Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File:                     ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier:          6OLBKwz7Fx2cuFnKBvzbRkIH84vPbn17+qsAm1t0mQc=
Subject key identifier:   AD:1C:35:B8:98:AE:AD:96:02:BA:8C:23:C5:0F:F0:E6:B2:82:41:D4
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer:       /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial:       01962E61F55941D3CBADF97F77D9455B447D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number:          1039
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: BZpDp9jeIhatLqCZZl5eWmXjBTTyQ+QLtEs4L+l9LtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f5:59:41:d3:cb:ad:f9:7f:77:d9:45:5b:44:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=ad1c35b898aead9602ba8c23c50ff0e6b28241d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:00:8d:e1:14:7a:f6:7c:b2:d7:2a:46:7f:
                    43:7d:49:5d:ef:6c:20:ab:f7:ce:d4:6e:a9:45:4e:
                    c1:31:49:7b:34:be:48:ea:e2:c9:8b:29:07:05:07:
                    8b:cc:00:32:7f:73:11:27:67:75:0c:de:d9:d1:b5:
                    6a:44:e8:f3:d1:29:1f:d1:4f:a6:b3:46:25:1e:f0:
                    ce:42:3b:84:63:a1:2a:72:75:bd:ac:3f:d6:b9:e8:
                    d9:7c:32:25:4e:0b:37:73:49:85:24:22:de:df:ea:
                    6a:2b:e7:a6:06:09:17:7b:38:e4:ce:5c:fa:3f:4d:
                    ec:95:6f:68:31:dd:7b:e5:df:4c:ea:e5:83:ec:6e:
                    10:1e:b1:bd:67:72:d1:e4:c3:9f:a8:f0:62:dc:d0:
                    70:f3:14:45:5d:79:c5:06:6e:2b:9a:0c:9e:10:62:
                    11:6c:93:e1:09:dc:39:f1:69:c6:6d:a4:a0:9c:27:
                    0f:85:e4:b0:af:a8:7e:e8:31:a1:b5:9b:a9:bd:61:
                    1e:d1:88:76:2b:9e:b8:79:38:4a:a5:08:48:fc:45:
                    9d:9b:9f:00:e4:d6:cd:fa:fa:b8:be:97:10:ca:c2:
                    3b:d8:ea:21:fe:06:46:d4:15:82:40:6c:3e:19:06:
                    ed:87:45:3d:1d:56:f2:14:97:70:ea:93:8d:27:c5:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1C:35:B8:98:AE:AD:96:02:BA:8C:23:C5:0F:F0:E6:B2:82:41:D4
            X509v3 Authority Key Identifier:
                keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:03:88:22:93:55:53:69:42:3e:d5:52:b3:d1:d8:9a:08:9e:
         1c:07:4b:a0:a0:c6:79:ed:c3:e0:f7:a2:41:dd:ea:7f:9e:d6:
         c8:06:ae:d4:51:83:e9:bb:0d:7b:b5:50:08:82:4c:f1:89:ed:
         20:21:8e:a1:85:9b:0e:0f:68:9b:17:b3:ff:8f:5f:c2:4f:61:
         a2:ed:14:ac:a9:2d:00:c8:ac:a4:09:59:0d:10:e7:ef:85:d0:
         e1:98:1d:e2:d5:64:6d:82:9a:55:9a:d8:40:f9:e7:f4:4e:83:
         cf:d2:3e:38:6d:81:fc:91:8d:40:12:88:a5:96:07:16:f1:7c:
         e2:a9:6b:f3:99:29:f0:58:7f:2b:8f:a2:88:ea:22:be:27:7d:
         57:36:37:a2:24:8d:51:a2:e6:f7:f3:87:26:64:19:03:6c:3f:
         34:43:ef:6b:b1:22:c5:45:f2:5a:bf:d7:ab:c4:b5:97:4b:95:
         05:d6:7e:1b:61:e2:a1:41:e7:fd:a3:9c:b7:b3:3f:b5:4e:b3:
         7e:7b:c7:76:87:d1:b4:7b:52:03:a8:1f:77:47:6a:cf:3a:4c:
         44:69:5c:8b:9e:d2:22:fd:bd:fe:69:5a:83:20:cc:b9:4c:73:
         b5:38:df:2d:b3:c3:5b:44:b8:d5:ae:ea:2e:d8:95:f2:de:f0:
         ab:41:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----