Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft
File:                     lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft (raw, json)
Hash identifier:          OGwAdIPi9qeHNG1WKBitC/IlBMsdfeaT++3NCEIE810=
Subject key identifier:   8E:5B:2C:8C:D0:AB:9E:F3:DF:63:6C:DA:48:F9:A6:5B:88:CE:D8:E7
Authority key identifier: 94:75:ED:DC:A9:5B:73:66:53:A4:C9:F9:D9:15:40:D2:D3:EF:B5:3D
Certificate issuer:       /CN=9475eddca95b736653a4c9f9d91540d2d3efb53d
Certificate serial:       01962E619C146E22D308BCF5774B9695AA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHXt3Klbc2ZTpMn52RVA0tPvtT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft
Manifest number:          0127
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: lHXt3Klbc2ZTpMn52RVA0tPvtT0.crl (hash: 1JxIJ1F6ceehmI+0aur2MHWMbpV9qw2zzjnWyLrJ4FA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9c:14:6e:22:d3:08:bc:f5:77:4b:96:95:aa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9475eddca95b736653a4c9f9d91540d2d3efb53d
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=8e5b2c8cd0ab9ef3df636cda48f9a65b88ced8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:e7:be:6a:c0:14:ec:c9:6b:7a:c5:15:30:
                    86:d1:d6:54:ad:8f:af:8e:be:3b:d1:da:41:46:3d:
                    c8:bd:3d:cb:2c:d6:4f:34:9b:00:5d:4a:59:14:26:
                    5c:ca:15:23:04:00:7a:1e:27:ed:cf:5d:4d:92:81:
                    a3:f4:fa:e2:1f:3e:3d:40:2b:0d:b2:b0:b0:ab:6f:
                    b8:0b:bb:bb:bb:cf:11:b5:9f:2d:7a:53:2e:65:84:
                    0b:78:f4:81:01:e4:ef:40:ca:d7:04:a7:a1:a8:aa:
                    96:af:b0:60:34:54:c8:f4:8a:7b:f4:7d:2f:95:9f:
                    bc:ff:13:e6:0c:24:34:53:63:48:ef:ec:81:fa:04:
                    90:f5:66:02:a6:5d:d7:d8:28:1b:ce:35:d0:fe:ae:
                    b9:9e:3e:47:64:95:f8:d2:9e:ba:27:e6:91:83:7e:
                    cb:64:74:ce:a3:80:aa:f1:82:ef:bb:6a:3d:5b:ed:
                    b8:6b:92:35:8b:8b:75:f9:8b:01:ca:45:5f:4d:80:
                    1d:2a:ac:00:36:3a:61:26:ad:3f:e0:82:5c:fe:48:
                    2c:8f:3c:9b:5c:1e:f8:a5:22:e2:25:59:37:94:a2:
                    3d:be:d1:c2:23:90:18:fb:a5:4b:ef:b4:a3:b5:b9:
                    bd:41:76:2e:a1:9d:07:8d:7e:2a:61:43:70:df:b5:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5B:2C:8C:D0:AB:9E:F3:DF:63:6C:DA:48:F9:A6:5B:88:CE:D8:E7
            X509v3 Authority Key Identifier:
                keyid:94:75:ED:DC:A9:5B:73:66:53:A4:C9:F9:D9:15:40:D2:D3:EF:B5:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHXt3Klbc2ZTpMn52RVA0tPvtT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7e:b3:86:15:de:4d:fa:8d:eb:94:7f:89:3d:49:f6:a5:49:
         02:bc:00:70:57:8a:b1:08:5a:aa:8f:fa:a5:dd:f2:10:98:33:
         54:bf:54:3f:3a:6a:b2:2a:73:82:1a:3f:ad:cf:7a:95:70:62:
         a6:78:fb:52:52:e7:a3:52:c7:57:18:9c:f1:03:5d:46:6a:2d:
         14:ff:43:c6:3e:a5:9d:10:27:75:2d:75:13:2c:33:46:3a:4a:
         b3:e1:e7:e8:fa:ed:f9:0f:03:66:67:aa:de:97:8f:ac:76:1c:
         eb:45:8a:ec:f4:98:3a:90:be:35:42:d6:7e:9d:19:8a:7c:db:
         1c:ee:7f:98:9f:bd:60:43:b0:7a:f9:f6:2f:b4:f7:59:30:d6:
         5a:10:bd:73:ae:58:c9:92:d3:0d:82:92:92:14:5e:8d:bb:8f:
         9d:3e:75:b0:da:fb:34:c4:c1:24:86:5b:b4:c7:d5:5d:6f:05:
         ba:37:13:bd:89:f2:f6:1d:e9:24:dd:21:6a:95:0f:2b:c7:49:
         6a:9c:b8:d4:12:a3:a2:15:87:9a:b5:fe:ad:22:b1:7c:5e:6b:
         f4:3b:93:06:02:f0:70:4b:85:26:0f:98:c5:cc:b9:51:ff:94:
         21:d7:21:85:b2:ff:4f:4e:ff:7a:45:9e:66:a8:9c:60:10:40:
         59:8b:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----