Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File:                     MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier:          KkutZAGYMvmsAwzzKjAdjVs0kLUnw6SbKnbA9yDy4fk=
Subject key identifier:   7B:ED:01:2A:07:48:A9:C4:06:18:71:4A:0D:4C:5A:D9:A3:B4:7F:07
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer:       /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial:       01962FAB80764F5C361F0C339214DB4B32C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number:          C4
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: wHVPOrPdEgV3NVaWBCGgnRIJoZMGy2asLTvU5VWhADc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:80:76:4f:5c:36:1f:0c:33:92:14:db:4b:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=7bed012a0748a9c40618714a0d4c5ad9a3b47f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:3b:5c:d9:81:de:2b:37:bd:3a:77:5d:86:
                    51:54:db:fd:a5:53:ac:25:1d:71:5d:29:25:b7:e5:
                    ac:63:7e:32:43:c7:82:73:5b:f4:c3:dd:68:87:a6:
                    ed:07:fb:79:24:76:46:58:45:ce:99:29:78:74:3a:
                    34:d7:fe:9c:3d:e3:fa:a4:83:47:99:35:e2:62:d9:
                    bc:c4:ba:9e:a7:43:d1:ef:29:0c:7d:18:f2:02:ce:
                    74:a5:f1:2b:2c:de:3e:a9:31:3e:0b:b0:80:84:6d:
                    9b:95:8c:56:e5:54:c7:58:fb:7d:1d:a2:dd:08:37:
                    01:83:26:0c:1c:f5:88:8f:e8:92:88:91:cf:46:01:
                    fd:8a:4d:36:3a:8d:31:13:b0:70:c6:45:47:9b:14:
                    e3:15:ad:14:40:06:4b:c7:1a:fe:57:c8:be:e3:fb:
                    09:ce:cc:97:85:c8:40:9b:5c:1b:34:b4:b5:71:36:
                    f5:b5:76:60:67:18:56:a5:ee:a4:d1:f7:3d:e8:82:
                    0b:d0:4d:bd:25:3d:fc:70:1a:60:dd:f4:f0:eb:54:
                    19:48:8c:d0:e1:fc:b4:d2:3d:56:e7:70:84:ec:34:
                    df:1d:9c:75:49:52:cf:5d:42:f4:61:2c:ae:f4:b5:
                    93:2b:ad:6e:96:fa:0b:f4:13:ba:7e:6a:22:a2:b0:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:01:2A:07:48:A9:C4:06:18:71:4A:0D:4C:5A:D9:A3:B4:7F:07
            X509v3 Authority Key Identifier:
                keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:23:e1:4a:7c:2d:97:a5:ab:a8:68:12:73:1d:b5:aa:4a:
         6e:6e:64:7a:79:77:33:08:c1:72:8c:93:97:12:3d:7e:75:a6:
         02:d8:e6:ad:9e:1f:c4:79:a3:4f:61:f6:60:c7:f8:13:d1:c4:
         bd:7a:b1:cb:3c:0b:42:a0:51:27:c4:6b:e4:a6:fa:8c:27:17:
         76:2a:81:70:bc:0d:64:4d:f2:89:09:ef:9c:bb:67:53:b8:f7:
         f5:2e:dc:5f:50:ba:94:ef:03:ce:5a:2f:95:a9:96:9d:c6:ef:
         7d:ff:25:80:10:2a:b7:43:ca:22:f1:cd:d9:b8:ae:74:d9:85:
         75:db:51:e3:53:5f:ff:14:5e:16:cf:2e:14:8d:a8:95:28:81:
         d1:a3:93:a5:d6:ec:7c:ff:4f:ba:18:22:fb:a8:8f:e2:36:47:
         60:ca:de:f9:79:66:09:87:1f:04:fb:75:86:be:42:56:c2:2a:
         d5:18:78:ce:4d:8d:93:3b:65:7c:1c:27:c5:00:eb:8c:e9:a2:
         af:14:16:f7:99:3a:18:7a:e8:42:93:8e:2e:fb:fa:57:3e:8a:
         8e:18:02:f6:18:15:4d:05:ab:66:45:ff:ef:59:1c:69:ee:07:
         bb:2f:8d:51:23:d9:96:7c:ab:da:71:de:97:51:61:01:1b:fc:
         ad:80:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----