Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File:                     z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier:          LzSUzR7tn3MQvS0z7XppOd/JxbXQqAWA8xOp2wd9YI4=
Subject key identifier:   F2:20:97:42:69:C5:CB:22:1D:0E:3C:F2:6B:D1:A9:D8:FA:4A:2C:51
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer:       /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial:       01962E99524B47FF228717CD7BD790619C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: rBN0v5Zfy8pHVXIQLmXGEUPUEQtRw/WqSX/b2csxtwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:52:4b:47:ff:22:87:17:cd:7b:d7:90:61:9c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=f220974269c5cb221d0e3cf26bd1a9d8fa4a2c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:af:79:f3:54:73:35:43:59:8b:22:01:7d:
                    d0:aa:05:6a:e5:42:d7:5c:33:52:be:4b:c4:d8:f2:
                    73:9a:0a:5e:d3:24:92:1c:50:40:44:5e:4a:aa:20:
                    e6:8e:07:d8:c1:28:57:de:12:40:9b:3a:0c:76:00:
                    db:12:2f:47:64:20:de:75:6b:a5:00:ca:23:e4:6a:
                    cd:54:de:48:24:ef:14:c5:da:ba:de:13:90:f2:3b:
                    4f:cc:1b:66:fb:33:a2:c9:bb:2a:f2:43:d2:47:af:
                    c8:94:a3:b2:80:88:6f:b4:57:31:d6:06:1c:9d:c3:
                    8d:34:9c:bf:b4:d0:90:03:44:31:d1:08:b0:1c:9c:
                    ad:6f:07:fc:9c:06:59:fa:d2:cc:3a:92:15:f8:98:
                    2c:30:c4:57:66:ca:94:26:16:79:50:7e:75:21:c5:
                    d1:2a:51:96:91:64:a0:1a:84:1d:97:41:40:a3:4d:
                    50:2e:71:c3:29:e2:a6:4d:b6:7a:1e:42:61:d2:b8:
                    d0:2e:a6:1f:16:63:d1:cb:89:1f:d0:22:6b:8b:f8:
                    3a:59:7f:8e:47:83:96:49:3b:8f:3e:01:f7:68:d9:
                    31:83:11:e2:83:7c:22:92:c2:9b:57:8a:02:bb:74:
                    ac:bf:bb:14:57:d8:5f:fb:ef:4d:9b:33:dd:28:ff:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:20:97:42:69:C5:CB:22:1D:0E:3C:F2:6B:D1:A9:D8:FA:4A:2C:51
            X509v3 Authority Key Identifier:
                keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:bf:89:cd:12:d5:8b:9f:a5:92:24:4a:ce:d6:90:a1:10:
         0f:47:a8:38:31:a1:b8:bb:13:99:b7:ae:b1:ea:7f:8f:c1:3d:
         d4:a0:b5:f7:29:c2:ab:36:0f:bf:32:59:ee:19:8d:cb:d1:c9:
         5d:f2:f5:ca:87:c7:84:4e:7b:f7:72:b6:d9:56:ab:3d:03:df:
         1d:1b:5b:fc:3f:3b:9f:3d:87:12:18:c2:4f:e9:7a:85:f8:08:
         0e:b4:99:77:50:64:42:25:eb:e7:cb:a8:88:08:0c:f7:ec:60:
         f8:65:65:c6:e2:bb:5f:aa:6e:a7:77:f7:c8:69:bd:68:95:e4:
         88:7f:08:13:a2:ff:86:20:1a:3a:85:19:ad:fb:b7:0e:a5:5e:
         fa:05:90:ca:ee:ea:88:95:05:5e:a6:e3:b8:ec:1c:04:92:a9:
         ce:a7:40:b1:49:26:0a:9c:c0:1e:72:20:d6:ca:d3:48:01:13:
         31:82:f1:03:9a:5f:da:8a:93:c1:04:85:75:4e:0a:73:9c:b8:
         23:4d:35:8c:c9:7b:6e:f3:5d:8e:ad:83:7e:72:cd:80:a0:2a:
         7d:27:bf:a7:e5:c1:13:1d:b7:14:82:90:15:0a:16:66:e8:72:
         1d:d8:88:f8:a6:cc:c1:8f:78:06:d5:58:f7:74:2c:d8:a3:a3:
         6d:78:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----