Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File:                     z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier:          R+d78jZS9+baDSt2qwlSKrD8UZUF71oMCZ4ZPxReOqc=
Subject key identifier:   BE:DB:00:6C:4A:E1:0C:31:ED:77:BA:82:36:52:C0:C4:1C:54:5D:58
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer:       /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial:       01962F74A0029FDAEE6553F25E5BECAEFF7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number:          0C2D
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: +yamDMz82/OPL5lWGtsgTSAiOVdmqCE+YSbn55t7B+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:02:9f:da:ee:65:53:f2:5e:5b:ec:ae:ff:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=bedb006c4ae10c31ed77ba823652c0c41c545d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:54:98:a4:f7:46:99:7e:5b:6b:c2:ad:87:
                    6c:77:3f:3d:50:c3:dc:c9:06:0c:22:c4:38:fc:22:
                    41:a5:3c:2a:d8:58:95:da:fc:41:5a:8c:5f:73:53:
                    8a:f4:1b:9f:e6:74:e4:de:b2:79:c5:68:ca:f8:09:
                    98:a8:4d:a6:30:c0:47:3f:c8:8b:5f:ee:5f:97:71:
                    f5:77:7b:1b:8f:b5:69:f7:50:a7:f9:1d:78:e8:d9:
                    80:ef:21:85:7f:a3:52:c3:dc:99:53:3f:e2:4f:70:
                    41:3d:15:45:89:62:72:24:b1:a7:68:34:f4:58:87:
                    b9:f2:30:9b:b0:d9:ff:c3:c4:e1:6d:c3:36:2c:61:
                    cc:f9:1c:8b:5f:c6:7e:6a:af:71:84:cf:47:df:7e:
                    6a:92:3b:fc:2c:96:c8:d6:e6:40:2f:ac:71:60:ad:
                    71:8c:a7:cf:70:3a:68:56:d5:bd:9f:6d:cd:ec:24:
                    8c:a2:97:f4:56:3f:c7:3e:08:b2:30:90:38:13:7e:
                    10:21:21:4c:a6:4d:78:1c:98:9c:ea:da:ed:75:4b:
                    61:8f:a4:58:fc:72:67:8a:71:f3:41:ca:85:cd:35:
                    fa:90:32:ef:79:b6:76:7f:b3:38:e8:a4:cb:d7:3d:
                    b4:3a:f9:6d:64:5c:42:46:7d:72:73:12:77:a6:d1:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DB:00:6C:4A:E1:0C:31:ED:77:BA:82:36:52:C0:C4:1C:54:5D:58
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:a6:e7:b4:ef:a7:22:f8:b1:da:0c:eb:47:e6:62:32:57:
         a4:a1:c1:a7:58:92:a6:aa:59:5f:10:af:99:ef:e7:4b:71:81:
         27:bd:55:f2:81:ba:4e:99:58:8c:8f:c4:c1:d2:59:96:36:ae:
         74:b8:95:98:fe:01:53:81:3f:a7:b9:ba:62:95:b4:c1:6b:30:
         26:e0:1e:d7:70:e7:7d:0d:ce:3f:1f:34:ac:df:49:0c:37:47:
         f5:ac:b6:97:73:66:b1:e9:78:da:e0:55:34:c5:ab:3a:3c:19:
         de:5b:ce:bb:7a:16:21:3c:a3:bb:4f:29:38:9c:79:a3:aa:bb:
         bc:90:dc:dd:66:52:72:3f:09:d0:47:3a:6e:cb:fa:d0:ba:fe:
         f6:20:0f:f3:fa:7c:c7:20:73:ac:d3:f8:d5:31:92:ed:6a:a0:
         b6:03:c8:f9:4b:36:32:ac:75:be:f1:fb:c4:3b:e3:f5:90:16:
         06:4e:81:0b:39:a1:55:69:11:d4:02:cd:59:a4:15:be:cb:4c:
         3f:ac:f3:e3:f4:d8:78:b9:69:9e:b0:f5:76:2b:de:2d:a0:6f:
         06:2b:1d:68:15:d4:2a:52:16:45:a1:3f:f9:f3:96:16:be:37:
         9b:95:09:cd:d8:91:ed:12:cf:e3:b4:c4:b6:32:d3:64:b0:b0:
         87:00:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----