Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File:                     z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier:          4UKd+VA6oR0pliRCFivWNuLhxEc3ZPkuUBL3bi/DWeI=
Subject key identifier:   54:3D:F8:8D:8A:5D:2B:03:57:D1:39:0D:5A:2C:EF:00:51:39:D1:C7
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer:       /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial:       01962F0697E81EEC58C773ADD8F39D971FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number:          0494
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: eyxcx/yuV9+14fdEfaG5jF2r5W8X/JbyL2pKNvJ0Ltk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:e8:1e:ec:58:c7:73:ad:d8:f3:9d:97:1f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=543df88d8a5d2b0357d1390d5a2cef005139d1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:e9:c4:28:64:3f:80:e2:ad:56:8b:11:b1:
                    8e:96:78:37:da:f5:88:46:4c:2d:c3:0a:d9:16:cc:
                    86:91:b4:6e:6e:d7:eb:2e:24:c6:d5:18:b9:8e:b5:
                    98:8d:c7:6d:ad:96:2b:f8:1b:68:10:83:dd:b1:b5:
                    1a:fd:72:d8:45:36:82:4f:d7:0b:c7:93:f1:27:29:
                    d8:45:25:85:20:cd:a2:94:46:b1:7b:93:ad:e3:2b:
                    cb:4e:1a:fa:bf:74:b7:13:2b:ea:12:fa:37:33:fd:
                    16:29:2b:9f:26:71:46:3e:ca:6e:1e:2f:d8:9b:39:
                    9c:59:dc:a2:37:b6:83:71:16:87:c2:b9:c2:e9:d3:
                    5a:fc:e3:9a:93:99:42:ab:2c:06:23:c8:7a:9c:42:
                    7e:c3:5f:de:e1:27:88:21:cb:01:bb:c8:fd:48:36:
                    d2:10:88:65:18:6e:48:c9:db:b3:9c:ee:82:41:49:
                    fb:63:c9:71:00:30:03:09:70:30:ea:70:9d:3a:6e:
                    ad:67:e9:f8:d3:ef:b1:e9:38:92:50:f5:b9:8e:65:
                    e0:ee:bc:ac:f5:7a:65:84:49:87:d1:21:d9:6d:c7:
                    19:81:c6:75:e7:51:c8:47:2d:ba:33:5f:26:ab:1c:
                    8c:c8:88:95:bc:1a:cb:10:ed:00:3e:8f:74:f7:45:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:F8:8D:8A:5D:2B:03:57:D1:39:0D:5A:2C:EF:00:51:39:D1:C7
            X509v3 Authority Key Identifier:
                keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:67:c1:7b:e4:6f:f4:53:8c:c3:3c:81:fe:27:aa:05:ff:85:
         ed:bc:04:2a:5d:95:69:64:95:91:d0:55:71:7f:e7:17:d5:c0:
         b6:16:d5:48:f3:c6:82:d7:52:b2:41:00:95:a9:54:39:52:fb:
         c8:28:9c:8c:ed:15:66:c4:77:69:9b:0e:51:9b:af:04:f0:a5:
         86:50:f7:cf:c4:0a:90:80:7e:bb:7f:29:9b:23:48:e4:51:18:
         e7:04:35:ad:66:0a:84:c6:11:fa:ff:88:a9:61:c0:c1:29:da:
         72:fb:5a:c6:c4:1a:4e:d4:f6:c8:76:66:f4:6d:6c:2f:73:ea:
         3a:9c:b4:45:22:cf:a7:1d:e0:ed:19:9b:c1:4a:1b:fe:7c:1d:
         20:3b:cd:09:e9:ae:97:f1:ca:58:cf:e5:26:48:28:a8:75:7e:
         12:19:36:b6:f1:1b:55:2c:ca:af:db:af:ad:88:99:eb:84:67:
         e9:51:16:24:f5:3b:1f:bf:5c:9c:0f:e7:9c:47:e3:89:b5:8c:
         df:de:aa:59:2d:ae:06:12:53:96:32:34:ac:ba:7c:53:60:58:
         32:10:14:30:2f:b6:74:59:57:be:94:38:b1:05:0b:93:d4:a7:
         1d:19:05:10:d9:13:2e:cd:01:4d:70:78:26:1a:cf:02:a3:e9:
         70:ea:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----