Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File:                     zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier:          2AW0xsVZRSIJiwLba0+vCuCaQMz3eigke578dwvDqOI=
Subject key identifier:   77:A3:5A:0A:CD:07:71:8C:37:AC:FC:05:82:D8:7E:32:BF:F8:95:1F
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer:       /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial:       01962F06665BFAD7BF48558F0196B601A749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number:          F9
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: 1NnxkXd0lPJ0OkjwkdbfrEyza40SwEv/wl4btTHgWsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:5b:fa:d7:bf:48:55:8f:01:96:b6:01:a7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=77a35a0acd07718c37acfc0582d87e32bff8951f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:79:3f:8e:04:1a:a4:49:54:35:c4:e2:bd:
                    bb:3e:31:f0:20:a1:42:44:19:4e:04:57:33:9f:8b:
                    d0:59:9d:07:0b:c2:0f:f2:ce:d7:f3:47:40:50:00:
                    22:2b:a2:45:b6:e5:8f:55:07:8d:53:5d:17:59:92:
                    bf:d5:1f:d2:cd:ef:dc:7a:ee:10:97:e8:be:df:b2:
                    8e:35:d9:03:25:3e:09:e6:89:f5:c0:19:b6:d6:fd:
                    83:be:ee:ca:d5:80:50:bf:d4:04:14:82:8d:eb:2c:
                    87:fd:2a:6d:a0:15:e9:93:c1:a9:6c:72:6b:8f:52:
                    1e:ee:96:b0:6d:9d:07:1f:53:99:4e:a2:94:cf:f8:
                    19:7b:3d:20:43:a9:31:70:86:fd:60:e8:d9:57:69:
                    f5:e9:96:88:72:3c:1d:25:1e:55:a8:7c:4c:ea:dd:
                    5c:83:c7:e0:83:ff:a9:42:17:4a:c6:66:12:77:5d:
                    be:92:27:af:18:61:09:7a:41:4e:b2:49:23:ac:c2:
                    a7:7a:6d:ea:c7:37:51:3b:50:cf:ac:b4:44:54:e3:
                    de:01:55:fb:b4:46:c2:19:e2:ca:de:9d:bd:7d:8d:
                    c0:67:a8:d0:0e:d7:ae:f9:e7:01:32:dc:31:54:d2:
                    05:64:a8:d4:a3:2e:3a:47:a5:e2:98:7b:ef:b8:bd:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:5A:0A:CD:07:71:8C:37:AC:FC:05:82:D8:7E:32:BF:F8:95:1F
            X509v3 Authority Key Identifier:
                keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:45:e9:49:50:53:54:a2:ef:4d:df:20:29:29:de:b0:db:
         26:b0:db:ad:36:18:a1:40:cc:86:a4:09:e0:c0:d4:35:f1:ed:
         ab:2e:b1:90:48:d3:55:c2:b6:54:a8:3d:71:82:c6:98:66:6e:
         72:41:dd:52:ed:71:56:b3:02:94:95:a2:f4:1d:ee:f7:95:f9:
         bb:c9:67:8b:4e:6e:c7:aa:98:d1:96:e9:3e:0d:f8:74:4d:64:
         a3:41:89:9d:09:60:75:4a:37:f8:6a:7f:f8:f1:6f:7d:15:10:
         a5:a2:e9:69:89:a3:e0:96:67:c4:72:69:1e:f2:db:8f:d9:fc:
         87:a6:ec:54:c7:8e:e4:06:70:ef:53:ec:59:e6:64:25:99:d0:
         81:ab:6c:c3:9f:9f:36:46:5b:2a:31:f8:04:77:f0:78:df:20:
         34:78:11:f5:fc:a3:8f:87:13:33:4c:e9:40:79:82:84:b7:81:
         70:7f:1c:97:83:6c:11:f9:5b:1c:60:9b:62:b7:0b:a9:e9:2a:
         bc:a4:99:6c:82:aa:b7:9a:fe:40:06:d0:02:ee:31:3e:fd:fb:
         9a:bd:c8:00:af:65:3f:49:27:7a:ca:56:8c:a1:f0:13:61:57:
         be:3e:0f:ac:dc:7a:dc:e2:f8:6c:3f:da:02:57:fc:61:0a:94:
         1b:53:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----