Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File:                     j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier:          MYQtujjRuzD+sBAzau7weAkZGloY2GEnpPEmX9a7ldE=
Subject key identifier:   1E:7E:2A:E1:4B:B2:8B:C5:FA:C2:00:B9:0A:F4:73:08:BF:D7:27:99
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer:       /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial:       01962E98649E5DFA51ECBC33CE6B3B18AB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number:          09A1
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: +wtAJXLLDFAgbczg0DhmSCz4mUpUCa5OLvevOEqI2VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:9e:5d:fa:51:ec:bc:33:ce:6b:3b:18:ab:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=1e7e2ae14bb28bc5fac200b90af47308bfd72799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:10:b8:0d:46:f5:2f:0a:21:e2:1e:94:2c:
                    33:ec:0c:3e:f9:9b:dc:7e:d5:9f:b6:54:e5:d0:90:
                    17:c6:b1:73:ea:f6:56:16:9d:ec:1f:40:dc:8f:e9:
                    3d:a4:07:30:59:4b:94:49:13:f8:36:c2:b9:82:c8:
                    75:cc:b6:31:68:9d:66:5d:59:76:fa:93:36:a1:d1:
                    c0:ed:f5:0b:14:fe:52:70:e5:85:a8:47:4d:72:ba:
                    16:4b:e2:3b:b9:57:d1:71:fb:00:c6:81:1a:57:93:
                    79:5d:d7:c7:fb:ca:cb:37:d4:81:4f:0d:70:6f:a1:
                    32:84:6c:88:06:8f:bf:94:4c:35:ec:9a:7d:70:23:
                    dd:80:b6:23:2c:10:dd:96:b6:cd:db:3d:6b:77:f7:
                    06:7b:8c:be:3e:7f:1e:da:fe:7a:61:68:87:e5:d2:
                    31:b1:e1:04:aa:b4:ef:9c:46:78:22:73:6b:3b:ee:
                    e3:24:be:16:f6:8e:ba:34:17:06:2d:08:7f:7a:46:
                    46:ac:b6:ed:25:b8:f5:92:38:74:8f:78:16:1c:cd:
                    f0:cb:c0:c0:b3:49:fb:59:fc:4e:5e:b9:23:a2:fc:
                    12:9e:b6:b2:1c:1a:74:3d:50:7c:38:d1:0f:7b:b0:
                    86:87:e3:f8:6d:d9:4e:a1:1c:da:04:7f:86:ff:28:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7E:2A:E1:4B:B2:8B:C5:FA:C2:00:B9:0A:F4:73:08:BF:D7:27:99
            X509v3 Authority Key Identifier:
                keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:48:4b:8c:a9:7e:3e:63:c6:c7:b7:81:cc:5e:51:c5:27:b8:
         58:87:38:90:cb:dc:f7:14:14:f6:3d:ba:c2:e6:bf:7d:23:65:
         e3:ba:43:f8:d7:9b:6d:51:fa:ab:ea:38:0e:4a:9d:46:11:1a:
         c3:75:75:f6:03:da:8c:d5:59:5b:70:eb:ac:a0:b2:82:fb:83:
         10:42:16:72:b6:99:59:83:23:67:ec:bc:21:a9:da:fc:c6:7a:
         d0:61:2e:9b:99:03:c1:a4:65:33:93:e3:16:96:a8:2b:55:2a:
         cd:db:39:5f:0f:00:e8:4d:48:04:96:b0:a0:03:fa:52:31:4d:
         b4:80:51:e8:ae:b7:dc:d2:35:4e:55:c9:ab:f0:ef:ed:a8:71:
         9a:8f:1b:be:ca:d0:e1:76:7c:52:09:a0:b1:e5:04:60:df:55:
         4f:07:83:74:46:57:cc:b4:c4:6d:37:4c:e2:55:ba:58:a1:34:
         5c:f0:50:0f:6a:70:4d:37:37:8f:d0:41:f1:02:e3:fa:07:be:
         d0:60:8a:0e:ee:e0:e0:3b:57:84:91:08:06:87:c7:7a:e3:95:
         12:dd:f9:8c:4e:de:9a:e2:74:4c:3c:45:c6:c0:8d:d3:53:13:
         ae:7d:eb:48:ed:aa:dc:23:26:3b:25:4c:6f:80:c9:c3:27:f2:
         0f:f9:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----