Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File:                     z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier:          YFwaxbpbMYTU9D0RAEYE5CU9WULBYqNVyvbmlMTZqdY=
Subject key identifier:   54:93:65:1B:2D:B3:1A:99:F3:9A:2A:14:8E:6F:B6:F2:C6:84:F5:81
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer:       /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial:       01962F066FA9E058BE0297B6CBCE019D0915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: GkWGkWGiJCr4vjLSg6lY9MKf7uOlUZ2+0l1X1xzAvMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:a9:e0:58:be:02:97:b6:cb:ce:01:9d:09:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=5493651b2db31a99f39a2a148e6fb6f2c684f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:90:6e:72:7f:cb:13:e2:d8:d6:d1:35:58:
                    fc:d0:71:f2:02:a2:cd:15:ad:9e:37:bf:21:6c:43:
                    1d:d8:ba:b5:2f:1e:25:bf:1b:67:b3:e1:fc:58:83:
                    83:cb:76:76:35:4e:31:be:a0:b8:26:5e:6a:82:61:
                    99:3a:e6:fa:49:f8:8c:a6:99:88:db:2c:a2:b2:50:
                    4f:0f:e9:c9:d4:fb:b1:40:2a:20:7c:4a:31:1a:ce:
                    0d:48:88:a2:ec:2a:c1:fe:c1:89:5f:5c:df:25:03:
                    39:59:d6:09:02:10:22:e6:18:43:41:89:36:ea:d3:
                    43:dc:0f:f3:86:0f:fd:bd:27:83:82:97:66:f9:6a:
                    f2:7a:f7:37:a9:ce:71:cc:6e:41:1c:19:39:f8:5c:
                    d4:cd:27:35:4b:1b:b5:56:b1:43:71:df:8f:43:81:
                    e9:cd:3c:45:ea:97:18:27:de:f9:35:89:c1:72:6f:
                    ff:67:17:bb:45:86:dc:3c:6f:2a:90:3b:58:63:54:
                    57:33:69:da:53:31:f3:f7:cb:2a:44:7d:87:4d:7e:
                    b6:be:d4:11:a0:e7:74:bd:78:ce:77:7b:ea:bb:9e:
                    2d:6c:2a:1c:0b:b7:03:ac:2d:89:99:03:91:98:2b:
                    f8:aa:36:69:01:dc:d1:1e:2b:a9:30:b5:d7:d6:03:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:93:65:1B:2D:B3:1A:99:F3:9A:2A:14:8E:6F:B6:F2:C6:84:F5:81
            X509v3 Authority Key Identifier:
                keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:5e:88:a9:58:88:d9:fa:8a:80:c7:e7:e5:3d:a3:1a:a9:
         8d:09:12:a4:d7:ab:7b:09:68:20:79:8b:42:84:80:66:57:83:
         21:b5:ad:61:c2:fa:14:e6:f2:0a:bb:66:4c:1a:4c:10:9b:2e:
         04:ba:01:e9:3f:b5:68:7c:67:2b:49:9f:4e:e3:98:54:56:d5:
         66:86:04:d1:01:52:ee:73:b1:39:91:5d:32:77:b4:6f:f6:e5:
         13:0d:56:60:a8:32:ff:77:09:e7:f8:65:f3:4a:ed:04:24:26:
         fa:6a:19:4f:42:16:65:5c:8e:80:76:c6:14:66:86:ae:ed:e7:
         be:a1:00:72:83:9a:94:94:8c:cf:ca:ab:8a:e3:ec:0d:b9:67:
         45:03:16:d7:73:8a:ea:9d:74:6a:fb:66:ab:2a:c6:10:c3:b7:
         42:a9:72:e6:79:86:79:d5:1e:7f:9b:83:56:7f:ba:ad:54:99:
         55:cb:54:6f:ff:cb:ca:d7:23:97:ff:a9:dc:45:9e:e5:51:73:
         7f:1f:55:83:6d:74:9e:4a:b1:79:52:ef:a9:11:f6:38:3c:22:
         07:77:8d:9d:58:36:a4:49:00:6a:10:6a:b5:15:eb:8c:d2:c5:
         4f:b9:69:c0:54:39:93:03:71:2a:cd:9a:19:ec:94:88:73:c7:
         3a:ec:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----