Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File:                     zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier:          M+FTOXOXrVLer0zvJRr+LeqHloWvERWCttfChZ0wT7Q=
Subject key identifier:   1F:15:9D:88:68:56:AE:F9:AA:39:24:78:02:13:99:DA:75:41:60:5A
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer:       /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial:       01962E990EF5E3EE475234AC95FA8FD9996B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: vKnHG3OsWklCs6aq4I/8M+N9UgfCjRuKHFXnHhZKd0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:f5:e3:ee:47:52:34:ac:95:fa:8f:d9:99:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=1f159d886856aef9aa392478021399da7541605a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:fb:1f:5d:5a:a6:e7:4a:77:a8:bb:bf:f4:
                    f7:94:25:2e:00:e8:6c:92:73:3c:36:93:7c:19:70:
                    bf:9a:6d:24:61:10:d4:30:f6:75:37:a1:7b:33:00:
                    da:11:06:ad:bb:fd:30:59:6b:43:43:8a:76:49:e5:
                    3d:97:41:d0:8d:eb:cd:c6:4b:a4:f9:11:ed:d6:e5:
                    e0:28:99:24:b2:fc:9f:43:d0:48:a6:22:f6:d7:4b:
                    db:1f:a4:b9:15:36:57:6a:01:93:06:30:3d:94:ac:
                    96:a9:b0:01:c5:3c:db:3b:b8:c7:42:9f:a0:e4:a6:
                    46:1f:71:01:3e:b2:03:c2:cb:84:49:5f:b7:63:82:
                    65:f7:53:97:ed:9b:cf:5e:90:ae:25:7f:0a:8f:5f:
                    69:8e:c9:88:d9:0d:54:c2:1b:77:f0:a7:b7:41:cb:
                    b1:72:ab:21:21:55:d7:04:a1:39:95:ca:04:27:73:
                    69:2b:2f:e6:26:b7:7e:17:20:50:0a:f1:af:c9:a2:
                    b9:6f:7c:be:7a:8b:57:77:2e:30:c5:27:93:47:3b:
                    43:d0:88:dc:ce:7f:66:31:03:ce:d4:25:24:3d:d2:
                    04:36:c9:30:87:9a:e0:75:73:c3:53:51:7c:26:79:
                    c9:7c:81:48:d7:f3:83:0f:86:a9:73:53:96:76:65:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:9D:88:68:56:AE:F9:AA:39:24:78:02:13:99:DA:75:41:60:5A
            X509v3 Authority Key Identifier:
                keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:37:c8:e7:9b:32:f5:f9:e7:06:3a:2b:59:01:73:6e:48:b6:
         1b:46:ed:82:b5:62:4b:27:8c:99:74:19:4c:25:90:ef:40:ac:
         1d:9e:81:3a:e2:ce:e9:4f:13:61:85:82:82:a3:ac:74:f3:1c:
         b0:bb:c2:4f:71:ba:6c:6a:00:f4:8a:75:71:2a:0e:cf:75:c8:
         a1:9c:d5:af:c2:1b:f2:42:35:a1:bd:7b:93:ab:e6:db:87:f6:
         a5:16:45:d8:6f:c4:6a:55:e1:e9:4f:26:39:43:70:fa:4a:67:
         b7:b5:90:e1:46:13:64:2e:b0:60:31:13:fe:e5:d6:80:de:0a:
         2d:a7:e3:0b:fb:f3:c9:dd:62:ee:70:6b:40:c8:ee:24:a1:1d:
         0e:e8:95:d0:68:cf:17:62:ab:c7:e0:44:f4:7a:23:80:5e:bf:
         09:71:e2:aa:5f:52:4f:34:47:49:af:ed:8c:aa:41:1f:37:73:
         b1:5f:fc:0e:9c:8a:1f:3c:1e:a2:fc:27:d8:46:bf:2f:93:fa:
         1a:a0:44:51:4b:54:b3:85:f6:be:d4:49:ae:80:ad:29:28:e1:
         d2:b6:b6:67:1a:82:73:7f:2e:bc:64:04:e1:c2:8f:7c:79:ee:
         30:38:d1:5d:68:34:67:84:ce:80:56:53:f1:ed:fb:4f:18:62:
         42:0d:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----