Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File:                     _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier:          tqBzQqzy5YTLOLkt1PHYKhzppRCS6i9PuZCoASJoQOY=
Subject key identifier:   F8:93:45:C3:DE:4A:8C:1F:0D:D9:85:4E:7E:22:6C:DB:ED:C5:42:A9
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer:       /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial:       019547EC703BA6FAB5E23C758D558B2FB28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number:          0E22
Signing time:             Thu 27 Feb 2025 15:00:32 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:32 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:32 +0000
Files and hashes:         1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: ui4cSg2Pr0aUrBM4C+so7vy8PyCShpYUnIplm82guIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:70:3b:a6:fa:b5:e2:3c:75:8d:55:8b:2f:b2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
        Validity
            Not Before: Feb 27 15:00:32 2025 GMT
            Not After : Feb 28 15:00:32 2025 GMT
        Subject: CN=f89345c3de4a8c1f0dd9854e7e226cdbedc542a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:c5:28:62:25:53:cc:3a:02:88:f9:64:36:
                    73:53:63:b2:6a:3e:d0:0c:42:de:0a:b1:ff:c8:82:
                    92:0d:1d:72:70:a9:f4:3a:fc:85:9f:86:3f:4f:9d:
                    67:3f:27:81:7c:e3:62:6a:53:d4:06:23:50:de:dd:
                    16:d6:b6:a6:b5:f3:f6:62:f4:9d:68:02:3f:0c:a8:
                    8b:d9:88:14:19:5c:eb:78:a0:07:48:02:90:a5:75:
                    c3:dd:c4:21:9e:00:c3:d9:87:e9:4d:42:04:f6:23:
                    07:fa:0a:58:d0:08:5f:77:20:2a:b5:25:65:4e:9b:
                    1d:23:fd:0d:4f:85:24:5a:63:26:37:fd:72:53:f2:
                    c9:a5:46:52:4f:29:5f:09:c5:72:7d:b5:8f:89:18:
                    38:dc:b0:0e:2d:e3:24:85:7f:e3:03:15:4a:54:bb:
                    a3:b3:a0:1a:0a:56:a7:23:cc:bf:42:fc:28:55:de:
                    dd:19:44:e7:77:2e:50:52:89:03:e0:2b:8b:35:2d:
                    7a:ec:62:c5:a3:b6:91:ca:55:b2:75:bc:d9:21:e0:
                    a6:24:e8:06:7b:5d:58:78:44:8e:0e:ef:2b:1b:64:
                    51:24:80:45:b5:b4:12:05:a1:08:46:e5:97:3b:60:
                    31:2b:df:8a:c0:d5:6f:03:4c:db:f0:6b:1f:6f:b8:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:93:45:C3:DE:4A:8C:1F:0D:D9:85:4E:7E:22:6C:DB:ED:C5:42:A9
            X509v3 Authority Key Identifier:
                keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:9b:65:ac:34:92:2d:44:93:e5:42:63:ca:09:9f:00:10:
         cf:b9:be:84:18:cb:fc:7b:c1:9e:bd:03:18:c6:b2:66:c3:84:
         5a:e2:8f:3d:a5:63:41:07:32:f3:5e:01:cd:e5:ed:24:f4:8b:
         1f:8e:57:c5:11:a2:8f:e7:4d:b8:0b:c2:38:62:03:76:7e:3e:
         61:06:b1:81:ba:37:2b:fc:34:a4:f7:03:cb:1d:f1:ed:94:a5:
         f6:7d:fc:86:a8:b2:ed:8a:f9:87:75:93:47:c1:fb:fd:bb:22:
         fe:b6:ec:09:ef:0b:92:cd:cc:0e:4a:fa:59:90:b0:05:9f:6e:
         4c:6e:a4:ee:cd:f0:a7:32:2c:b2:43:16:02:34:67:99:45:87:
         82:2e:bf:6f:39:e7:7c:44:b7:89:80:d7:22:97:a6:8e:71:ae:
         5d:7e:fc:2f:e9:48:78:e3:5f:27:a9:b0:b5:09:17:9c:23:21:
         ca:de:07:00:38:05:48:ee:99:69:fc:af:af:80:5f:4b:52:a1:
         0f:9e:9a:50:55:2c:6f:7c:2d:50:1b:bf:66:2c:2b:fa:d2:3b:
         be:4b:68:77:2d:13:aa:66:31:a1:3e:9a:b7:7e:2b:0f:1b:f7:
         92:0b:30:85:f1:48:7f:c3:0d:97:92:f3:70:dd:47:7f:57:84:
         89:fe:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----