Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File:                     zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier:          8B56gtkWq0KT3obWB6MWf1f63qKqO0/gV6CWb+l1wZE=
Subject key identifier:   5F:85:C3:B3:47:60:62:AE:CF:06:2F:D7:71:3B:E1:94:69:78:FA:39
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer:       /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial:       01962F3D3B7F31E7626F4DB7E6010F2D6F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number:          7F
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: UilW1L81u5VYl+XTvly4RoI5suqMn6zEwdFHi2AXlYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:7f:31:e7:62:6f:4d:b7:e6:01:0f:2d:6f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=5f85c3b3476062aecf062fd7713be1946978fa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:fd:81:b5:9e:dd:83:58:db:e1:63:70:4f:
                    5b:78:ef:40:83:cc:12:4e:81:47:a8:c1:96:f5:bf:
                    17:9c:aa:b1:a1:e1:08:d3:79:68:de:99:cb:b4:87:
                    e8:f8:4f:e5:85:37:bd:2d:92:fd:29:ad:4d:6e:b8:
                    ae:7a:d9:aa:d2:a4:43:8e:61:32:60:fe:01:92:ad:
                    25:69:9b:da:8b:63:aa:46:be:44:6c:16:34:54:04:
                    3b:9f:29:75:0f:6b:24:29:bc:c6:63:36:87:50:5e:
                    9c:bf:3d:22:62:48:98:1a:f6:21:8d:f3:71:68:74:
                    cd:a9:cf:ee:b0:d3:09:3a:c3:41:f6:59:b0:70:8f:
                    e0:11:74:f4:06:f0:10:49:6a:f1:f3:78:6b:3b:6c:
                    ed:92:f7:59:06:0e:f3:d4:03:8f:0b:86:5a:a9:00:
                    bc:1b:6e:9c:12:c6:e7:6c:2e:6b:7e:60:20:c1:af:
                    60:2b:8c:f0:26:bc:8a:6e:9b:f3:ef:a0:8a:57:8e:
                    c2:82:67:4e:91:79:1d:da:57:6c:5c:0b:c0:e4:90:
                    d3:28:3e:1a:03:38:f1:41:2d:00:31:84:cc:67:e1:
                    29:76:06:12:7d:ba:33:43:c9:2d:05:d0:66:98:84:
                    85:c8:c6:57:0e:14:b5:97:55:d3:a8:a7:4d:19:34:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:85:C3:B3:47:60:62:AE:CF:06:2F:D7:71:3B:E1:94:69:78:FA:39
            X509v3 Authority Key Identifier:
                keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0e:64:e4:64:70:52:11:71:5b:ff:e8:b6:07:16:23:13:59:
         88:57:62:22:8a:db:b8:42:cf:b7:b8:3b:f7:a7:25:77:70:9b:
         d8:ce:04:4b:d6:07:27:d0:14:af:95:5f:d5:5c:65:38:df:b2:
         87:74:41:04:96:00:0a:40:60:76:68:7a:ef:70:9c:1e:cb:47:
         15:1e:84:27:22:e6:00:a4:08:4e:96:29:9a:71:9b:0b:80:7f:
         35:32:e3:d2:0a:97:39:9a:46:53:54:74:a9:c8:cb:f0:59:db:
         64:b2:38:9e:06:a3:e0:cb:a8:90:7d:33:c8:7b:9b:63:32:f8:
         bd:17:1c:bd:80:59:ba:1a:b4:69:02:48:73:33:21:cb:30:12:
         93:87:b6:af:52:4b:59:e0:8d:09:f6:0d:09:85:97:1d:9c:db:
         07:32:26:74:02:5a:b5:c4:77:a2:e0:74:a6:dc:40:e3:2e:bd:
         86:0e:99:ee:e5:3e:d4:d9:b8:b9:83:20:d7:e2:14:d7:dd:84:
         36:76:0d:31:b5:c4:71:0a:0f:b5:c2:ed:14:f0:e7:a1:84:f1:
         e0:bb:59:fe:fb:76:c7:a0:e7:2a:7f:6f:39:de:21:d8:65:63:
         3e:5d:a8:65:18:d4:69:ca:ab:9a:a4:30:d8:ad:c3:01:e1:b9:
         51:6a:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----