Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File:                     dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier:          p2ki/nsBlITe2cwDmoqnB8oBEeM6c1+x1TSNZx56KE4=
Subject key identifier:   01:68:29:B2:01:28:76:D9:00:77:8A:38:ED:70:EB:51:45:6A:39:37
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer:       /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial:       01962F07161EB2BB76BA7DB7895E76416325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number:          0CC1
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: Qt6ogjBgt80bJ7NFKO9yVqdpW/RnXAvqAkmamdbirYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:1e:b2:bb:76:ba:7d:b7:89:5e:76:41:63:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=016829b2012876d900778a38ed70eb51456a3937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:a9:c5:72:45:25:18:50:0e:45:0d:6d:c7:
                    48:13:1f:0c:68:89:47:61:7e:48:8f:ac:85:0a:88:
                    98:ce:c3:c3:0e:86:91:ad:ec:d6:57:06:a8:88:60:
                    0e:5c:a3:76:f4:c3:bb:7f:b4:cc:57:d0:e9:42:d8:
                    3a:b9:44:4e:79:e5:f1:19:52:d9:af:73:a6:38:af:
                    fc:87:4a:3f:5f:a3:e5:d8:2e:56:5d:39:f0:02:61:
                    a9:b5:52:fd:ce:9d:1e:af:d7:41:e9:4f:c9:f4:58:
                    e3:ef:12:0d:98:b3:72:9d:b4:34:31:4a:79:54:67:
                    33:b4:f8:ba:52:8e:4a:43:31:2d:67:84:e9:cb:d0:
                    5e:65:9c:8b:4e:5d:00:a0:d3:6f:10:50:58:a4:27:
                    50:02:f4:c5:40:c7:43:d8:7d:bb:aa:61:46:71:14:
                    db:69:92:69:2e:2e:55:c4:19:cc:8a:e2:92:46:c0:
                    ce:4e:d3:03:da:24:0f:73:7b:fb:f3:c1:e5:ca:66:
                    ef:2f:09:31:65:91:d2:39:07:e9:69:a2:10:9d:ee:
                    2c:ee:35:2a:c8:31:20:3c:87:e0:ba:57:cd:ec:8f:
                    05:3c:fd:d5:35:b8:fc:16:31:10:29:01:c9:5d:de:
                    1e:0d:c3:18:96:bf:ee:5e:08:a4:aa:80:ae:de:9d:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:29:B2:01:28:76:D9:00:77:8A:38:ED:70:EB:51:45:6A:39:37
            X509v3 Authority Key Identifier:
                keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:77:80:c8:9c:e7:9a:bd:72:91:de:41:e7:80:eb:41:35:8a:
         95:d8:8b:31:bf:63:d8:d8:68:7f:b0:0d:15:19:12:95:06:06:
         07:2c:ef:6b:d8:6b:81:f6:85:34:8b:96:49:63:e7:a3:8b:21:
         44:d0:a6:ac:06:c7:b6:19:79:a2:a2:99:2b:50:d0:24:3a:ae:
         07:dd:84:4a:60:8f:fd:fb:ba:51:d7:cc:21:13:ab:54:ed:b6:
         9b:f2:37:88:82:3d:23:7c:81:4e:e6:83:ca:dc:1f:3d:6e:99:
         c2:68:f5:98:1d:77:4b:51:e7:14:95:ef:40:6c:65:33:07:83:
         0e:44:2b:2a:b8:ea:03:2d:bf:3d:42:36:2c:1e:73:19:45:0c:
         c0:2e:f9:bf:22:d3:0e:4d:97:78:6f:5d:e7:8d:55:f0:68:21:
         5f:7e:e5:08:63:88:56:ad:5e:b5:44:a2:b8:9f:e7:95:c8:56:
         f9:80:2d:f4:12:d2:47:aa:c5:41:d9:31:9a:97:b5:da:dc:28:
         ff:e0:a4:e7:8b:a5:9e:4c:40:0d:43:e3:18:96:a1:67:84:94:
         1c:db:6b:6a:97:e3:6b:55:11:83:e9:18:7f:81:d2:02:da:fb:
         7b:23:4f:e3:da:cd:5c:af:3e:c4:7f:af:ff:23:53:d1:4d:86:
         91:d2:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----