Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
File:                     8KSyRplUYkr0JKVO8WdhwhWLJIM.mft (raw, json)
Hash identifier:          iILqT21hFIelnAUU5kfd2SVOwPnquOS0oLArKseqNRM=
Subject key identifier:   76:A1:D4:01:D1:BA:D8:FC:BE:60:90:73:1B:06:90:55:3F:1A:54:E3
Authority key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Certificate issuer:       /CN=f0a4b2469954624af424a54ef16761c2158b2483
Certificate serial:       01962F7493A83D3493500F8B4C7F7E1BC765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
Manifest number:          1447
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 8KSyRplUYkr0JKVO8WdhwhWLJIM.crl (hash: ccez1PQaHVrW00XfuqQTMp3WLTefmnj63jUhPMO60iU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:a8:3d:34:93:50:0f:8b:4c:7f:7e:1b:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a4b2469954624af424a54ef16761c2158b2483
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=76a1d401d1bad8fcbe6090731b0690553f1a54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:51:ee:fc:95:70:f8:b7:ec:21:25:4b:b5:
                    d9:d5:39:39:50:85:ca:25:0d:43:3e:60:75:81:ae:
                    03:ce:2a:7d:4a:60:38:84:5d:6b:c2:a8:bc:6a:38:
                    0b:9a:9d:ab:ca:9d:b8:c3:68:10:15:02:16:82:70:
                    9a:f8:5a:aa:33:b7:f5:27:20:b7:b7:0e:a4:41:54:
                    ff:60:a6:b1:72:ca:b6:77:bc:22:63:22:1f:c6:67:
                    31:82:a3:82:4c:71:95:d2:ef:6f:54:2a:69:f9:e3:
                    15:95:49:da:d7:53:8d:21:e4:09:6f:ad:b0:71:30:
                    cb:f4:a6:2b:65:60:f2:d7:d6:f6:46:01:10:5b:a2:
                    39:77:6d:8d:50:49:30:97:a3:d2:29:d0:4e:1f:c6:
                    98:23:02:90:ae:56:40:e4:96:f3:c2:4c:37:25:8a:
                    1a:fb:7a:d9:1e:a5:a8:b2:ce:32:62:77:92:e9:c2:
                    46:7b:e3:8d:bf:25:95:4c:fa:43:63:b3:3a:ff:3d:
                    f5:3f:50:8c:9c:89:94:cc:1e:a9:ff:8e:e5:58:4b:
                    c3:dd:cf:1d:c9:52:4c:8b:57:25:ee:a2:da:2a:f0:
                    bc:98:94:20:b9:93:8c:a8:71:7b:4b:39:70:87:f3:
                    d5:e8:1d:5a:64:6b:c1:c3:cd:67:c7:a9:5b:cf:4e:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:D4:01:D1:BA:D8:FC:BE:60:90:73:1B:06:90:55:3F:1A:54:E3
            X509v3 Authority Key Identifier:
                keyid:F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:e1:b2:c8:11:74:95:8c:b5:31:a2:37:08:35:78:fd:a2:
         8b:44:46:65:45:99:a0:4c:33:e8:0a:f6:33:1a:23:0c:0a:52:
         6e:56:f5:a0:22:fb:16:0d:bc:24:9c:d2:2b:4d:a8:0e:1d:33:
         36:28:90:75:66:0b:90:b4:b5:cf:1a:96:b4:7b:61:d2:2d:69:
         1c:ee:32:9e:60:00:ce:ee:8b:4f:d5:5f:0c:ab:30:5a:2b:3c:
         ca:ef:e7:63:0b:1e:21:e2:e5:a0:d5:b0:d8:d4:39:67:fd:2a:
         97:73:30:7a:a5:1b:66:2f:ff:b4:3e:d6:83:31:9e:f4:42:7c:
         67:e7:76:5b:30:9a:97:44:38:67:af:52:34:08:ee:86:d9:29:
         0c:83:33:80:37:2c:46:16:21:bf:2c:15:0b:78:d1:b6:8c:71:
         ff:ce:6a:21:22:ba:06:d4:97:e5:91:bc:9d:c7:93:f0:eb:db:
         64:c1:e5:03:77:5f:a4:01:c0:72:e0:dd:ad:d5:ed:2b:62:45:
         a6:a2:d7:24:07:af:f4:9c:a7:fd:5a:d6:61:ae:62:b5:f8:04:
         78:44:fa:f0:0a:cd:16:2d:16:6d:09:35:d0:9d:74:93:2a:8e:
         28:76:0a:97:14:34:80:6b:d6:37:75:52:28:c9:36:10:e2:90:
         49:89:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----