Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File:                     MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier:          8q/V8tdR4YekV2kiw4DA1l68ZuujCIMNRRr6Ko700c0=
Subject key identifier:   F1:A6:E8:7E:33:DF:AB:A6:85:BB:F1:3B:70:2A:9F:52:F1:A4:01:CA
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer:       /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial:       01962E98F38FDF473AFAC966C4F6A467C5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number:          1222
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: mZXrwdEZZ/EMygQFNLBugeab8R7SmA6S/S3FNR266+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f3:8f:df:47:3a:fa:c9:66:c4:f6:a4:67:c5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=f1a6e87e33dfaba685bbf13b702a9f52f1a401ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:d1:4c:58:c4:63:84:b2:df:5f:1a:e2:49:
                    37:ea:b4:6a:9a:dd:94:56:1b:7a:57:30:22:db:6b:
                    7c:18:8d:4d:5d:ed:4b:e2:86:a6:2e:2f:8e:7c:01:
                    2f:dc:9b:40:51:b4:9a:13:a7:13:89:1c:57:12:62:
                    5b:21:0d:cc:db:13:bf:e5:82:3a:c1:9b:00:80:c3:
                    9e:0b:8d:6a:af:c7:b2:bb:f4:50:b4:26:ac:aa:5a:
                    fd:60:01:72:81:1c:7f:fa:ce:e3:8c:9a:d5:5d:85:
                    d2:ed:4b:76:81:f1:05:0d:26:38:ba:ec:43:ad:8f:
                    6c:27:41:39:fb:99:0a:d5:3e:72:7d:ed:c0:c7:3e:
                    34:6e:04:5d:47:b1:5f:3f:bd:fe:87:d6:0c:c1:06:
                    20:e1:b2:c3:b4:47:07:79:02:d0:db:92:a3:dc:84:
                    86:aa:33:dc:ac:4a:f5:a7:c0:1d:56:f9:b0:ca:9e:
                    61:91:fd:ba:c5:37:5e:3c:78:b9:50:b6:7c:ef:19:
                    35:90:66:38:4b:c6:13:65:71:8b:fa:8b:b3:dd:f5:
                    e1:c4:34:9a:47:9e:79:12:73:73:f1:b1:c0:36:69:
                    90:f6:74:69:bb:a7:b1:44:e5:4b:f7:94:30:be:07:
                    ec:79:75:8b:10:ed:1f:b4:bb:ae:95:77:3f:b7:11:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A6:E8:7E:33:DF:AB:A6:85:BB:F1:3B:70:2A:9F:52:F1:A4:01:CA
            X509v3 Authority Key Identifier:
                keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:1a:10:7d:01:97:cf:08:55:af:f9:f9:03:bf:d9:a0:93:
         ac:fd:8f:a5:62:c4:8f:bd:b8:9b:28:b5:52:1b:35:b4:46:ec:
         0a:00:e6:3f:9b:d5:6e:2b:4c:f4:6a:98:af:1d:fc:2b:74:37:
         f5:33:73:ad:03:6f:3f:d6:22:8d:c0:2c:d0:4d:61:aa:45:42:
         51:2c:22:33:19:97:aa:c7:96:a5:1e:b7:81:97:8e:ce:57:d5:
         e0:fa:16:f0:0f:11:a5:82:a2:a7:3b:06:f5:17:e1:71:3d:a6:
         85:35:c1:85:2f:02:ad:b8:d1:ca:b7:59:35:ef:50:24:d4:54:
         27:58:fe:10:09:6c:a7:a7:20:7a:c0:d9:5b:32:e5:dc:a6:f2:
         13:a2:18:f1:fb:04:87:99:fe:e0:1e:5a:bf:52:93:b7:2b:5f:
         82:45:e3:aa:74:47:c2:b2:1b:85:83:8a:81:eb:67:31:31:6e:
         c1:4f:be:9f:6a:af:0d:e3:c2:59:f0:73:ef:2d:46:6c:ff:67:
         aa:3d:8b:8d:46:ed:6d:1e:3d:ee:c1:e8:7b:f7:01:d1:77:c1:
         6c:ad:38:c1:7a:60:1e:2a:47:0a:f2:2f:aa:6e:3a:8f:81:05:
         b1:fc:c1:75:78:20:85:a7:9f:f8:ce:0b:7e:9b:b9:74:25:13:
         6a:02:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----