Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft
File:                     S0w1pilFbgBJaPouJKSTIgIYW1Y.mft (raw, json)
Hash identifier:          VNAorI2ut3X62dH5/UM5ExXn08ilSF54gk77Wbkzmjc=
Subject key identifier:   16:4C:38:C0:8E:A1:24:DE:F3:AD:59:73:5B:9D:08:11:1E:3E:D5:DF
Authority key identifier: 4B:4C:35:A6:29:45:6E:00:49:68:FA:2E:24:A4:93:22:02:18:5B:56
Certificate issuer:       /CN=4b4c35a629456e004968fa2e24a4932202185b56
Certificate serial:       0195482375FBCC85140270FBF6FE4DFD4A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0w1pilFbgBJaPouJKSTIgIYW1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft
Manifest number:          082D
Signing time:             Thu 27 Feb 2025 16:00:38 +0000
Manifest this update:     Thu 27 Feb 2025 16:00:38 +0000
Manifest next update:     Fri 28 Feb 2025 16:00:38 +0000
Files and hashes:         1: S0w1pilFbgBJaPouJKSTIgIYW1Y.crl (hash: sjVQl311tf9cOdaJOFWtf38hGm4qKI8+oCIn0OXS0XY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:23:75:fb:cc:85:14:02:70:fb:f6:fe:4d:fd:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4c35a629456e004968fa2e24a4932202185b56
        Validity
            Not Before: Feb 27 16:00:38 2025 GMT
            Not After : Feb 28 16:00:38 2025 GMT
        Subject: CN=164c38c08ea124def3ad59735b9d08111e3ed5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:11:44:8d:7a:c9:d0:7e:1e:62:25:62:30:
                    e5:f0:09:6f:d3:fb:bb:86:f4:7d:d2:63:08:fb:5c:
                    e9:3e:69:2e:e1:39:2a:4d:ae:f6:b1:10:3c:b5:a4:
                    32:27:fc:fa:99:b2:f9:ce:ad:f2:b6:19:8d:02:23:
                    c6:b3:a0:15:e9:27:2d:c6:d1:cb:83:a8:40:23:bd:
                    ea:9a:b4:36:e1:13:13:bf:21:4f:8f:72:cc:7f:d7:
                    70:a2:7d:00:40:97:3d:65:d7:e4:f1:38:5f:88:d8:
                    79:59:6d:72:2c:ee:27:86:06:ee:e0:c7:83:cf:ad:
                    85:d8:0e:f7:c4:91:76:00:7d:9a:2a:d9:9b:ea:2c:
                    69:7c:77:04:23:93:5e:79:bf:57:e2:66:5c:42:c2:
                    4d:a4:5d:e1:15:6f:06:77:42:9f:f4:65:ee:b8:56:
                    18:56:aa:db:30:b1:a2:f1:91:df:33:c1:3c:5a:5a:
                    1a:21:88:36:c5:2e:c4:a9:14:77:7a:32:ce:32:13:
                    76:99:78:de:a1:56:20:77:eb:9c:3a:41:00:fe:ec:
                    53:8d:70:8d:02:1b:d3:af:ab:fc:53:92:56:d9:31:
                    75:f8:b6:2c:0a:7e:7c:74:7e:20:76:f8:0a:e4:a8:
                    dc:1e:b5:76:76:07:8e:f4:34:ac:ee:4e:22:92:22:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:38:C0:8E:A1:24:DE:F3:AD:59:73:5B:9D:08:11:1E:3E:D5:DF
            X509v3 Authority Key Identifier:
                keyid:4B:4C:35:A6:29:45:6E:00:49:68:FA:2E:24:A4:93:22:02:18:5B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0w1pilFbgBJaPouJKSTIgIYW1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:95:f2:59:ba:f1:68:8c:dc:00:db:82:8d:cc:6d:c9:c3:88:
         0f:74:1e:e8:2e:c5:ee:94:27:a2:5b:96:a9:3a:9a:8c:eb:90:
         56:f7:df:d0:1c:d1:c6:cb:41:47:16:38:3d:d2:74:d6:4a:b3:
         38:73:c0:f7:f6:02:4a:cf:f5:1e:e2:c3:d5:a3:c9:55:bb:be:
         f3:b4:81:a1:bf:a0:92:15:10:8e:83:4d:0b:13:f7:2c:d4:98:
         74:ce:e4:40:83:a8:38:1c:d7:1d:b7:21:f9:92:a2:8d:29:43:
         d5:8f:9b:05:10:a7:19:b4:18:f4:20:3f:dd:bf:18:0c:36:e2:
         6c:41:33:6f:53:1b:7c:fe:3a:8e:0f:2d:b6:c4:9a:f6:fd:99:
         e6:f4:83:eb:0a:5d:4d:e5:12:51:82:20:21:b8:32:76:79:57:
         8b:df:8a:c6:ae:4b:2a:ba:b7:e3:94:a0:b8:88:99:ce:e4:e5:
         a3:89:e7:e8:99:f3:a8:5a:9c:da:3e:9e:a0:79:99:f5:7c:b0:
         4f:c8:5f:57:c8:69:20:f0:0d:e3:60:03:ca:7b:0e:21:98:be:
         c8:37:8e:37:8d:0a:24:4b:50:0c:07:dc:81:af:f7:df:67:a9:
         9d:d1:55:a4:7d:97:bc:ca:c4:74:32:81:49:3f:fc:8d:92:f0:
         ad:d4:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----