Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File:                     ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier:          5nQ/FlJD6X+95af9wkHjcXBUP46vzrcdBg7EZkaG0o0=
Subject key identifier:   9F:D4:1A:AD:1D:F0:73:5C:44:1F:68:69:1B:A4:C6:74:9A:DD:FF:04
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer:       /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial:       01962DF3E8ECA33521B737FA570FCF028339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number:          0B59
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: Wj6sMcHsP4/RkM6d2Cnf/9PvWm5u50gxCMQHEr7v5jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:ec:a3:35:21:b7:37:fa:57:0f:cf:02:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=9fd41aad1df0735c441f68691ba4c6749addff04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:0f:3f:9a:55:fd:d2:53:9b:c7:cb:3e:bf:
                    f1:52:54:e4:86:42:ae:7d:b9:af:75:e6:6f:bc:03:
                    57:a3:a7:5c:20:8a:57:da:d6:37:0f:ac:bd:d2:38:
                    aa:f7:7c:99:80:6e:49:bd:ab:31:09:45:7c:bf:61:
                    49:c8:4d:c0:41:51:86:e5:e0:91:e9:35:95:20:bb:
                    55:e4:cd:bc:95:18:02:f1:32:7c:fe:26:7c:fa:4c:
                    f6:a5:64:b1:f7:b4:ad:f7:34:7c:74:0d:43:74:4a:
                    69:8c:c0:12:78:c3:f2:20:0c:fb:a9:3d:d6:08:7c:
                    65:ad:2d:3c:cc:b8:21:bb:65:81:0e:47:c0:c1:69:
                    2c:a2:0d:04:46:ff:1b:e7:c4:20:ff:94:e2:ff:a1:
                    a8:03:4f:cb:d0:3f:9e:11:63:e8:18:d5:61:6d:ea:
                    db:c9:67:65:c8:12:bc:ed:de:2e:5a:be:e6:e7:76:
                    50:e5:48:50:eb:fa:48:55:13:56:a5:47:46:69:89:
                    1b:c0:58:d5:da:78:f8:e0:e0:1f:80:af:47:98:eb:
                    b4:72:38:82:bd:17:31:7d:2c:45:c3:48:a6:33:2d:
                    5f:8e:e2:5c:3a:85:19:c0:c7:6a:ff:16:cc:ef:b4:
                    97:ad:82:47:70:7f:5a:9e:a2:da:ca:e2:11:63:52:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D4:1A:AD:1D:F0:73:5C:44:1F:68:69:1B:A4:C6:74:9A:DD:FF:04
            X509v3 Authority Key Identifier:
                keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:21:07:1f:78:01:e5:25:04:df:03:cb:23:70:f3:75:65:ea:
         df:62:08:65:a4:a8:37:61:0c:9a:cc:3d:46:6d:d8:77:aa:a2:
         b4:f1:7a:fd:57:e7:dd:dd:c2:4c:46:4b:f0:5f:6b:de:5b:ee:
         aa:b3:b6:ca:9a:74:48:45:b1:5f:2b:b7:fc:32:5b:f7:3b:a1:
         e2:c0:f9:e0:96:ee:77:ae:0a:d7:06:ac:21:e8:46:c5:80:71:
         e9:6b:c3:33:aa:c7:e5:54:5e:4b:1b:7d:68:c5:55:1e:fa:c0:
         d1:22:78:3c:5a:44:9c:94:87:5b:cf:d8:4c:2b:8c:c4:dd:98:
         fc:b3:36:64:96:fc:12:50:c3:71:1a:d9:a5:d2:84:f4:8a:61:
         8d:de:21:ea:3f:c6:92:01:19:cc:84:af:46:86:36:82:7a:b4:
         00:1a:f8:5f:96:03:dc:70:bc:35:50:ac:dd:37:15:21:28:74:
         ee:a5:e7:e7:f4:45:e0:df:83:54:34:37:a2:fd:4d:19:f6:2a:
         3d:53:50:25:87:49:b8:34:cc:2b:67:c4:44:5e:da:68:94:8f:
         61:ab:b9:b3:14:8b:25:f1:5a:0d:1d:94:13:a3:48:1d:32:18:
         ba:6e:0c:3c:fb:14:a3:19:c0:dd:cc:31:32:4d:8f:70:f8:6d:
         d2:3a:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----