Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
File:                     mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft (raw, json)
Hash identifier:          246nKzjolpdwKEgOQSnjzuS5G62/c3EKtQXEzWJ/J74=
Subject key identifier:   56:95:7D:91:51:60:9C:1F:F6:06:44:83:1E:9B:C0:78:3F:B6:45:67
Authority key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
Certificate issuer:       /CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Certificate serial:       01962E99ACB92B27FD840052FEB3A2503E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
Manifest number:          0815
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl (hash: nxAID0BFX439xgjwWdMGW3eEVFsU2xhZOcn3iD0JuVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ac:b9:2b:27:fd:84:00:52:fe:b3:a2:50:3e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=56957d9151609c1ff60644831e9bc0783fb64567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:88:7f:f8:06:15:01:ed:d2:77:ce:43:56:
                    11:90:9e:92:37:73:cb:f6:18:b1:e2:62:5d:5f:b5:
                    52:4b:4b:a3:ea:ce:89:c5:59:bc:1c:c7:54:e2:2c:
                    7d:ba:fc:1b:71:81:b6:72:06:8f:8c:19:82:34:e6:
                    fe:21:ae:7c:e3:f2:f5:7a:46:62:d0:52:04:0d:e2:
                    74:cc:37:37:bb:ac:e3:da:30:25:24:33:47:99:a2:
                    14:b5:ed:6b:6d:f3:9a:e9:13:4c:fd:ce:9e:92:99:
                    10:81:68:85:99:f0:54:50:3b:ca:11:4e:08:7d:9e:
                    54:0e:b8:33:df:50:5a:28:15:4f:f8:98:30:69:5e:
                    e6:22:ec:40:aa:6f:aa:93:85:8a:fd:fe:f6:db:90:
                    ea:2e:ca:f9:bf:da:1e:2f:8e:ed:ca:eb:80:2a:c7:
                    f3:30:06:ec:18:d0:ca:d5:ab:ee:99:f8:a1:c2:13:
                    40:58:2f:fd:df:6f:50:03:b3:19:d6:d7:ff:31:78:
                    18:92:6b:d8:97:eb:8c:fb:7a:6d:ee:9a:f0:18:be:
                    ea:1a:a2:eb:cd:2e:21:12:6c:08:70:9a:81:22:d6:
                    ad:3a:3d:29:e5:4c:4a:18:f1:30:01:09:8f:39:57:
                    87:2f:0c:db:24:81:f4:0b:77:4a:b5:39:7e:cb:19:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:7D:91:51:60:9C:1F:F6:06:44:83:1E:9B:C0:78:3F:B6:45:67
            X509v3 Authority Key Identifier:
                keyid:99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:d0:4a:ad:a1:10:51:eb:5f:70:7d:2a:21:c3:6f:1e:e2:
         57:f8:48:31:d8:cf:06:95:d1:4a:25:35:78:26:52:b8:ed:0f:
         2a:2c:8f:87:87:f6:f0:f5:8b:c7:2e:7d:ec:73:3c:3e:9a:57:
         fd:38:0d:d8:0a:fd:3f:15:ea:f9:57:4d:58:90:76:62:97:1c:
         e1:6c:94:43:1f:76:fb:b4:98:ae:16:84:e3:8b:84:c7:f2:b1:
         8a:73:2a:b1:59:26:c9:3f:e7:ba:b2:80:fd:69:9c:8c:c6:e2:
         f6:d9:3d:49:15:2e:3a:cf:a3:1a:b0:3c:19:83:f0:06:33:b5:
         40:9e:6d:b3:ad:11:ee:39:a0:b0:70:6b:c1:3b:3e:c6:bc:e7:
         d9:ba:8c:74:04:fe:5d:84:de:2b:54:2a:e8:86:f8:5f:1b:ed:
         b6:d3:28:84:fe:8f:c0:2a:40:23:f4:63:fd:b6:bb:bd:df:66:
         74:e0:15:49:c5:93:64:88:14:9a:db:68:29:85:d7:b1:d6:87:
         e0:06:39:a4:47:f0:9c:29:32:0b:67:64:eb:e1:83:bd:c5:35:
         36:7e:fe:b9:2b:96:18:f6:09:13:06:e8:eb:99:6d:45:26:0e:
         8e:3d:9a:ca:ed:74:d8:54:57:c5:7f:46:38:d1:91:8c:ba:12:
         d1:25:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----