Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
File:                     X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft (raw, json)
Hash identifier:          g8pO0JPV5RLgwM1IuKZvlqsQe/PBYOOlkOvWaG+RPoM=
Subject key identifier:   89:49:75:8C:23:B0:20:C4:84:66:85:91:0D:41:82:4B:6C:EF:A4:83
Authority key identifier: 5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
Certificate issuer:       /CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Certificate serial:       0195C950B9B8806BF7AD7ED17D8C4C8B3C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
Manifest number:          0745
Signing time:             Mon 24 Mar 2025 18:01:05 +0000
Manifest this update:     Mon 24 Mar 2025 18:01:05 +0000
Manifest next update:     Tue 25 Mar 2025 18:01:05 +0000
Files and hashes:         1: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl (hash: mbduV2KyFmZvEaBh71tf4s2yUniWpGtSD3S27E+zPVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c9:50:b9:b8:80:6b:f7:ad:7e:d1:7d:8c:4c:8b:3c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
        Validity
            Not Before: Mar 24 18:01:05 2025 GMT
            Not After : Mar 25 18:01:05 2025 GMT
        Subject: CN=8949758c23b020c4846685910d41824b6cefa483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:26:15:3c:9b:14:44:79:b4:c3:ab:04:b9:
                    ba:ea:9c:c6:ee:65:33:13:60:9d:49:fc:08:98:31:
                    d2:87:7f:18:5c:a9:8f:34:0e:dc:8c:b5:02:13:b1:
                    af:a2:1f:5d:13:8c:53:4d:86:96:98:f9:b7:ba:ba:
                    1e:16:86:97:0a:37:56:26:5a:f7:0c:86:86:fc:b4:
                    dc:6d:c1:f7:64:30:43:62:35:11:7c:65:a9:b2:24:
                    36:07:5f:14:be:69:b5:8c:f5:0c:19:49:f5:2c:98:
                    8d:a2:98:f7:77:69:38:5f:de:f1:36:31:49:c8:05:
                    d7:f4:f7:19:c1:63:36:a8:54:39:19:c2:88:52:36:
                    23:ef:8d:5e:6b:82:8e:02:5a:76:6f:5a:a7:a6:e1:
                    29:3b:34:de:61:10:a7:ce:c7:88:39:74:bc:58:dd:
                    e3:e8:93:1e:19:5d:80:9f:b3:1b:dc:f2:93:a5:ed:
                    67:c6:04:04:7e:9f:50:75:b4:23:aa:a7:68:a7:e7:
                    18:26:91:6d:16:ed:53:61:1d:2e:50:61:6c:f2:43:
                    59:0e:bd:ed:a3:a3:ec:f2:3d:3f:15:05:8f:8d:c7:
                    6e:7a:87:5e:f8:48:35:ba:c7:8c:f8:90:53:d0:e4:
                    ad:84:bb:cc:7d:78:5a:9b:cc:30:4f:35:52:c4:0a:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:49:75:8C:23:B0:20:C4:84:66:85:91:0D:41:82:4B:6C:EF:A4:83
            X509v3 Authority Key Identifier:
                keyid:5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:92:0c:99:4c:0d:50:46:01:f9:b0:18:2f:6a:33:f1:53:b0:
         1f:6d:80:b9:9b:04:9b:44:d3:9b:a7:64:53:6c:d4:1e:f6:0f:
         a8:c5:72:46:d2:1b:ae:e2:c2:51:98:67:7f:90:44:68:bc:4d:
         96:93:7f:42:25:0f:ef:17:ad:09:07:0f:e9:83:6a:df:16:b1:
         80:7d:ed:0a:87:45:a2:bf:36:7b:19:3b:d2:5a:99:be:68:4e:
         27:72:bf:cc:6c:93:15:b6:32:12:fc:0a:b3:6b:bd:d7:70:e2:
         4c:20:cc:50:72:19:6e:02:92:4f:03:44:1d:26:a6:e3:f8:8c:
         a9:2e:af:59:99:bd:ce:2b:c5:c6:65:92:1d:7f:86:1f:91:47:
         b6:6e:32:58:24:59:ed:4d:6e:d5:e1:90:52:0f:08:10:aa:20:
         79:6e:49:4c:a3:85:75:01:c1:2f:ce:84:09:58:91:60:53:f8:
         7b:06:1f:b5:4f:ca:b1:40:ab:31:fe:8e:41:0b:2a:fe:c8:eb:
         ee:83:62:d4:ef:48:e2:7d:a6:c9:88:6a:81:97:a0:1b:ba:b6:
         64:eb:a3:6f:c3:85:8c:89:d0:bd:37:0b:5e:cc:9b:f7:fa:97:
         5d:f7:b6:3a:eb:af:2f:f2:91:32:62:93:0c:26:d9:f8:53:b8:
         b4:9e:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----