Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
File:                     UNlf0yarPwj3bczGVrs-Hia03Fc.mft (raw, json)
Hash identifier:          MSZCxZtYFWJj7mFYy0inS2hpxC/lNEm23qPkUAPe4p0=
Subject key identifier:   22:F3:21:FD:36:13:86:1F:F3:A7:35:A8:FB:36:0F:91:EE:EB:54:48
Authority key identifier: 50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Certificate issuer:       /CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Certificate serial:       01962F063C44038D91ADB2AA2C232CE07F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: UNlf0yarPwj3bczGVrs-Hia03Fc.crl (hash: GOID6j6EHYbuclEKGErKre3i2exRkqaXsHDExH2lsmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:44:03:8d:91:ad:b2:aa:2c:23:2c:e0:7f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=22f321fd3613861ff3a735a8fb360f91eeeb5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:e1:89:37:d9:03:9e:d1:ee:fa:a3:c2:a1:
                    ce:42:b8:f6:d0:34:83:58:a3:7a:be:29:9f:2d:4a:
                    73:9c:7d:dc:16:1e:4d:6a:b9:0c:91:96:9d:b5:5b:
                    ea:11:ca:4f:0c:45:8f:1b:e1:32:87:a3:4f:10:81:
                    de:0e:1c:8c:89:09:f9:45:c5:91:ea:fe:f7:10:c2:
                    d0:b5:c1:ec:e5:e1:83:df:0f:b8:7b:d6:0b:ee:d1:
                    8e:49:f1:00:46:3e:e3:a2:4a:e2:bf:e2:21:64:28:
                    ac:b9:3b:a1:04:d2:29:bb:5a:21:c1:48:3b:58:c6:
                    71:6b:90:73:70:c5:af:e5:79:65:4d:2b:11:71:9e:
                    a0:c6:49:67:49:c9:4c:eb:e7:4c:b1:e6:5f:01:35:
                    0b:51:4f:f5:cb:1a:95:86:55:c3:9d:66:4e:39:b9:
                    9a:93:ff:c2:e9:f2:a0:90:38:3d:0b:f7:f2:cb:7a:
                    57:63:1a:a8:43:1a:a1:4c:cd:30:03:8b:d2:0e:92:
                    9b:fd:5e:27:90:b5:a8:ea:90:0e:b0:29:a1:64:2b:
                    dc:df:9b:70:5c:95:1e:1c:c2:95:93:18:c8:e5:2c:
                    3b:f4:b1:57:f2:e3:d2:56:89:b7:8a:67:fa:c9:b1:
                    f9:f8:ed:01:18:6a:f8:9b:5a:24:2b:96:fc:08:29:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:21:FD:36:13:86:1F:F3:A7:35:A8:FB:36:0F:91:EE:EB:54:48
            X509v3 Authority Key Identifier:
                keyid:50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:5f:b3:a0:90:69:2d:68:b2:f2:e2:60:23:6b:05:a0:d9:
         7f:65:a9:3b:b8:76:32:8e:07:9c:4c:5f:f3:9b:8e:a5:c9:d6:
         dc:55:15:13:3e:4a:78:fa:33:eb:b9:02:4d:07:ff:06:33:fa:
         74:84:a0:b3:fd:ff:44:29:94:b6:83:b2:5b:81:88:a7:c8:8f:
         c3:3f:ec:42:67:5d:63:0b:a9:d3:a5:0b:7d:b6:a1:a4:c6:3c:
         6e:25:b2:fa:c2:36:2f:16:17:95:a5:ec:23:e6:be:1e:b3:fa:
         6b:c5:28:fb:3a:af:38:21:98:0d:77:08:23:01:21:80:21:1a:
         62:e8:58:d1:a4:05:5f:69:4e:86:24:d1:1e:ac:a1:35:51:4d:
         76:f4:2f:84:00:d9:09:2c:b8:8b:86:25:e0:e4:df:e5:76:00:
         05:45:65:29:8a:37:d9:85:0e:a4:63:ff:17:2d:56:11:e1:ac:
         9d:af:73:34:df:81:8c:e8:ab:22:74:35:63:d2:92:b4:08:e1:
         ad:f7:2f:64:d7:1a:b9:32:9b:d3:9f:7f:f0:0d:32:19:a3:2b:
         1d:03:f9:74:ba:fd:f3:3c:68:78:60:e7:d4:05:45:48:fc:43:
         37:bd:07:66:b2:d4:55:d4:66:3d:f0:6f:38:e3:cf:92:20:c8:
         e4:fb:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----