Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File:                     sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier:          wfwC9Y7AzkuSpGtRpaVyIYJ2Sy2ixnsJNiHPHWCG+ec=
Subject key identifier:   46:83:FA:A6:33:3E:D9:7C:6D:52:53:5F:21:B5:F4:7F:5F:A0:C9:B6
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer:       /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial:       01962E99718B97A7808932E26D65A5584108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number:          023E
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: xbFtk+f6hbfMburFCQnJFYQnmRH1qcubtoBXLm4owtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:8b:97:a7:80:89:32:e2:6d:65:a5:58:41:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=4683faa6333ed97c6d52535f21b5f47f5fa0c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:b8:b1:88:ec:da:dd:7a:ec:6f:7d:ae:4a:
                    87:5f:70:12:55:30:7d:1c:3a:aa:f8:e6:ab:89:95:
                    de:81:f1:2a:ae:dd:e5:d4:16:87:72:33:1c:82:33:
                    26:69:bc:f8:dd:0e:55:7d:de:52:4e:b5:d3:00:ad:
                    04:0a:1c:fa:a1:9c:96:6a:a2:39:31:70:8f:51:5d:
                    32:cd:d9:bd:db:09:7b:63:44:19:af:53:46:98:b1:
                    51:08:74:9c:e6:e2:fa:e9:b5:8f:1b:f0:46:68:ec:
                    9b:e1:dd:32:72:4c:82:d4:d9:e0:86:5b:04:66:a3:
                    f6:f1:21:41:6e:0a:d2:aa:5e:c1:6d:fa:6d:ca:3b:
                    64:fe:ed:e0:fb:e4:ce:33:95:8e:e4:ad:c6:88:65:
                    35:e4:bf:c2:0b:7a:c0:0c:da:15:8c:7e:2e:cc:99:
                    8f:0b:5d:2c:00:c2:9e:29:2f:46:b7:51:fe:51:e0:
                    c6:1d:78:94:7d:84:32:af:58:17:bc:4d:b5:ca:f5:
                    a4:1a:32:6c:2d:45:48:fb:7e:12:19:30:3b:16:17:
                    cb:5e:22:e5:e7:3a:78:7f:61:d4:e8:6a:19:a3:4e:
                    97:75:40:12:f8:8d:b3:fb:69:87:b2:54:62:e6:a7:
                    68:83:e6:d8:96:b3:5d:73:33:cc:e1:99:7b:9d:b5:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:83:FA:A6:33:3E:D9:7C:6D:52:53:5F:21:B5:F4:7F:5F:A0:C9:B6
            X509v3 Authority Key Identifier:
                keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:96:0d:9c:d7:4a:e7:39:12:16:e9:5e:3b:58:3a:3f:67:84:
         10:29:dc:66:ea:e8:eb:5a:ab:a9:98:f7:2d:ae:ca:51:95:ca:
         6d:7f:c1:42:da:3c:aa:17:fe:c9:f1:84:7d:fc:ea:63:bf:8d:
         9f:25:0f:55:80:fe:25:f4:19:44:31:b4:91:3b:e1:37:00:19:
         4b:85:49:0f:3f:f2:c3:a7:2c:f9:41:dc:34:3d:1e:f6:8f:4a:
         21:a7:02:2f:09:67:e9:f1:27:06:7c:aa:58:fc:da:07:ac:14:
         79:6e:88:a5:77:49:6a:e8:a5:80:ea:57:ff:1d:b9:4f:28:57:
         bf:68:dc:7e:47:80:e3:33:d9:43:64:65:78:22:a3:c5:9e:56:
         a3:7d:cc:5a:7c:48:a6:38:6e:5a:05:82:31:5f:64:69:bd:72:
         49:c1:17:64:12:9b:0d:ba:75:8a:a7:ca:71:d1:84:92:cf:31:
         8a:75:ff:82:9e:af:b0:31:29:33:f6:a2:80:7f:bb:c4:ce:49:
         ee:ec:b8:47:c6:52:b3:eb:ea:b4:17:d9:f3:91:8a:30:71:98:
         cd:85:0c:e1:22:d0:3a:fd:37:b1:c9:80:9d:07:7e:e0:4d:20:
         12:e5:e6:b9:ce:f9:a6:8b:ff:73:d5:ce:fb:5f:38:d3:38:e1:
         82:ce:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----