Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File:                     sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier:          Plxr0WynFMC20kF6IaLmRwBprLFpvVBbYIRzwM4AVcc=
Subject key identifier:   70:DF:CB:4F:D9:10:FD:05:D0:73:F4:7E:DD:14:EC:98:23:34:4C:29
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer:       /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial:       01962FAB62EAB69BE3D6B98B490F1FB64380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number:          022C
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: D00Gijj90CgD9IG/jRzaGknx4hSx4StQuH4GZ6+bWrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:ea:b6:9b:e3:d6:b9:8b:49:0f:1f:b6:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=70dfcb4fd910fd05d073f47edd14ec9823344c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:a1:b8:d7:bb:51:f0:72:3b:79:b9:24:4e:
                    58:af:f9:ee:ce:20:da:af:18:88:7c:ab:7f:31:aa:
                    53:31:79:f2:df:bd:c8:bf:0b:64:d0:61:24:ce:05:
                    a1:5b:62:f3:c4:4a:c4:c1:75:83:7f:69:05:dd:eb:
                    6a:ba:10:e1:92:d8:d1:9a:0e:05:e0:d9:e1:9c:70:
                    a3:b0:58:a1:97:14:84:05:d6:e4:9a:ba:94:61:d4:
                    0d:bb:e9:72:23:76:35:a5:c4:23:30:c1:4e:86:31:
                    e6:79:aa:8f:5e:c2:35:c7:d5:1b:b0:e9:01:e7:ff:
                    42:3d:57:10:18:83:ac:f9:27:40:76:b7:b1:0d:d9:
                    2c:6c:82:48:4d:43:a3:0a:9d:2d:96:bc:bc:c6:7e:
                    05:b5:54:3e:82:bc:45:f4:dc:c4:f9:3c:1d:aa:ad:
                    4f:92:e2:61:0e:43:21:7d:3e:26:55:dd:9d:78:8f:
                    97:11:2e:82:43:54:0a:6f:1d:16:a9:d2:50:b2:00:
                    d1:2c:f6:fa:0b:3f:0e:5e:e8:df:d3:9f:6c:07:a6:
                    1b:78:1a:3b:c3:6d:78:9e:30:ca:e0:e3:2b:6a:38:
                    e8:90:14:be:fc:89:ca:33:0c:bb:2d:c5:94:73:15:
                    17:87:ab:8b:ec:d9:b6:86:17:89:d7:16:57:f4:c7:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:CB:4F:D9:10:FD:05:D0:73:F4:7E:DD:14:EC:98:23:34:4C:29
            X509v3 Authority Key Identifier:
                keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4f:7f:6f:b9:76:ae:67:dd:99:e9:8a:77:12:a4:e4:c0:75:
         4b:af:8a:3f:b3:1a:0e:f1:16:f2:48:49:92:b5:e5:3b:df:89:
         68:f7:57:cc:12:61:9d:37:a8:1a:37:0e:f7:2d:67:9a:5c:5d:
         d2:e9:1b:de:3a:e6:62:2c:57:6d:4f:6a:97:0d:69:8b:24:e3:
         3a:79:49:cf:eb:4a:8e:fb:d3:d8:30:cd:ef:35:96:a5:de:d2:
         21:94:ea:c8:3b:1b:06:97:2a:c0:45:03:e8:70:45:e2:7f:53:
         e7:76:dd:99:96:fb:ed:46:b4:c0:c2:76:6b:8a:2b:e4:3b:a2:
         d8:3b:30:18:a5:78:bc:21:42:d6:b8:bf:13:e4:bf:65:89:92:
         25:10:1e:84:ea:c3:12:ab:95:c5:a1:e2:be:15:1d:12:a5:9d:
         0c:09:64:35:04:8c:ca:b1:5e:b5:38:91:d2:6d:03:46:61:81:
         bd:10:71:d8:4f:cf:dc:c9:7c:b5:17:c9:21:c9:ba:54:a9:a1:
         3c:72:73:e9:2b:c7:60:d1:98:2f:f8:23:92:a8:60:49:fc:f5:
         e0:d6:56:b2:0f:5e:ba:4b:2d:95:dc:40:52:c1:99:aa:85:f1:
         bc:fe:d6:42:49:3d:82:56:f7:43:d4:92:94:f6:de:b0:0e:60:
         21:c8:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----