Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File:                     zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier:          FZYtQ/xIvv6IuWkt2j7JtNi/XVAuivJFkTd1c3p9deI=
Subject key identifier:   B5:24:F7:85:AD:72:33:DD:7C:DC:07:B8:F7:E2:5D:DB:39:05:AF:5F
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer:       /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial:       01962E98EBB0B68E90C31B0BC0C468158AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number:          0708
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: 17ZYem4zxudFYxI4CavS00hoX+Sq6ghY8pRayJMsZZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:b0:b6:8e:90:c3:1b:0b:c0:c4:68:15:8a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=b524f785ad7233dd7cdc07b8f7e25ddb3905af5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:ae:4a:f1:13:2d:8b:3b:9c:97:2c:29:e0:
                    eb:8a:57:4b:c2:b6:65:19:72:d1:68:d5:27:9d:43:
                    60:4e:54:b4:2c:8e:6d:f6:44:84:32:03:13:64:57:
                    26:95:e0:c4:cc:df:9c:a3:af:a3:a2:9f:5c:fe:9e:
                    fc:e9:30:fa:78:8e:c9:68:05:1a:36:10:35:d5:c4:
                    0c:c1:58:ca:89:b5:70:b2:f9:f5:ed:18:7e:7e:02:
                    21:2b:de:3b:b0:f3:db:8b:d1:2b:ba:bb:56:18:7b:
                    9d:20:b6:8a:aa:ad:39:96:26:01:85:ca:6b:52:fd:
                    0f:1c:4c:5b:61:2a:2c:76:c3:1b:7d:c1:37:ec:9e:
                    9e:06:0a:c7:cf:5f:df:79:c5:c6:65:ff:9c:6c:05:
                    46:3e:03:ce:a0:00:d0:c2:68:6e:e0:7d:17:c1:cb:
                    cd:50:f5:2a:90:cf:a1:15:09:01:c6:c3:fa:59:c5:
                    73:53:cb:e7:75:ef:6c:a1:13:6a:1d:57:c1:4c:99:
                    89:9f:5f:0a:59:66:6f:3c:a5:d4:c1:00:42:4e:56:
                    05:21:2e:79:0d:c9:7f:b5:91:27:08:a4:64:53:73:
                    26:48:73:ff:78:81:61:7e:0c:54:fb:c5:3d:8f:58:
                    51:3f:14:ff:43:ae:4c:15:27:70:af:c7:e3:84:0a:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:F7:85:AD:72:33:DD:7C:DC:07:B8:F7:E2:5D:DB:39:05:AF:5F
            X509v3 Authority Key Identifier:
                keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:67:d1:db:9e:07:5f:e2:fb:21:e9:b9:6a:a1:72:df:f9:fd:
         b6:fb:64:0f:d5:1b:7d:95:20:00:2d:44:41:09:b3:b2:1d:29:
         cb:ea:af:a6:63:d1:0c:85:07:1e:23:84:98:28:51:9c:67:1e:
         d4:02:fb:ee:17:57:51:8b:5f:a9:8d:65:b0:a0:e4:6f:df:c0:
         f0:0a:db:52:0b:eb:6d:8b:11:5e:0c:ca:3d:bf:b9:b1:77:e9:
         e9:9a:eb:06:b8:ce:e2:1b:77:10:f2:87:96:39:db:41:93:19:
         df:66:c1:31:cd:d5:d9:f4:0e:db:19:49:50:40:0a:7e:19:c7:
         c6:69:1a:3a:e5:d6:eb:6d:d4:9b:a2:e8:06:d7:46:7e:49:16:
         e1:29:22:cf:5e:6b:19:ed:05:ca:19:cd:8e:28:e7:3d:fd:f2:
         89:54:25:91:71:eb:cc:47:6b:c4:78:c4:1b:f0:44:df:5e:2f:
         ec:31:f9:5c:ef:f6:93:cf:13:9e:b6:f9:f8:ac:86:2b:e8:8c:
         36:d4:ca:bc:31:ee:ae:a0:3f:fc:1c:26:ff:57:5d:fb:44:ec:
         f6:5c:78:ab:aa:b8:8a:3a:c7:ae:c5:47:af:0a:07:b9:22:0c:
         09:47:55:f9:88:04:92:10:7d:c0:49:a4:b5:de:1d:84:77:62:
         f6:7c:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----