Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File:                     ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier:          uCYBJRmvNEdaknwYbhyTdr1288blygd3lbGuxiwn/6U=
Subject key identifier:   D7:33:9C:73:02:AC:58:55:FD:3D:9F:F8:95:43:FA:60:35:25:EE:4F
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer:       /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial:       01962E98FF0D222A9C61C9D712EEADA6A5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number:          087D
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: j4kdFXKL3QGGJbAO209rKxn1qxrwD6+/7iHukHfcdeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:0d:22:2a:9c:61:c9:d7:12:ee:ad:a6:a5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=d7339c7302ac5855fd3d9ff89543fa603525ee4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:95:78:10:cb:45:f5:5b:7d:fe:2a:f0:33:
                    9c:b2:38:bb:e4:af:4f:6c:3b:64:f4:23:8c:54:e9:
                    6a:c6:45:51:ac:e5:94:5d:c6:75:49:91:38:52:d8:
                    55:23:54:1a:db:22:98:b0:7c:42:89:6e:86:f2:8b:
                    6a:54:3d:23:9f:19:dc:5a:a1:c8:da:54:7d:6d:1c:
                    c1:ac:1a:25:94:9b:95:d7:47:5f:b3:df:0d:0d:df:
                    d8:fe:b1:dd:d3:a7:3d:2e:5b:c4:a2:cc:2a:4d:0e:
                    dc:22:c9:03:9d:61:67:42:f5:09:d8:5b:1b:e2:ef:
                    98:07:f3:22:54:9e:ef:60:02:a3:8d:7d:1f:5c:6f:
                    99:b3:14:7a:99:42:03:46:26:ec:a1:0a:76:1b:f4:
                    e8:86:c4:ee:e7:be:fc:28:e4:cc:07:65:33:31:b7:
                    4a:c3:3d:67:ce:56:a1:4a:db:33:4f:25:f6:26:89:
                    79:b5:96:4b:68:6e:6e:d1:d4:46:84:48:e7:f7:88:
                    31:58:06:ed:b8:59:04:d3:ac:1b:1c:cd:54:8a:00:
                    19:59:76:f5:9d:1d:b1:0d:58:16:08:18:74:72:2e:
                    50:ad:b0:e3:73:a9:f2:de:5c:ca:a8:0e:ad:05:f5:
                    3e:fd:2c:1c:3f:32:83:5f:e7:e3:9d:99:3e:90:ee:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:33:9C:73:02:AC:58:55:FD:3D:9F:F8:95:43:FA:60:35:25:EE:4F
            X509v3 Authority Key Identifier:
                keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:26:e9:7f:d5:29:a0:5c:9d:5a:6e:35:66:e1:34:77:28:
         6c:40:d1:e3:c3:f0:de:38:68:5a:29:e8:6b:a5:5d:00:30:4e:
         86:ab:fe:f8:2a:f1:07:f9:e7:1e:44:91:b6:fa:30:72:2b:03:
         01:9c:37:c6:24:e3:22:92:74:a1:74:87:a4:26:d5:26:46:ed:
         20:fe:e6:cb:fd:26:d6:a2:94:82:79:af:23:80:43:5d:4e:01:
         47:4f:1b:17:5d:f1:f7:ab:50:f2:9c:01:1a:1f:28:35:6c:69:
         d9:41:36:57:9f:29:12:67:96:f0:ec:97:fb:7f:52:86:6b:5d:
         92:0c:b9:10:af:35:7f:3f:0b:18:c0:3b:d6:59:bb:be:da:d1:
         a3:06:30:ab:d6:2c:5a:28:c6:55:26:98:8a:57:37:46:99:9a:
         87:91:e4:c9:28:d8:0e:2d:71:0e:81:94:1f:05:d0:2b:03:99:
         66:15:f6:b9:a5:09:7e:57:06:31:9e:95:47:68:d6:0e:fe:52:
         dc:47:e5:e8:7b:d2:26:a7:69:fb:ca:9b:61:d0:16:ff:f3:40:
         a9:90:b5:c6:94:6b:6c:1e:17:2a:3c:e5:65:fc:10:9c:af:22:
         a9:d5:07:d9:2c:2f:c3:9b:f0:58:6e:67:b5:f9:4d:cd:1a:1b:
         e9:a8:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----