Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File:                     cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier:          lioc/+2r5zHckVUfIgY07kDUowb6XPRQLLA2I9YUiX8=
Subject key identifier:   DD:52:4D:3D:53:87:69:8D:56:EB:01:B5:7E:D4:68:7A:BD:4E:3C:D9
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer:       /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial:       01962E61D8C477CC437B591BCD5BF41E2AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: /HPum/kmtUeytasR56xa5c21GGxNec7qyhrWvKu51cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:c4:77:cc:43:7b:59:1b:cd:5b:f4:1e:2a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=dd524d3d5387698d56eb01b57ed4687abd4e3cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:3d:7f:cd:ed:0a:c6:08:76:89:87:ff:3b:
                    9d:ec:4c:69:9f:c2:de:7f:92:1c:90:f0:4e:5a:fe:
                    40:7e:77:ee:e7:42:26:32:a4:bb:ff:d6:09:7c:a1:
                    f4:79:a4:fc:45:5f:5f:ea:55:a9:09:31:fd:b0:72:
                    3c:28:ce:38:3f:87:24:b0:f4:f9:d3:da:77:6d:59:
                    37:3b:37:b5:08:64:2b:1e:37:eb:81:73:aa:5f:b0:
                    0c:30:ca:13:15:bc:dd:b4:07:24:7f:30:cc:f2:f1:
                    29:54:48:ab:1a:79:b3:2e:6e:67:28:40:3d:c7:d9:
                    e4:aa:04:4d:4e:39:ab:99:a4:ab:7c:a0:05:19:0b:
                    50:2b:9d:e2:37:67:dd:c8:10:b7:0f:1c:54:f6:ba:
                    93:10:08:da:7a:33:c5:7c:b6:26:34:18:cf:28:79:
                    cc:7f:08:05:2e:8e:24:95:38:1f:bf:09:7e:66:ae:
                    53:1b:88:06:6b:85:03:a9:1e:4b:ca:af:a8:0a:ee:
                    5a:6c:9d:80:88:d3:dc:be:5a:cd:8b:6a:73:1c:5b:
                    20:8f:a3:42:18:07:00:71:df:f7:0f:f4:37:cf:76:
                    49:56:e4:de:1b:5f:98:e0:5f:07:15:ca:d4:c6:6d:
                    d2:f8:c2:d5:4c:db:35:b9:85:0f:57:3c:e9:ac:87:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:52:4D:3D:53:87:69:8D:56:EB:01:B5:7E:D4:68:7A:BD:4E:3C:D9
            X509v3 Authority Key Identifier:
                keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:49:a0:87:7e:38:34:54:3a:98:1b:f6:7b:32:7f:3e:89:
         7b:f7:52:17:21:54:d0:fc:61:1c:bc:61:3f:a7:3a:35:73:ed:
         f7:54:b6:f2:c6:4a:bd:3a:48:08:3a:fa:4c:87:94:3a:81:94:
         e7:3d:e3:51:18:18:54:e3:88:c4:51:f5:06:1d:b9:ba:63:f7:
         18:81:ee:aa:00:05:2a:4b:30:e0:a1:83:57:22:9c:58:48:12:
         c2:4d:e7:2e:21:07:ca:d2:16:61:de:7c:ae:bc:62:d4:96:e1:
         fb:3f:1c:89:40:94:21:73:30:67:32:15:b9:e3:5c:da:b8:3a:
         dc:81:a0:91:6c:c3:75:6a:4d:98:2b:fd:71:49:62:21:39:dc:
         cb:66:c8:3c:6e:c2:8b:6f:78:40:26:37:33:0b:be:63:20:61:
         48:d9:7d:9a:62:14:13:06:f4:df:06:ad:4b:4d:69:c3:3a:0a:
         bd:ae:3b:70:45:8f:6e:dd:65:a9:e4:78:0a:b2:32:6a:04:8d:
         36:bf:9f:75:d4:ae:ed:f9:95:20:ba:f7:83:31:bb:1e:af:51:
         55:d5:b3:24:0e:c6:82:01:a3:dc:7f:da:65:8d:5f:ff:0e:7b:
         05:97:1e:8e:d6:9f:83:7c:d0:f4:5b:94:0c:34:13:02:51:8d:
         0d:38:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----