Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File:                     g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier:          8QVu57eGTdzSKc9SPgtjQx8Z9ZPXGm4jwnrN+bqbcRE=
Subject key identifier:   93:22:6E:54:A6:70:66:0B:FF:42:AA:B6:3D:88:AB:60:E9:C2:C7:1E
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer:       /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial:       01962ECFDF150E9DE7F0D775BA439EAD470D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number:          0421
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: VgNERxBP1KH3n2xPgJrCBvdjGq35Wcf7xME19opqG64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:df:15:0e:9d:e7:f0:d7:75:ba:43:9e:ad:47:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=93226e54a670660bff42aab63d88ab60e9c2c71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:33:e3:e8:0c:5f:71:3b:a4:a3:0a:9e:9c:
                    4c:e4:7b:53:6f:61:78:cc:93:70:60:47:c4:17:c8:
                    c2:dd:8b:3f:ab:6b:5d:19:69:98:a9:44:b8:04:c9:
                    97:a1:db:9c:3e:31:e0:e7:66:33:54:73:93:aa:d7:
                    ee:8d:31:18:3f:c9:83:82:ce:5f:2e:66:8a:a5:2a:
                    ed:6c:3b:db:13:2b:3e:16:08:cd:79:9a:63:f6:b2:
                    c6:ca:d4:b6:93:35:ad:42:ad:99:cc:6b:7f:8e:9b:
                    57:cb:c2:8b:3f:6e:2f:97:8f:72:b7:3f:64:99:d0:
                    a0:66:5c:ae:08:bc:64:74:1c:45:22:95:26:41:cc:
                    f9:05:fb:2e:8a:77:84:f5:a9:e5:83:14:99:39:c6:
                    5a:db:73:75:37:e1:69:e8:31:d4:fe:3e:c6:b6:28:
                    51:59:79:33:e7:31:56:46:0f:a3:e7:6b:7e:1c:e2:
                    57:d3:c6:46:8b:60:17:d4:78:f6:a2:33:99:cf:7f:
                    b4:c7:2e:79:5e:ed:87:60:14:79:9b:3f:b2:a0:32:
                    93:3c:6d:0e:39:2f:a0:b5:74:59:68:3b:a2:c2:1d:
                    22:e8:d2:26:19:2f:0a:a4:ca:5f:9a:e4:6f:5f:06:
                    8a:ca:45:8b:b2:14:89:7c:d2:ee:e1:d6:9e:77:f1:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:6E:54:A6:70:66:0B:FF:42:AA:B6:3D:88:AB:60:E9:C2:C7:1E
            X509v3 Authority Key Identifier:
                keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:d4:56:97:bd:83:3c:20:6a:84:f1:1f:c7:8c:73:bb:5b:
         e3:f9:31:81:b7:16:f8:5a:50:72:17:a1:31:32:96:6d:7e:d3:
         75:dd:44:5f:3a:58:07:ca:22:2a:4a:a1:fc:2c:7e:8f:0a:72:
         57:8f:69:ab:68:88:3f:28:79:60:70:81:27:13:5b:af:cd:45:
         f2:35:7d:6a:eb:4d:0b:4f:12:84:b6:23:95:9e:2c:86:d6:26:
         4f:e8:d0:70:33:f8:c6:21:11:5e:d8:78:5f:1b:44:ba:ee:b7:
         ea:6d:9a:cc:db:a6:83:25:f1:e3:5d:66:e0:fd:cb:ef:c5:11:
         65:37:33:cb:05:3d:03:0a:12:9c:ad:4a:6a:3b:d5:64:5d:0d:
         82:9d:be:3f:e2:ad:0f:fe:46:99:43:d7:f5:b3:b9:6c:ca:68:
         be:14:ee:95:95:4c:57:4e:1a:6f:20:23:0b:bf:0e:20:c5:b2:
         08:01:0d:03:04:c8:ae:75:09:8c:7d:2d:ff:f7:ec:01:06:f6:
         eb:a0:ec:fd:6c:36:26:2f:b4:c9:05:86:e1:c2:cc:e6:b7:c5:
         94:e1:78:32:83:2b:16:be:4f:fb:96:44:a6:1e:93:38:e4:19:
         ee:58:ae:a7:5c:5d:70:ea:9a:9d:11:e0:e4:be:c5:1d:4f:6a:
         1a:61:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----