Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
File:                     Iu8SfmGVSrmJNlydukuMBkzu2fA.mft (raw, json)
Hash identifier:          SctdIlRxUE/IH//fYZJX1li/dNYfjeE4AnsgyGtPnzE=
Subject key identifier:   31:1F:F6:F5:67:BA:C4:44:E1:E3:2F:33:D2:A1:D5:6E:23:DF:09:87
Authority key identifier: 22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0
Certificate issuer:       /CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
Certificate serial:       01962DF3E9F7DF40FBC3C92CD8BC89DCF61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
Manifest number:          0341
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: Iu8SfmGVSrmJNlydukuMBkzu2fA.crl (hash: 8RsSYL6xOul0K6DjTxZb0dFrLP2zL4/aaofsQs28QRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:f7:df:40:fb:c3:c9:2c:d8:bc:89:dc:f6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=311ff6f567bac444e1e32f33d2a1d56e23df0987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:ef:51:7f:7f:d5:67:5d:af:4f:00:10:6e:
                    be:60:9d:56:76:0c:72:b5:e2:69:33:83:35:15:83:
                    0f:c7:88:f2:2e:b5:43:e5:86:e7:c4:38:21:fa:58:
                    3d:1c:7e:a2:7e:c8:2f:e8:47:28:33:7f:1c:4f:45:
                    ba:ad:cb:9f:1f:81:0f:b5:a5:60:54:44:bf:f9:bd:
                    27:b5:3a:45:54:e4:4d:7e:23:e4:56:28:14:fb:1b:
                    bc:cf:59:fe:b6:e3:b3:87:91:70:20:3c:94:9a:92:
                    d2:40:c8:7f:2a:de:34:45:75:bb:54:e3:d5:2f:c3:
                    28:38:c6:9f:2c:31:15:62:66:a9:5f:36:72:ce:64:
                    d4:77:c2:b7:e8:6c:54:82:58:67:db:74:e9:c9:41:
                    af:7c:4b:65:5b:80:5c:19:19:84:a4:9e:bb:96:e7:
                    4c:a5:cf:97:9e:53:c9:7a:1c:2d:56:68:35:e8:59:
                    73:89:f6:7e:c1:6e:7f:21:68:2d:f6:50:eb:b2:b8:
                    cd:93:e5:07:cf:f8:b5:76:35:0e:5b:11:9e:27:d2:
                    35:ba:47:d6:1e:80:bd:d4:89:a6:6c:a5:95:36:30:
                    d2:9a:3f:2f:e4:22:b2:0b:b4:c7:d5:60:7b:13:d7:
                    37:c7:38:0e:05:a6:32:c0:0f:03:84:67:b6:19:55:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:F6:F5:67:BA:C4:44:E1:E3:2F:33:D2:A1:D5:6E:23:DF:09:87
            X509v3 Authority Key Identifier:
                keyid:22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:74:f3:c4:bc:a3:06:02:bd:ee:6a:8e:07:49:ae:af:8f:2b:
         0b:cd:28:24:1b:8b:ca:8e:25:d3:1d:81:49:ff:ad:6c:0d:70:
         5d:30:75:14:9c:3e:ee:89:6f:17:a1:b3:c9:ff:11:b1:60:d0:
         39:b5:85:4d:0c:b6:bc:8b:4c:e8:18:c9:70:93:4e:f2:49:9d:
         26:a4:ae:b2:54:3b:c7:97:c1:32:3c:29:a0:49:86:4d:99:68:
         a2:3e:55:d0:14:44:61:d8:c6:72:8b:dd:26:93:01:0c:63:80:
         a5:d3:08:a4:18:4f:02:98:6a:58:3c:a3:e9:10:4e:d3:48:7c:
         43:19:5f:d7:d5:9d:24:ad:74:55:07:10:87:c6:12:e6:3f:c1:
         98:a0:77:9e:e9:02:54:d8:fe:e9:8a:0e:31:8b:45:73:4e:aa:
         75:85:92:2b:a6:d8:5e:d6:f8:54:ca:5c:23:27:ac:e6:8c:df:
         00:24:7f:e8:d6:80:4d:3d:2b:38:3f:0c:76:ac:0c:53:cf:b4:
         c2:9b:c8:80:94:78:99:97:a9:43:3d:d2:39:6a:3b:07:9d:f4:
         3d:85:a6:66:be:68:83:98:b2:b7:5b:73:35:01:7a:4f:5e:85:
         3f:24:58:e5:f0:f3:b9:ed:d5:a5:9a:fc:e4:40:5a:f1:13:95:
         b5:83:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----