Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File:                     ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier:          YhW2fPQFcPK5n6JSpOi7OEimxT40ZLlQhJmmlMMeZkk=
Subject key identifier:   C1:93:A5:7D:35:B5:51:25:3B:F9:78:38:27:71:64:AD:71:AB:0C:0C
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer:       /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial:       01962F3D2B8ECF830E64C51C6EA2524C3317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number:          0B37
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: WMpShtxDY7v67LpgBfopxktlRAHlWIhjVnf2jILgNMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2b:8e:cf:83:0e:64:c5:1c:6e:a2:52:4c:33:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=c193a57d35b551253bf97838277164ad71ab0c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:5f:e8:b4:9e:8c:df:bf:c0:c9:75:85:4e:
                    df:0c:3b:c6:4f:92:74:66:bb:ba:67:a1:ff:77:80:
                    b3:34:7e:8d:12:70:a2:90:2b:81:e3:e3:d5:6c:dd:
                    5b:10:23:32:39:f3:39:d0:e7:d7:36:be:c3:e1:3e:
                    9c:16:f8:19:d4:a0:96:36:8b:29:7d:17:03:8b:8e:
                    34:92:85:52:84:3d:69:22:7b:c7:72:89:89:2c:20:
                    7a:1a:08:ae:ca:8f:4a:b4:3f:4c:65:59:93:f9:1a:
                    17:59:ca:33:55:f4:f2:9e:d8:1f:a2:23:52:61:d0:
                    7c:09:cc:c2:d5:03:9b:4a:a7:29:3e:3a:45:9d:b8:
                    8d:37:b8:26:77:c3:b0:57:f1:11:e3:25:98:5e:f8:
                    7e:03:1a:74:5f:c6:72:b3:16:a8:f9:70:08:67:96:
                    c2:1a:ad:8c:78:60:a2:b1:e2:b1:a5:2e:b7:01:07:
                    d1:25:32:d5:f5:1f:b2:b0:dc:51:b1:cd:23:1f:af:
                    e6:44:2d:a8:73:b4:ec:50:08:de:16:fa:c6:86:1a:
                    b2:03:9e:64:43:dc:a3:bc:17:0d:57:91:c3:99:f7:
                    bb:ae:d8:be:d1:90:5b:31:fa:d7:c0:ce:7a:ca:35:
                    51:3e:02:4c:26:d5:74:c7:22:15:c4:58:a5:07:f9:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:A5:7D:35:B5:51:25:3B:F9:78:38:27:71:64:AD:71:AB:0C:0C
            X509v3 Authority Key Identifier:
                keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:dc:8a:a6:73:ef:cc:cd:c0:f1:0b:3c:32:18:ec:ca:22:
         7d:9e:9e:c8:96:05:a6:3e:20:e3:2d:55:f1:60:41:f7:53:f2:
         7c:2c:f8:c2:46:6f:67:24:9d:1f:25:c9:89:ef:89:2d:ae:76:
         8f:24:b7:90:51:27:9e:89:fd:65:4e:98:c5:55:6b:37:e1:9e:
         6c:ed:3d:b5:07:6c:da:e9:17:5f:29:4b:35:23:87:f2:f2:78:
         22:a5:c4:cd:a2:33:e6:8f:23:51:02:6d:84:ae:52:e0:5e:19:
         13:79:b2:73:1a:cf:4a:25:22:99:5f:67:05:1c:bc:ce:a7:67:
         fd:31:23:65:ee:a6:7c:d2:62:18:27:28:3c:b3:64:ac:07:8f:
         26:ec:13:7a:df:be:c1:9c:a7:ca:f2:bd:e7:cf:68:cb:94:91:
         e1:58:3e:4e:9a:66:36:19:32:1c:f3:c1:7f:60:67:1a:55:74:
         32:93:a2:03:63:09:73:62:46:86:dc:a3:8e:64:db:51:1f:b5:
         87:86:40:cf:90:c0:2c:e5:ba:5e:d1:f0:fe:4a:bd:55:99:c0:
         20:6e:6e:32:5b:41:88:30:9d:97:63:6c:e0:0d:7e:e8:72:78:
         97:44:8a:bf:a7:36:98:73:93:72:25:88:e4:d8:a8:b5:5e:ba:
         72:40:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----