Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File:                     Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier:          TQmsRRgs4FgaTmp/WxNTo5oeb/VC5/31o51Li7WL50c=
Subject key identifier:   99:C2:AE:3D:4C:97:FF:D0:50:C7:6F:2D:D3:1D:82:75:B5:29:B9:58
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer:       /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial:       01962F3D3ECBD4EA3F15F485628C35CB5643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 5vPgzbI4SJfhhOIRMEcbyFkSLMF06TpPt8/Z+EArb6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:cb:d4:ea:3f:15:f4:85:62:8c:35:cb:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=99c2ae3d4c97ffd050c76f2dd31d8275b529b958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:ee:e3:67:83:d2:74:d9:a2:9c:84:9a:5b:
                    38:ba:bb:07:20:81:ab:a4:a0:d1:d2:02:0d:dd:99:
                    1e:3b:11:82:7a:95:5e:60:58:30:6a:7e:41:3e:9f:
                    11:ca:9b:62:bd:1b:35:1c:ac:ef:26:32:8c:e8:52:
                    26:8b:a6:94:e2:9e:8f:ab:79:43:33:91:8e:ed:af:
                    50:d3:87:4f:a7:15:44:36:fb:27:fb:4c:de:6a:ae:
                    94:47:35:a0:23:4c:a7:20:fb:b5:62:33:00:3d:88:
                    4a:b6:9f:9b:77:8e:f3:a6:0b:68:6d:f4:f3:0c:0f:
                    01:95:f5:64:51:79:0c:82:9b:cf:8b:e3:32:29:9e:
                    25:04:42:1f:da:88:d2:70:2f:eb:ff:6e:ac:7e:66:
                    55:1a:d4:0a:8a:1b:eb:ac:fb:65:4b:a5:53:8f:d8:
                    c1:96:0d:ff:28:f0:35:d0:3d:28:69:eb:65:ad:cb:
                    41:53:49:49:da:0b:44:ee:cc:be:9c:7a:db:24:3c:
                    2c:48:84:96:31:40:34:e8:69:6a:a7:75:b9:49:19:
                    9f:6e:e9:7a:ef:e8:89:08:09:7d:75:11:6d:10:e1:
                    97:54:6e:e8:b8:34:05:f2:bc:1c:a5:41:63:13:6e:
                    e6:53:e4:0e:fd:e4:c2:32:80:37:72:76:a1:15:be:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:AE:3D:4C:97:FF:D0:50:C7:6F:2D:D3:1D:82:75:B5:29:B9:58
            X509v3 Authority Key Identifier:
                keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:e9:a0:42:90:fe:74:aa:00:ec:25:4f:f7:9d:e5:c3:f7:
         4a:83:a2:5f:61:a3:41:78:4e:e1:bd:99:a6:02:8d:72:62:62:
         ae:d5:3d:39:71:a3:e2:83:0a:14:e4:66:e7:8a:fd:8f:ab:24:
         b1:e5:5e:18:a0:25:81:0a:35:97:d9:c2:6a:a3:5f:43:ae:bc:
         4e:10:d9:4b:98:14:95:f6:53:18:2e:b9:2b:38:5d:8a:a4:8b:
         f7:fa:4c:9e:f2:b5:7e:c6:1d:49:86:48:5b:1a:7c:70:5b:1f:
         fd:37:7b:b3:eb:1d:44:b8:31:29:2f:88:5c:e5:e5:a6:57:0c:
         6e:cd:f0:f3:a0:e1:fc:9c:3b:c1:df:2c:f1:3f:c7:8d:5b:11:
         8d:44:17:90:4b:f0:7e:29:8f:f9:ce:e8:af:51:4c:72:ea:e3:
         88:78:f4:c5:ee:c2:1c:21:df:68:a5:83:9a:89:ff:15:91:41:
         27:78:1b:bf:79:31:27:c2:04:99:6a:bd:59:53:09:47:a6:11:
         b3:a6:8b:27:46:c9:51:8c:d6:2b:26:b0:f7:66:e0:0d:cd:92:
         db:24:e0:dd:1b:e5:a6:c2:1e:58:0e:92:b1:61:40:12:46:48:
         42:37:10:6d:99:b5:f3:45:9c:48:69:ef:e3:67:34:51:fd:da:
         ce:b1:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----