject key identifier:   C0:79:D6:50:0D:28:15:B9:3C:D3:3D:11:3D:32:42:6E:86:3F:F2:28
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer:       /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial:       01962F3DBF007B65C59F80E521063430BD9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number:          1093
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: zeieyjWhtPx/ez+avoDy88xjM6WsOn92UaVdXRftCw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bf:00:7b:65:c5:9f:80:e5:21:06:34:30:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=c079d6500d2815b93cd33d113d32426e863ff228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:e7:e1:54:d5:25:e5:18:26:2c:d4:e5:8e:
                    5d:a1:04:9f:df:5d:25:b0:35:a1:fb:b8:c3:ca:9f:
                    2c:ad:02:ec:59:aa:9d:b0:cb:0d:41:2d:a4:b2:6a:
                    db:ed:18:17:fa:aa:84:23:be:9e:45:46:f9:ce:98:
                    1d:fb:81:76:7d:92:f2:d2:a8:8f:f0:92:5b:b1:46:
                    43:71:07:61:cd:05:bc:f4:7c:41:62:4c:62:61:f4:
                    1e:15:b4:0f:c8:62:8f:4f:d5:be:50:04:b4:c4:0e:
                    ae:1c:cf:12:f2:10:7e:5e:e6:11:bd:89:37:cc:10:
                    8a:a8:60:42:d5:21:22:d3:60:e7:2c:32:88:bd:12:
                    b0:4e:51:e4:88:08:29:5f:45:f7:50:8a:06:a6:07:
                    8a:8b:26:ee:f9:bd:d3:fd:b2:79:30:27:fb:de:81:
                    06:74:9f:6c:25:be:04:72:8d:c5:18:85:d1:f7:f2:
                    88:92:3b:d0:cc:01:6d:1b:77:a4:f1:c8:78:9b:36:
                    79:ab:84:ec:33:62:f8:de:03:f4:39:96:60:c0:de:
                    58:f0:8b:74:79:2e:c3:ec:8a:76:cd:9a:67:4c:7e:
                    d4:15:03:14:e1:f8:ca:60:22:1a:eb:1a:72:25:eb:
                    b8:a1:ca:99:b9:c7:8d:32:f1:34:36:ee:00:b1:68:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:D6:50:0D:28:15:B9:3C:D3:3D:11:3D:32:42:6E:86:3F:F2:28
            X509v3 Authority Key Identifier:
                keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:77:01:e8:77:9d:e0:3a:67:de:fb:a4:9f:be:4b:ce:03:
         d6:af:1c:27:fb:b2:61:b1:aa:74:cc:55:10:ba:34:7d:e3:e5:
         6a:65:34:49:e5:15:35:85:88:b0:4d:4f:78:62:75:10:38:8d:
         20:97:b3:52:1d:1d:73:bd:0c:b6:cb:cd:80:05:98:16:2b:67:
         84:d1:da:69:55:0a:4d:47:34:4a:31:c5:6c:4b:c1:0d:e6:af:
         20:b2:4a:85:b4:19:00:e0:2a:9c:d2:76:99:6a:39:c9:83:a0:
         6d:61:ad:b8:c6:d7:83:8c:90:fa:87:c4:a5:ec:c5:5e:c1:08:
         6e:ec:d7:0a:af:05:33:4c:55:7a:5f:f2:ed:1d:de:23:c1:03:
         24:30:68:54:d3:12:bc:32:e2:34:a7:67:72:29:27:05:ca:82:
         2d:8d:63:8f:21:b6:c2:d1:f1:70:a9:9c:63:0c:2f:3d:fa:9d:
         26:7b:08:ac:f6:07:bf:bc:de:34:18:42:3a:09:93:ed:cd:14:
         47:47:ec:99:f6:11:5d:65:f8:31:e6:f1:9f:7b:60:c7:18:01:
         3a:3f:51:f6:00:54:17:93:23:e4:dd:ef:5a:c6:e2:b2:0b:a3:
         9e:11:52:4a:a0:01:09:09:ad:78:3e:bd:97:a4:61:60:9f:55:
         1f:57:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----