Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File:                     1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier:          gtVyYq81tVD2yxPZJf4lTkpizKPP6UDmoFSgh2km+60=
Subject key identifier:   C6:E8:3F:A3:5E:AE:D9:55:1D:D4:F5:61:BB:87:D6:97:6C:06:9C:D5
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer:       /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial:       01962F74942E6C2D109739A77CF24F1881F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number:          0202
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: gIKDCB4/f7WXiOlgCCuHV+Glrq2T92TkR4tT1upWckc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:2e:6c:2d:10:97:39:a7:7c:f2:4f:18:81:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=c6e83fa35eaed9551dd4f561bb87d6976c069cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:7b:5c:45:c1:d1:6a:40:86:f4:a2:06:be:
                    2f:44:69:bc:29:79:fd:9e:0c:96:1a:29:f9:3e:79:
                    44:5f:47:86:53:a6:d5:a0:f3:11:3e:7e:d6:17:a6:
                    22:38:0d:89:6e:1f:07:d8:31:0a:93:76:3f:95:0f:
                    74:4c:36:e7:ea:be:fc:f8:60:2d:80:94:b8:c5:b8:
                    77:b1:a7:cd:76:9f:87:d7:d1:eb:44:01:98:71:d5:
                    75:ed:b1:05:22:4c:39:b4:ff:e0:8a:97:a9:5b:77:
                    99:ce:62:da:12:ad:2c:2f:42:b4:48:03:35:3d:19:
                    3b:a2:c8:2c:c2:65:73:3c:fe:81:52:6f:87:e1:d4:
                    cd:cb:2f:b5:8c:8a:10:c3:2f:d4:e3:b1:fd:ff:47:
                    75:de:72:4d:98:e8:28:73:a8:02:8c:a1:b4:b1:68:
                    37:87:d9:42:7e:1f:7c:6e:a7:2e:f2:f8:df:71:09:
                    53:58:f2:b5:dd:10:1d:55:38:9b:1b:fd:49:6a:4d:
                    63:de:99:a7:81:98:4e:55:67:42:34:ef:9d:87:2b:
                    fd:f7:7e:6e:6f:67:9e:73:25:de:d3:49:dd:55:52:
                    1c:2e:70:2d:59:c8:3b:9e:8c:e9:63:b3:1a:d3:e1:
                    19:c0:33:07:c6:e0:b6:d3:b2:34:85:62:ef:00:d7:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:3F:A3:5E:AE:D9:55:1D:D4:F5:61:BB:87:D6:97:6C:06:9C:D5
            X509v3 Authority Key Identifier:
                keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e7:9e:1a:65:d2:d8:70:b0:8f:82:a1:f0:cc:5c:78:31:e9:
         25:2e:06:bf:17:44:d8:29:a3:c5:c4:97:01:ca:24:95:ac:d1:
         22:92:e3:1e:00:b3:95:04:28:9b:18:c2:4f:a1:51:ab:32:4c:
         3e:5a:ca:c7:c6:19:15:6c:39:e2:6f:48:72:54:2b:ba:6c:91:
         d7:ba:2e:ca:7d:61:73:9f:bd:d6:0b:41:37:58:fc:df:8a:19:
         71:6c:1e:e0:c6:95:43:5e:89:11:41:de:85:73:68:05:ab:19:
         8e:73:72:ab:14:0c:d0:1a:6c:81:a2:e5:67:0a:14:e8:1c:86:
         6c:b6:53:f8:a1:41:b9:f7:0e:e0:ac:18:e4:6b:54:8f:e9:8a:
         bb:fb:9e:d0:e2:98:2d:cd:f2:95:c0:47:f8:46:91:e9:3b:f0:
         31:a7:2c:f4:de:bb:a9:63:2c:e3:16:eb:f4:3c:00:d7:b6:9d:
         5f:cf:e0:04:84:71:aa:3a:ab:11:4c:e1:4f:30:cf:64:9c:c1:
         3b:5c:6b:48:08:15:1c:a0:ea:6e:d0:35:10:cc:36:be:0b:7a:
         67:7d:47:ba:93:15:c1:6d:6a:ba:6c:07:ee:e7:eb:b4:90:63:
         e1:5e:75:d7:62:5f:1b:4b:9b:1e:0b:10:68:d9:87:31:52:8f:
         fc:d3:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----