Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File:                     zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier:          vHg16dzsE58X76gwNmItWoZXoIF7GdVmv+iD7K+J3tM=
Subject key identifier:   86:59:31:35:EB:EE:04:08:40:A4:B3:F7:C8:9C:4E:06:0B:C3:46:8B
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer:       /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial:       01962F3D7263A7CE89584FBFB4C2F220C454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number:          1288
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: k+d+6wFoGrDNobeAKfUxso87eiEePbFXysnl/iYid3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:63:a7:ce:89:58:4f:bf:b4:c2:f2:20:c4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=86593135ebee040840a4b3f7c89c4e060bc3468b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:e4:6b:fd:57:4a:3d:92:0a:c8:9a:93:2a:
                    62:cd:e4:9c:2e:3a:c0:7a:2d:e1:ed:2d:cd:1f:76:
                    69:dc:d0:e4:0c:e4:e4:15:4e:b3:79:4f:b0:61:da:
                    e1:6e:d9:14:0c:bf:82:49:52:e4:bd:35:7b:ac:60:
                    53:97:75:a2:fb:12:ea:f6:b8:1e:cb:63:f2:40:3e:
                    82:b0:88:4a:15:ea:17:a8:30:5c:d5:40:15:d7:8f:
                    19:c6:52:17:28:c1:7a:b0:fd:93:78:8e:84:de:02:
                    fb:4d:d1:b5:15:07:08:10:f1:3d:43:b1:3a:f4:1c:
                    23:97:02:cf:7b:22:a4:fc:30:b7:ad:68:67:d7:ac:
                    0a:0f:83:34:e6:f9:ca:f6:b7:89:02:56:50:4a:f6:
                    ff:a5:19:ec:bf:82:59:f5:c7:65:b3:d8:23:ff:f4:
                    ab:b8:28:56:a5:d1:05:cf:74:c2:65:93:67:fc:bf:
                    f8:8f:f7:3c:f8:f6:e3:e9:3c:fd:fd:7a:3c:f3:e5:
                    50:d5:37:30:ce:e8:ea:b4:e7:06:5d:c9:a1:79:43:
                    50:b4:c8:80:a2:0e:b4:23:17:d9:61:20:a0:0d:ee:
                    18:2d:ec:c0:34:10:cb:cd:7e:b7:03:53:64:83:fb:
                    00:b5:89:00:4d:01:2a:a1:1b:77:e7:97:36:ee:9c:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:31:35:EB:EE:04:08:40:A4:B3:F7:C8:9C:4E:06:0B:C3:46:8B
            X509v3 Authority Key Identifier:
                keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:db:14:99:14:09:f3:db:0f:1c:51:c2:3f:60:bc:78:75:
         fd:6f:7c:f5:9d:e5:45:80:c8:ec:93:0e:5e:97:7b:f2:c0:ac:
         5f:ef:68:12:dd:28:b8:d2:ca:07:10:3d:72:36:4e:d6:e8:49:
         53:4a:93:07:38:76:05:01:46:a8:16:2b:91:76:54:14:11:4f:
         36:79:0e:db:d4:95:48:68:b9:f9:7a:1b:7f:c0:e2:87:11:57:
         10:aa:62:2c:83:58:54:b1:48:70:c1:3c:45:50:75:18:f2:78:
         5d:d1:21:0b:bf:0d:af:83:60:33:57:58:56:41:d4:7b:9d:e7:
         27:14:1c:6d:74:02:10:e7:b1:1a:cf:32:69:3a:7d:61:00:4e:
         e2:8c:f5:e3:9d:c0:6f:4c:6b:28:0d:6e:92:18:fd:ce:9f:33:
         e0:8d:4d:eb:9e:c9:28:94:73:da:43:17:33:ee:c4:5c:6f:c2:
         21:25:be:c3:2a:6f:d7:55:f1:83:19:5c:46:ca:16:b6:5e:53:
         b0:b1:2a:b6:d1:89:a2:64:be:b9:77:47:05:a6:ab:ed:dc:f6:
         eb:f5:6b:38:a3:51:30:b9:6a:18:9d:b5:7a:69:d4:22:ba:30:
         5d:3f:b0:0b:5b:eb:96:27:6a:af:c1:85:8c:46:61:3c:1c:ef:
         ee:b0:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----