Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File:                     U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier:          GvT0cHZTUiV/6F4Xca45HPjMbv8eKbzVw60jdTAkOGk=
Subject key identifier:   20:01:DE:17:A7:B8:0A:39:7B:C8:4A:27:AC:83:56:85:BC:A7:E8:1B
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer:       /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial:       01962E98EA18BC6A09FA9681A127AF918FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number:          0CFE
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: 8rECKNspaWYLNN5BmMh3AyZW2JVSqTIRU+GJTfHzvRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ea:18:bc:6a:09:fa:96:81:a1:27:af:91:8f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=2001de17a7b80a397bc84a27ac835685bca7e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:de:66:7d:9a:67:2a:45:2a:b8:3c:6c:65:
                    10:9a:f3:24:8f:fb:32:19:e5:f6:3f:49:b3:20:04:
                    21:d5:a7:e7:94:a5:7a:5e:d2:b8:13:04:36:f6:49:
                    b7:62:0b:cc:bb:7a:b7:3b:a1:bf:45:24:98:2d:2c:
                    01:86:17:c1:96:2e:5f:47:40:54:35:5f:b0:1a:20:
                    1c:69:8c:10:d4:94:7d:d0:45:c1:9b:c3:b6:e9:ad:
                    10:6f:e3:e0:78:bc:2b:98:92:93:45:84:77:b8:ff:
                    21:bc:5a:f7:b7:5c:d4:b9:e0:97:eb:0b:7b:3a:9a:
                    8f:f1:c1:ca:c7:b0:a2:15:56:1b:a8:71:77:04:de:
                    db:f9:20:87:f1:62:46:a9:e9:80:d0:c6:eb:21:ac:
                    82:19:87:d3:d8:b1:71:55:22:21:70:9d:74:c2:8d:
                    6a:bc:7d:6b:70:48:11:a0:23:8a:51:9d:b2:c9:e9:
                    be:bf:f5:86:4e:97:94:13:fa:0e:2f:a3:27:64:b6:
                    17:8b:ea:30:f6:45:1b:2a:70:c8:ef:20:b7:67:ed:
                    fc:69:a7:41:08:f7:6e:30:05:c4:07:ce:52:d7:4b:
                    d7:03:91:70:62:f1:e9:e7:a4:55:6f:3f:0e:f3:87:
                    d1:51:94:08:25:4b:c3:2e:7b:d3:5d:3e:b8:24:22:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:01:DE:17:A7:B8:0A:39:7B:C8:4A:27:AC:83:56:85:BC:A7:E8:1B
            X509v3 Authority Key Identifier:
                keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:75:93:b0:7e:53:20:67:41:99:18:77:4c:8c:fa:6d:d4:
         df:da:69:44:2a:06:b3:7e:f3:96:0e:54:5d:fd:c0:1f:05:8b:
         79:2f:12:c3:ab:19:cb:00:2e:94:4b:17:02:70:15:71:e5:cf:
         2b:29:91:b7:53:9a:03:bd:62:35:eb:bb:8c:31:0d:60:7a:80:
         6e:2a:09:7c:48:99:6f:28:a1:61:18:24:7b:82:79:4b:84:18:
         68:d4:6e:42:16:ed:94:fc:10:a6:e1:5e:79:91:9b:ba:79:0d:
         c7:1f:60:0f:00:38:98:3d:d4:87:56:64:ab:c0:74:f7:dd:4b:
         ea:36:47:b5:10:f8:51:72:37:e8:c1:63:51:81:34:d3:02:53:
         9f:aa:e2:1a:7b:3a:30:cb:25:bd:4e:23:09:b6:0b:01:cf:43:
         48:70:8c:38:3f:47:c8:b7:45:fc:56:ab:00:3d:b3:fa:d6:8b:
         ac:6a:c5:a3:18:00:9a:9b:28:9b:59:ef:13:c1:13:b3:de:25:
         c2:bc:fe:7e:ae:b1:73:78:33:e7:7f:d6:36:0b:86:70:2b:72:
         54:61:c7:04:7c:fa:f8:81:c7:ba:76:2d:29:bb:08:6c:6b:a4:
         6c:e9:9c:55:54:c6:be:5d:a8:d9:44:d7:60:ce:ae:e3:9c:e7:
         7c:5f:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----