Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier:          5jyo+D3yqUmtiF6W7o2+ZeFmDcwwwLUZkjddSjTGlR0=
Subject key identifier:   83:A9:47:C2:22:9A:2D:F0:D0:8E:90:2F:10:CC:43:7E:4D:8A:0B:39
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer:       /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial:       01962DF426278D7D8B1EF6ED647D9C0A8582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number:          0F9C
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: byp/z/bDpDHuj1XRQzUzzjllkxsJaYyBzAAicYhFJxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:27:8d:7d:8b:1e:f6:ed:64:7d:9c:0a:85:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=83a947c2229a2df0d08e902f10cc437e4d8a0b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:a2:a8:32:eb:ee:da:9c:26:8f:8a:5b:c3:
                    5d:e1:1c:55:c7:a8:f0:0f:2b:5e:85:9d:d8:05:c9:
                    41:4c:87:86:7d:ce:8f:70:1d:a3:73:0f:0c:0e:ce:
                    96:32:21:a8:6c:4a:a3:dc:a3:0e:37:7e:9a:a7:ef:
                    a3:13:df:c5:48:99:8f:1a:fc:dd:c7:9b:36:ea:86:
                    23:1c:38:50:c7:18:23:fc:22:1f:35:9d:9a:11:26:
                    82:34:4f:91:0c:fd:10:47:ed:6e:a4:46:da:5b:9f:
                    52:b1:19:ce:09:5d:0c:7b:52:b9:e7:f0:bc:04:ba:
                    96:50:5c:3c:c4:94:d1:94:ba:ee:f7:7b:a6:ca:fa:
                    b5:9d:36:a0:8d:71:af:c0:1d:94:b2:ed:3a:cd:49:
                    66:c0:e2:03:ab:11:b4:f4:8a:ae:fe:8d:f3:2b:c6:
                    f1:3b:aa:56:b5:25:41:10:0d:b4:a5:cb:a7:d2:ad:
                    9f:30:f2:29:f6:ab:95:fd:ae:16:79:87:a5:fc:2a:
                    54:f7:d2:ce:c1:c1:e5:4a:58:20:bb:98:a9:62:c6:
                    21:de:33:37:5c:c9:5f:29:b3:1e:dd:91:88:b9:a2:
                    1c:1a:5f:38:d9:b8:b8:8d:ae:b5:d6:77:26:03:10:
                    5f:dc:8a:06:bb:52:e0:fe:f8:b7:48:50:5d:74:e9:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:47:C2:22:9A:2D:F0:D0:8E:90:2F:10:CC:43:7E:4D:8A:0B:39
            X509v3 Authority Key Identifier:
                keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:1a:ef:a2:c3:35:05:96:19:2b:c9:c3:db:7c:9d:69:b6:
         b3:9e:63:7f:04:58:c2:f0:60:83:13:fe:ef:3a:e9:2c:4b:d2:
         e9:1c:3d:67:1c:9b:9e:84:32:8b:86:1c:0e:82:e7:62:c9:a3:
         6c:16:e2:f6:89:88:73:2c:09:c6:30:b7:f3:dd:ce:69:ff:39:
         a3:33:66:82:4c:63:27:00:4e:12:48:f3:e8:6c:56:0c:6e:95:
         54:6a:c8:7e:b7:d7:66:bc:4d:f2:ac:8a:07:e2:8d:70:01:ed:
         69:07:5c:3e:9f:4f:4e:90:76:58:ae:cb:26:5e:11:86:d3:88:
         7e:21:74:13:d3:48:01:70:c7:ea:cb:dd:be:8c:c2:6e:52:97:
         4c:50:e4:fc:ae:19:b0:4b:4e:9a:b1:31:4f:81:2c:0d:48:4f:
         05:26:35:13:56:cd:2b:0b:4a:b5:5a:7b:93:c9:26:c4:a4:ad:
         cf:9b:60:57:4b:ed:fe:80:37:85:40:93:71:a6:bb:6e:b9:1b:
         6d:35:28:05:bc:4c:29:c6:0e:a4:5d:9d:c9:6a:43:41:c4:72:
         a0:e1:dd:28:26:ae:02:72:98:b5:47:3e:b3:52:26:99:11:55:
         71:02:28:f0:d4:48:d9:f8:1a:74:13:d3:e4:0e:c1:6a:32:50:
         e6:59:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----