Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File:                     2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier:          7/jpC5YRtRtKX1NbKClmZLl8O2pliLfBpeohotBt7i0=
Subject key identifier:   33:56:BF:92:33:87:B7:EC:37:34:93:15:50:20:EA:FA:E2:F7:6E:19
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer:       /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial:       01962E2ACED30B90F7EF32B114F759B1AD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number:          024F
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: lBIqtIvULjmU1SinAyxdj0xat5GTACK5p+KwezlYtX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:d3:0b:90:f7:ef:32:b1:14:f7:59:b1:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=3356bf923387b7ec373493155020eafae2f76e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:fa:6a:9a:c6:32:f5:d2:bc:f6:5b:de:77:
                    95:08:b3:d0:e6:cd:65:dd:01:a9:d8:97:64:ba:cf:
                    4b:5d:9a:ab:eb:08:54:20:a0:25:58:9a:b9:ad:ab:
                    8a:a2:2e:a5:66:3e:1e:fd:cc:fc:ec:55:ab:e1:7c:
                    b8:37:52:94:7f:d0:d8:ec:21:72:b9:0c:fb:46:cd:
                    9c:6c:93:15:7e:5c:9f:8c:4c:eb:f0:28:7b:55:f5:
                    77:46:d9:ad:3f:de:d7:0c:10:fd:4f:f7:ed:5e:82:
                    91:13:90:3c:5e:3b:e9:54:d8:9b:1e:b2:53:14:71:
                    2c:f7:44:61:c0:de:4b:be:34:25:86:36:0e:32:8d:
                    17:0b:2c:57:70:9d:5f:90:71:5b:42:bc:61:ab:26:
                    93:5f:f9:1e:12:f8:6b:6f:62:4a:c6:70:2e:29:d0:
                    d3:15:05:80:67:7d:bd:9b:23:f6:15:f6:86:2e:54:
                    7a:20:c7:d8:ff:03:e4:b6:d3:c1:d1:56:02:3b:51:
                    5c:7e:b7:70:8c:6b:4d:63:8b:ad:05:99:f6:bf:44:
                    0d:ac:74:ef:80:73:ac:7f:21:4f:7b:5c:5e:30:03:
                    db:ef:fe:ea:43:dc:57:dc:a3:be:40:84:f4:19:9d:
                    86:24:fc:ef:8e:e1:08:12:75:02:3a:b5:48:32:86:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:BF:92:33:87:B7:EC:37:34:93:15:50:20:EA:FA:E2:F7:6E:19
            X509v3 Authority Key Identifier:
                keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:70:7a:11:b9:64:b3:6d:5e:11:27:4a:7e:bd:c3:b8:89:ff:
         f9:17:79:d5:3b:83:72:3b:95:5f:28:9d:27:60:b5:5f:9b:a5:
         cd:81:21:64:83:a4:d9:df:90:4d:9a:c8:51:4c:89:1c:81:f6:
         ba:5f:b1:e1:6f:59:4c:9f:a4:53:5f:39:6e:5b:14:4b:79:dc:
         40:4a:16:1f:cf:6c:5c:d8:7b:3e:a9:9c:5a:13:26:8e:6d:a3:
         a8:bb:c4:d7:9d:41:e4:2a:59:b8:f4:16:64:86:4b:bb:a6:46:
         60:53:db:89:1e:f4:1d:2a:87:2a:6b:9d:6f:5e:68:5b:c3:cf:
         3d:f9:d1:96:d1:74:f9:d5:09:07:2c:00:e8:c3:72:e4:d0:af:
         42:29:6c:f4:74:36:9c:47:cd:9c:92:51:8b:0d:7c:ab:ec:20:
         ac:f7:bf:b1:99:76:fa:91:5c:00:ba:27:b1:47:2e:28:a3:2d:
         c4:d4:4c:dd:c5:20:4d:04:b7:76:aa:fb:59:89:57:f0:f8:91:
         8b:37:25:b9:cb:8c:44:19:b3:2e:b5:a2:35:4c:b3:4b:8a:22:
         e6:e6:d4:16:b1:3d:27:f3:24:83:d8:06:6b:8c:cc:fb:d7:07:
         31:e9:43:04:4f:21:64:9c:b7:9f:38:10:96:c5:5c:db:37:d1:
         e5:f7:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----