Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
File:                     1-K4RxAyWYdJFsaDL5DohK1je_UY.mft (raw, json)
Hash identifier:          fy5tANfdR2M3PQcv0gW5eJNH7sItLc1N1LGNKhBsXIA=
Subject key identifier:   B0:8A:9E:24:13:51:FE:E7:E4:D9:A1:81:A4:88:7A:66:ED:A1:E9:78
Authority key identifier: F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
Certificate issuer:       /CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Certificate serial:       01962E98A91F8895CCC37AA8BC8CE9D9E97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
Manifest number:          0687
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 1-K4RxAyWYdJFsaDL5DohK1je_UY.crl (hash: I5QEB6n3CvEkU+dZeo3ItsSNSlgiwhEu5nifveAvKqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:1f:88:95:cc:c3:7a:a8:bc:8c:e9:d9:e9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=b08a9e241351fee7e4d9a181a4887a66eda1e978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:d6:c0:c2:d4:33:6a:2f:52:f8:db:7f:ea:
                    00:c6:98:4e:52:51:8e:61:16:2e:7f:40:8d:f4:bc:
                    a8:66:78:3c:2b:de:de:2d:20:15:43:ad:32:03:dc:
                    74:a7:ca:41:65:8c:d6:4d:b9:22:70:4d:c4:e5:e1:
                    8f:1a:60:34:50:7d:93:c1:15:fa:74:ab:f0:dc:07:
                    91:5f:1e:19:c0:6d:42:81:ea:5c:9c:e6:90:dc:20:
                    82:5e:33:e7:0a:1e:f0:a2:75:ab:27:77:d8:42:92:
                    32:d0:45:c7:ec:63:e7:98:d5:0a:82:a3:15:59:51:
                    8a:48:6d:82:33:81:f0:3f:6a:96:67:15:0a:32:22:
                    fb:8b:88:83:08:a9:3b:02:ae:c5:aa:5a:51:2e:50:
                    1e:81:fd:2e:c3:6d:c8:89:4f:57:87:87:1f:e7:b0:
                    a2:70:dd:e7:c6:f6:33:8c:c1:c0:f6:57:48:c9:44:
                    85:df:01:28:4b:2a:3e:36:96:2d:bc:3b:1b:34:a9:
                    96:bb:6c:0d:39:72:12:1d:32:fa:00:1e:80:42:c3:
                    6b:d6:31:21:66:21:f9:f4:b0:ac:7a:bf:b6:7a:f6:
                    f7:b2:76:76:b1:b6:b4:a3:81:1a:c5:5f:04:63:68:
                    75:8a:9e:f7:79:4f:0a:ce:ee:f9:81:7a:cd:c4:5f:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8A:9E:24:13:51:FE:E7:E4:D9:A1:81:A4:88:7A:66:ED:A1:E9:78
            X509v3 Authority Key Identifier:
                keyid:F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:ba:03:16:30:3e:20:99:c5:01:04:e9:46:91:77:1b:2c:
         ee:ba:b4:35:bd:59:95:27:e5:b8:91:c7:27:1c:d5:7f:b1:27:
         11:a9:14:7e:a3:6e:c1:67:0b:67:be:8d:b1:d8:98:3f:07:26:
         a5:74:91:ec:4b:f5:ac:e8:75:f7:ae:ac:11:08:58:29:30:52:
         98:09:21:d2:4a:54:9a:87:20:97:d8:dd:3e:51:de:a9:de:a5:
         f1:16:b3:65:b4:bf:ed:4f:24:93:7a:b7:12:8b:15:68:f8:2c:
         c2:3d:92:99:18:06:20:74:d3:56:43:64:c9:ee:e3:de:c9:03:
         b3:13:b9:a7:88:9c:99:d2:f2:26:a0:67:a9:ed:6a:6e:aa:b3:
         68:73:14:4b:ea:e2:98:ab:4c:5d:e5:73:6e:34:03:5e:83:c7:
         cc:17:a7:35:9b:17:10:c7:06:d0:15:ab:2b:da:6f:01:15:2f:
         e9:6f:25:a8:32:fb:e2:09:47:a7:d1:3c:bd:cb:6e:74:24:c2:
         da:e4:9b:cf:1c:da:c9:47:6a:95:7d:37:9e:78:a5:d1:d7:ff:
         ad:81:1b:7a:a5:3a:bf:86:05:8c:4e:63:dc:e0:9e:2d:07:b1:
         40:63:45:b3:fc:32:9d:8b:e2:f7:1d:b8:c8:51:db:8d:b8:7b:
         31:33:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----