Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File:                     z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier:          ui3VaUdsKOIye1W0rTX8u/oxuakWC2dzQbxrvXkMY4w=
Subject key identifier:   8F:8F:F2:BB:0F:C2:AB:37:B8:7C:7E:BD:06:7A:90:F4:53:C8:7F:8C
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer:       /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial:       01962E99B5F657142F448CF3BAC86DF94DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number:          109B
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: 3+mIyPqCOVs/HbV1ZdnYkqiCEE7irJok9VTwQ5jUtcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b5:f6:57:14:2f:44:8c:f3:ba:c8:6d:f9:4d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=8f8ff2bb0fc2ab37b87c7ebd067a90f453c87f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:c6:61:b1:2d:ce:f3:f2:34:3f:83:ce:ea:
                    d0:d8:03:1f:4a:93:98:68:c7:a6:ef:c1:90:43:97:
                    ce:7f:4c:88:a7:e5:b7:a6:70:b7:52:08:db:7f:5d:
                    6a:d3:19:85:f7:4d:42:1a:8b:ea:79:06:d2:f8:16:
                    f7:54:e6:fc:2d:bf:50:f9:fc:9b:df:6a:62:05:1f:
                    d7:f1:4f:f6:52:3b:f7:a6:16:5b:c1:86:10:38:be:
                    b3:29:5f:49:a7:d6:67:7c:be:12:70:15:29:64:fa:
                    f7:71:f2:66:39:14:ac:0e:78:e2:3d:66:be:ba:5d:
                    5f:7e:fa:17:f5:9f:f9:b0:d4:ef:26:b2:b4:1f:ea:
                    b6:2c:61:d5:10:51:b8:28:91:7a:73:1f:1b:00:f2:
                    fd:04:5a:63:77:f2:35:0b:f8:d6:c4:2c:20:0b:21:
                    5f:e7:7f:2a:b0:da:87:ef:43:2e:21:86:d6:88:bf:
                    81:b5:a0:f3:9c:f0:fc:33:fa:62:ea:d4:f5:8b:49:
                    fa:a0:80:32:8a:24:14:2e:6c:ae:5c:93:62:95:19:
                    5c:20:27:94:2f:23:0c:08:fb:c2:19:f7:fc:74:f2:
                    71:bb:d8:ef:20:98:f5:84:40:1b:c4:fa:e4:a6:54:
                    53:f1:c8:b0:bb:4f:bd:87:8a:ce:e6:76:aa:29:55:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:F2:BB:0F:C2:AB:37:B8:7C:7E:BD:06:7A:90:F4:53:C8:7F:8C
            X509v3 Authority Key Identifier:
                keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:93:19:69:6d:10:5e:e6:71:b2:d7:dd:71:6c:ad:54:3c:
         c8:c7:a7:8d:1d:00:f2:1d:1f:4a:0b:5e:93:97:90:51:ca:93:
         f8:30:a6:c1:21:8d:01:a8:9c:50:ff:36:07:b6:40:a9:ca:dd:
         12:35:01:51:27:7c:ab:4a:1c:f1:5b:be:08:ca:18:5e:0b:77:
         46:b6:53:75:30:8f:60:4d:85:1b:ad:37:b0:57:7e:a2:e2:fa:
         0c:c2:e3:5f:c4:af:5e:7c:f1:02:dc:72:8e:f5:f2:1f:0f:63:
         9f:dc:8f:aa:4b:82:61:b3:45:f7:2c:39:b0:23:12:8d:6f:63:
         cd:d7:41:7a:6e:c6:47:a2:32:80:eb:85:72:f0:75:f2:81:6b:
         ed:95:60:70:d1:6d:cd:01:26:a0:f8:01:fa:7a:a6:60:d1:21:
         eb:f6:83:ae:89:c9:32:dc:88:52:c9:a7:d7:d2:58:42:f1:5f:
         2a:84:47:ce:9a:86:ed:b7:6f:b7:21:d1:9a:8c:7a:d7:fa:be:
         ef:6b:b8:f9:c0:80:ca:46:dd:68:14:2f:49:dd:9b:96:cc:ec:
         9e:79:e9:99:ac:1c:aa:31:21:64:60:ac:ee:54:05:d9:b0:bc:
         6f:93:40:9a:3f:c8:41:17:c3:81:1a:32:1c:14:6f:32:28:b4:
         90:91:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----