Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/55cbef-58ec-4014-8667-2e2b56b415c1/1/PDetizomkODPRy2ybo_isWgBkiQ.mft
File:                     PDetizomkODPRy2ybo_isWgBkiQ.mft (raw, json)
Hash identifier:          ydUVCLEWYw/uLBIsF8RJFa7JV3oWGgE5M94UPpVRXG8=
Subject key identifier:   DF:F8:5B:2B:D6:0A:A6:36:9F:CB:BA:65:74:4C:A7:94:0D:74:C7:E9
Authority key identifier: 3C:37:AD:8B:3A:26:90:E0:CF:47:2D:B2:6E:8F:E2:B1:68:01:92:24
Certificate issuer:       /CN=3c37ad8b3a2690e0cf472db26e8fe2b168019224
Certificate serial:       01962F06B758770965BEEC1C6A07C7A66F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDetizomkODPRy2ybo_isWgBkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/55cbef-58ec-4014-8667-2e2b56b415c1/1/PDetizomkODPRy2ybo_isWgBkiQ.mft
Manifest number:          130B
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: PDetizomkODPRy2ybo_isWgBkiQ.crl (hash: z266v2E7t6rwku9ZvwJmwFIEGCw6bjrIV8AqIFgQj8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:58:77:09:65:be:ec:1c:6a:07:c7:a6:6f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c37ad8b3a2690e0cf472db26e8fe2b168019224
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=dff85b2bd60aa6369fcbba65744ca7940d74c7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:0a:16:dd:16:0d:6b:56:e3:d7:6e:6d:7a:
                    f0:37:a7:17:ad:4a:c3:36:59:ac:ce:d7:84:30:a4:
                    11:3a:0d:49:38:22:12:2c:76:7c:8b:5f:b9:a0:0b:
                    38:3a:5e:25:c2:49:1f:3b:54:18:43:8f:2b:8d:20:
                    f7:58:3d:70:8c:0e:21:93:30:a5:02:d2:ef:21:cd:
                    e8:d0:e7:0a:b3:90:bd:68:bc:d2:f4:df:1d:5e:38:
                    81:5e:ae:56:45:f4:46:12:27:93:c8:7f:fb:01:52:
                    12:95:9c:af:2f:f9:54:f6:fd:c3:2f:f6:98:43:3b:
                    56:89:5d:5f:ad:5b:8d:c7:4e:76:28:fd:ee:b2:7e:
                    e9:31:d3:c0:85:21:93:9d:f9:e7:54:ba:d0:29:60:
                    b1:71:4a:fa:27:43:08:0c:8a:fe:9e:77:db:0f:5b:
                    6a:99:50:74:ba:08:d3:33:de:c5:54:b1:2a:e1:d6:
                    ed:8c:79:31:99:70:cc:74:2f:2d:4e:54:4c:74:d8:
                    b8:13:9e:bc:7b:de:d4:11:dd:f2:24:5b:f5:7d:9e:
                    62:6c:02:79:53:aa:8a:57:8c:70:01:e8:92:6e:c8:
                    8d:4d:7c:8e:7b:41:af:09:93:29:e2:9f:21:d4:bb:
                    50:6b:d4:6b:a2:01:be:bc:5b:55:18:49:e3:ea:d7:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:5B:2B:D6:0A:A6:36:9F:CB:BA:65:74:4C:A7:94:0D:74:C7:E9
            X509v3 Authority Key Identifier:
                keyid:3C:37:AD:8B:3A:26:90:E0:CF:47:2D:B2:6E:8F:E2:B1:68:01:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDetizomkODPRy2ybo_isWgBkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/55cbef-58ec-4014-8667-2e2b56b415c1/1/PDetizomkODPRy2ybo_isWgBkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/55cbef-58ec-4014-8667-2e2b56b415c1/1/PDetizomkODPRy2ybo_isWgBkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:12:70:ee:f2:14:c6:9a:28:2f:1b:6f:26:1c:cd:d0:d9:66:
         07:72:4e:57:56:d9:aa:ae:7e:69:84:2e:51:3a:bb:0d:c6:77:
         7b:fe:e4:2b:24:e6:bf:13:b9:37:27:e7:d6:4c:98:db:57:b4:
         a8:c8:62:d2:e8:d3:d9:b0:e1:b1:db:93:25:09:24:8d:76:1a:
         32:10:62:ee:b5:bf:81:21:8d:89:0a:dc:33:09:31:6e:d6:44:
         d1:fb:95:d7:3f:09:6c:8f:53:9c:4f:98:92:45:45:cb:71:71:
         67:10:98:91:10:ec:f4:3d:3d:90:b8:5a:6f:a7:d7:a0:7f:d1:
         47:49:ee:b8:66:5c:cd:eb:53:89:0a:16:63:7f:c2:01:a4:73:
         60:87:b6:d7:eb:07:60:c3:5f:f6:63:67:af:e9:57:29:1c:54:
         53:99:eb:9b:f2:49:23:2a:8b:bc:8f:ef:29:3f:e9:84:cb:e5:
         bb:6b:a0:54:6b:f5:60:8c:b7:df:61:1d:9c:68:7b:28:7c:40:
         2c:f5:3a:a9:b6:ef:a7:cc:e3:70:00:f9:ad:51:2b:d7:82:43:
         c1:e7:ad:73:a7:75:5f:74:a6:49:f1:f5:c5:e5:b0:c0:8c:a5:
         90:13:6b:14:19:98:a1:5c:ba:7d:da:78:b8:f2:18:b4:1a:10:
         1c:22:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----