Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File:                     RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier:          e33xAIPZbXjUtALmfSdBgkBgTKp+uln+8cd9XA4mEuw=
Subject key identifier:   9C:EE:7A:F0:CA:C0:7A:BE:6D:C4:2A:D2:15:D6:A6:AD:49:4E:F4:43
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer:       /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial:       01962DF4012198AF167F2794C43AE35300AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number:          063F
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: N+A5m5rEbeI1j1Iauooi1sbxNMymHCDUrSjIzW3wShg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:21:98:af:16:7f:27:94:c4:3a:e3:53:00:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=9cee7af0cac07abe6dc42ad215d6a6ad494ef443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:13:da:e7:51:d0:22:ba:ed:d7:d1:6d:05:
                    33:a0:ff:fa:60:8f:e4:70:68:f5:28:3f:79:a7:88:
                    22:ba:f9:88:9f:ac:fe:72:3b:fc:f4:4a:62:ca:dd:
                    2a:ba:42:57:aa:8d:9a:eb:59:ec:5b:dc:64:dd:1c:
                    89:d6:d8:08:15:ca:0f:13:22:95:a4:00:97:34:32:
                    91:b6:d8:e0:a7:d1:25:6e:d8:6a:e5:67:39:cc:b6:
                    02:7e:8b:c5:f2:73:6f:ab:fc:b9:db:d1:72:15:ab:
                    cd:96:95:7b:c7:db:ac:e0:d2:ce:2b:6b:ac:c4:93:
                    52:25:b1:6b:9f:8a:6a:b7:2b:97:b9:19:10:c3:28:
                    a0:64:c7:40:42:4e:e8:ab:4c:04:f3:3d:9c:45:45:
                    31:b9:0c:ab:49:9d:e1:71:95:e3:b3:60:f4:0f:fd:
                    2a:43:24:15:18:25:19:b9:8f:68:0d:29:09:29:36:
                    d9:81:8f:14:3f:02:d0:55:b8:24:ef:f2:0e:1b:cb:
                    c5:4b:b5:9d:83:1a:4a:f4:30:17:45:2a:e7:17:d0:
                    fb:c3:65:e6:8d:14:dc:dc:df:a6:25:6e:ea:b9:3e:
                    fe:7b:f6:f0:e7:d3:a5:5e:aa:be:59:84:6a:a7:c1:
                    ad:22:b6:de:05:ad:ad:97:f8:ca:27:b1:ff:b7:c4:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:7A:F0:CA:C0:7A:BE:6D:C4:2A:D2:15:D6:A6:AD:49:4E:F4:43
            X509v3 Authority Key Identifier:
                keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:69:f9:29:2d:a7:86:46:e0:db:24:98:57:8d:93:37:6e:93:
         58:86:7f:61:4c:23:58:4a:0f:af:6e:fc:7c:1d:ad:44:77:19:
         54:14:55:3f:0f:2c:59:85:b4:45:5b:ca:7a:e5:7c:b6:a5:38:
         0d:08:93:0c:c7:45:c5:64:0a:96:dc:36:e6:0c:c3:d6:46:14:
         30:8e:98:47:20:12:43:d3:4e:7d:50:dd:e5:fb:f6:2e:ba:3b:
         ea:6e:2b:8c:54:c3:57:54:8f:ef:b5:d3:8c:8c:95:3c:d7:71:
         38:8a:ad:55:eb:fe:da:a2:41:f4:18:c1:03:ef:0d:95:0c:b0:
         4f:fc:f1:2c:8b:0b:1c:da:38:b4:59:f1:68:2e:af:29:7d:3c:
         83:fb:a8:1c:d4:e0:8d:e9:0b:6c:9b:60:98:09:d2:f4:8e:48:
         5d:14:84:cc:ce:f5:d4:0a:73:b6:71:2c:dc:41:2a:eb:52:da:
         db:cf:3a:13:0d:1d:1c:47:12:c4:8c:5d:fe:90:4a:7f:dd:1b:
         4a:69:f0:5f:cb:a1:0c:6e:30:7e:09:17:4d:1c:45:ca:5b:4d:
         0f:55:b5:68:ee:7f:2b:60:9c:14:54:a6:aa:98:f7:c4:82:bf:
         a8:99:6d:0a:9a:8b:a0:e2:10:d7:32:5d:06:2b:3c:a0:8f:74:
         a0:90:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----