Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File:                     LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier:          5fRpVT9KOEa8gqwmMgsjNjCT85jLyZtavv+MnjwgJs8=
Subject key identifier:   BA:B4:94:A7:CF:E5:54:A4:27:FB:73:C6:59:2F:48:07:36:DD:0A:18
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer:       /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial:       01979AF1B5CC601C1C2345D66B8F7F23548B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number:          15AD
Signing time:             Mon 23 Jun 2025 04:00:21 +0000
Manifest this update:     Mon 23 Jun 2025 04:00:21 +0000
Manifest next update:     Tue 24 Jun 2025 04:00:21 +0000
Files and hashes:         1: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: 8xrQNtXwn3pp7Uhuq0FgRigJqomIxAWCOkLloNGy9P0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9a:f1:b5:cc:60:1c:1c:23:45:d6:6b:8f:7f:23:54:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
        Validity
            Not Before: Jun 23 04:00:21 2025 GMT
            Not After : Jun 24 04:00:21 2025 GMT
        Subject: CN=bab494a7cfe554a427fb73c6592f480736dd0a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:38:0f:c9:31:22:0e:67:8a:86:a3:e2:be:
                    73:05:f3:6c:fc:a6:62:12:e1:b9:e8:da:51:76:6c:
                    fe:c6:ec:c8:39:63:25:a3:78:77:15:24:eb:f6:73:
                    64:84:3e:57:c5:a1:b2:f6:05:bf:33:3f:fe:68:1a:
                    76:54:24:14:9c:ee:0e:b6:3c:7b:97:fa:49:af:0d:
                    82:c6:c0:fd:ed:46:3a:b6:af:73:96:c5:55:be:05:
                    17:ae:b8:3a:4d:4a:3e:6f:56:5a:1e:3d:8c:3c:f3:
                    9f:98:23:0b:84:dc:32:2e:b7:62:85:54:e4:50:d3:
                    06:df:21:9c:6a:e8:1b:ea:b0:7d:5a:9e:f6:3e:78:
                    44:40:9b:b8:83:ec:65:6a:4d:53:f4:2c:9a:62:92:
                    59:17:c4:99:29:ad:fd:88:2d:96:ec:f0:cd:9a:a7:
                    6f:0b:6a:d4:2d:d0:e6:dc:19:a3:be:46:9c:6e:37:
                    e2:ba:1d:c9:95:6c:c2:96:e0:a8:ea:fd:5b:4e:1e:
                    2e:11:2e:e1:77:a8:2c:e9:0b:bb:cc:a3:60:fb:39:
                    b7:7c:51:ce:b6:c3:dc:0a:2e:36:47:f7:7a:f4:91:
                    0a:dd:6a:d5:f7:40:c1:ac:f0:32:26:2f:68:f5:4b:
                    35:01:9e:2a:49:03:bd:bb:dc:2c:a7:ed:f1:8a:c1:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:94:A7:CF:E5:54:A4:27:FB:73:C6:59:2F:48:07:36:DD:0A:18
            X509v3 Authority Key Identifier:
                keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:78:da:b5:0a:ac:d2:74:41:f0:30:a5:4f:57:b4:2c:a4:bb:
         ff:f8:35:2b:ed:4e:ee:bc:10:94:d7:b5:9a:43:c3:07:72:7f:
         1a:3d:50:29:3c:7c:d7:f3:db:84:89:d9:0b:b2:b2:28:fa:14:
         a3:9a:f3:27:86:f2:70:0a:92:7c:87:78:32:83:3f:79:a4:13:
         6b:c5:6c:be:cd:a6:bf:cb:c7:89:ea:5c:f0:81:9a:95:fe:33:
         c9:ee:31:f1:28:9f:95:af:59:65:01:b0:46:a3:48:d5:4c:f3:
         10:d7:e4:eb:fc:67:14:fa:5f:8d:e6:ab:a0:41:9c:a5:d3:5e:
         ed:b4:36:15:84:35:80:81:51:46:ab:73:03:3d:52:3e:40:b7:
         84:ab:4f:a0:f1:35:0e:58:0b:be:fa:b6:9b:b5:33:e1:71:13:
         cc:13:28:8f:5a:40:0d:0e:ea:c3:d0:e5:ac:61:db:0c:b7:32:
         b3:03:c0:99:fd:3d:23:43:9f:30:d4:db:fe:63:82:12:8c:24:
         53:8c:8f:a2:90:bb:c0:f1:b8:e1:c7:5c:5a:c3:e7:de:37:ae:
         3c:d6:8a:1e:31:cc:b5:f7:53:61:9f:a7:0a:87:a8:73:79:52:
         8f:ff:88:60:03:2b:e9:f5:2a:82:81:b3:b0:ae:7a:20:5d:29:
         af:83:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----