Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File:                     1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier:          n5N1ubxY036ylUACk0ZOVjWPkYrcqPE47hgxU4xyutM=
Subject key identifier:   CD:3B:36:F3:40:30:5C:3D:0F:0F:01:35:39:C0:EF:44:F7:8C:04:E0
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer:       /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial:       01962DF4100BE6EA8B846DCDB8F28D160943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: T1fiJFlpWVNrAo9ibD19FgqJnRYHU8SAgdxgXdUyfA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:0b:e6:ea:8b:84:6d:cd:b8:f2:8d:16:09:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=cd3b36f340305c3d0f0f013539c0ef44f78c04e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:e9:a4:87:38:25:1a:05:28:4c:67:5b:dc:
                    b6:12:16:b1:0d:a7:8e:81:93:42:b2:2e:27:97:bf:
                    ba:7e:73:5c:32:69:cf:bc:7c:eb:ef:6e:ed:51:46:
                    cc:08:b9:b1:e6:43:6d:40:03:b8:dc:d1:8b:8c:48:
                    88:a6:07:5d:4a:08:e4:54:39:ab:2d:2d:19:76:1f:
                    60:46:14:18:df:d9:2f:99:27:b9:7d:45:5f:4e:bf:
                    75:89:c8:52:db:a0:99:e4:86:a5:f0:c9:34:37:f9:
                    11:e5:08:bf:b7:0b:40:02:7f:d5:54:57:b2:14:4e:
                    f0:dc:76:12:2d:6f:84:bf:35:d0:bd:f2:24:59:a4:
                    d2:86:58:44:ec:91:42:10:7a:6a:f2:c1:db:4c:02:
                    96:a6:67:7e:4b:18:7d:ce:05:05:81:1a:bb:fd:da:
                    fb:2f:eb:4f:2b:9d:c1:e3:a0:f1:a7:6f:eb:79:b4:
                    4b:ae:1f:00:e8:ee:f9:fd:b3:6b:45:c6:c7:e9:67:
                    da:03:e3:31:89:47:3f:b8:28:c1:da:2d:3a:38:7c:
                    af:69:9e:d0:f8:a2:14:0b:aa:bd:d8:4b:61:41:9f:
                    46:b8:3c:c0:f4:b0:13:8d:e3:66:74:15:0e:e0:ba:
                    c4:e3:d2:2e:86:94:c0:82:26:2d:eb:da:81:32:3e:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:36:F3:40:30:5C:3D:0F:0F:01:35:39:C0:EF:44:F7:8C:04:E0
            X509v3 Authority Key Identifier:
                keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6c:5d:f8:49:73:fc:57:b5:6d:a1:98:f9:54:0f:d7:99:4b:
         02:51:25:74:0b:c7:3a:3b:00:09:88:f2:80:fb:0b:f3:d2:b2:
         a1:a0:bc:c6:51:17:61:f2:ff:ab:09:b0:c0:2f:99:ef:c2:7e:
         30:d6:dc:3e:fa:6c:13:9e:c4:5a:d0:7c:1e:9c:2f:49:6d:35:
         26:bf:33:26:6c:28:e7:d5:ac:c5:4b:b8:4d:d2:f0:2f:13:a3:
         7b:d3:76:82:dd:5d:3d:56:57:bb:5e:82:ef:2b:6d:fc:6e:9b:
         d5:ad:17:1e:9f:5b:8b:d4:5b:6b:98:4b:3e:fa:cb:be:c9:08:
         f1:9e:46:8e:d7:59:fe:63:f0:96:68:5a:29:e3:73:fd:17:5d:
         e4:21:3a:ab:68:58:02:da:31:c5:60:10:f6:84:a4:fb:09:2b:
         7a:dd:51:5d:fd:7f:ca:0d:0b:82:96:c7:62:18:44:2d:ab:03:
         d7:29:d3:73:eb:6c:fd:e7:1b:d8:0e:e7:34:e0:79:8a:b6:22:
         f8:a6:6a:67:fd:6e:12:07:1c:f5:d0:3c:ef:71:95:5e:f4:14:
         06:4f:77:fb:4f:b2:ac:b0:63:45:16:45:b3:e5:e6:0f:20:e3:
         ce:10:cf:ba:5d:4b:6c:a1:db:0e:ca:3a:37:0b:af:9f:15:56:
         45:f5:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----