Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File:                     tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier:          jsDI07KTRh2eDJNXQ6x11n5L4c/EA9O8P11vyR9pRnM=
Subject key identifier:   33:38:63:2C:67:3B:C3:AA:89:28:98:64:45:F6:E5:2E:0B:6B:8C:48
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer:       /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial:       01962F74C692E95D64B2A2A47C06A3CBFFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: WdLV0TVJNZ6wZ0hFLFadkpIgS/nKB4hmxtYrWj9IiVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c6:92:e9:5d:64:b2:a2:a4:7c:06:a3:cb:ff:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=3338632c673bc3aa8928986445f6e52e0b6b8c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:6b:d3:17:f4:44:c5:0f:ba:74:74:5a:7b:
                    68:5d:15:74:0f:e9:52:e4:1a:76:6e:16:47:dd:49:
                    5b:7d:35:d7:e6:c6:ee:e1:37:f6:68:c6:9d:3f:b0:
                    18:76:52:4c:d8:c3:e1:00:b4:42:e8:63:3e:fb:f7:
                    10:a2:28:39:70:54:4d:fa:7e:7b:90:d7:93:15:66:
                    92:d0:96:bc:1f:fe:94:62:23:52:b3:8c:e3:9a:ff:
                    23:e7:2b:49:8c:a4:a7:21:ed:1c:4c:86:e7:0a:0f:
                    5b:71:b7:5d:1c:5a:8e:a3:ad:b1:29:57:35:7c:ae:
                    4f:82:93:94:d1:97:f6:17:0c:06:65:b7:2b:f9:fb:
                    47:e1:12:25:21:8b:89:4e:92:63:9c:08:d3:1b:9a:
                    14:a4:23:00:2c:4d:cd:63:dc:45:cb:6a:77:18:fb:
                    8a:9e:ce:05:f5:6f:17:5b:22:95:94:ed:95:01:7e:
                    ea:04:b4:37:73:f7:96:6f:e9:4d:a1:1e:19:1f:72:
                    df:c7:6b:89:e1:54:51:15:10:3c:1a:87:41:f2:bc:
                    27:cb:69:26:af:9d:13:6d:30:6a:05:7b:e1:58:a6:
                    42:73:a6:e5:37:a2:9d:52:15:27:7d:9a:1a:74:e9:
                    7f:c2:a2:65:70:4b:d9:1c:b6:36:3a:d3:d9:ac:a8:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:63:2C:67:3B:C3:AA:89:28:98:64:45:F6:E5:2E:0B:6B:8C:48
            X509v3 Authority Key Identifier:
                keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:de:a9:a4:9b:08:95:66:12:10:7e:d0:47:f6:6d:40:bb:
         91:f1:5e:0c:e0:e5:ea:6c:49:71:c5:0c:70:a6:93:b8:b7:d4:
         35:dc:09:9f:9a:66:ee:62:d0:64:34:b9:d2:0d:c4:68:ac:e4:
         34:82:0b:cb:59:0d:b4:c3:aa:23:ef:19:44:dc:be:2b:ed:8e:
         51:f7:93:bb:69:2b:8e:b8:ca:fd:ea:0c:93:76:fd:5e:d8:06:
         e6:ec:0c:16:ae:5a:cf:8a:00:f6:ff:b8:53:d3:d0:d7:28:32:
         c1:98:40:12:5f:16:ac:85:d0:a4:58:bf:f7:ca:ac:16:07:e7:
         fd:78:37:4c:56:d0:16:39:02:00:57:39:18:bc:3c:bf:fc:12:
         e6:2a:97:1e:67:9f:96:28:35:c6:ae:e7:64:dd:19:68:04:68:
         11:aa:b5:27:cb:a7:40:a9:ca:23:1b:08:74:88:e2:d1:45:2d:
         1e:ec:48:a4:bc:3a:b9:f7:5b:31:18:39:2f:80:55:21:f3:e1:
         c7:12:b1:ca:c5:f4:bd:aa:90:1a:be:45:3f:e2:f0:f7:96:76:
         ac:5f:6c:0c:70:f7:7d:fc:72:d5:77:50:f3:3f:73:57:fd:91:
         26:f1:a1:ed:3f:a9:bd:ee:32:8f:66:f2:79:4b:6a:3d:14:72:
         e5:ff:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----