Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File:                     dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier:          PLa0QFYP9t/6IOFJebGVzJz8e5x8PYLwDRbeTZArZHY=
Subject key identifier:   F9:4C:DF:A6:D7:FE:A5:4F:9C:70:A0:68:44:C3:1A:BB:3A:08:62:12
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer:       /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial:       01962F06E43A36883E6FACE41B8CAD17D715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number:          079C
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: kiCuKg+nopXjHQBuTkLVnu45qNpgaDa4Tl2rWl7Lmvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:3a:36:88:3e:6f:ac:e4:1b:8c:ad:17:d7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d5276557f7da4100113d85739566481540e61c
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=f94cdfa6d7fea54f9c70a06844c31abb3a086212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:a1:42:a6:62:ea:6a:35:1e:1e:9f:82:12:
                    a2:76:d6:c3:0f:77:35:ed:67:36:5b:6a:e3:7e:9a:
                    aa:28:fa:2e:e9:b1:21:7c:85:ef:fa:89:9a:49:41:
                    9c:d3:b9:08:d2:b2:6e:58:d0:6a:7e:7b:ca:fc:cb:
                    12:d6:7c:d9:7b:82:0f:37:0c:14:a6:32:56:d5:af:
                    80:d6:f7:2b:27:60:77:d9:1d:6e:d4:d1:8c:5a:a7:
                    58:44:c0:cd:72:92:e0:5d:c9:d4:e7:34:56:02:4d:
                    60:e7:e1:ee:f3:aa:ce:11:ee:80:7c:e3:2f:4c:cf:
                    b4:a6:10:9b:9f:1f:5b:a5:4d:b7:17:67:6b:ca:88:
                    00:73:81:a2:21:5b:ee:e5:2b:7d:0c:9a:9c:04:e0:
                    2a:b9:a8:0c:b9:5c:c5:fc:be:49:c7:0a:5f:71:1e:
                    8c:87:ae:7b:06:1e:6c:3e:44:77:e4:18:c3:97:17:
                    10:1d:48:83:6f:5c:24:81:96:94:9a:19:a9:1f:e0:
                    3f:09:49:91:ea:6a:fa:cf:d6:bf:d9:11:38:2a:e9:
                    cb:4f:53:6b:ff:c9:dd:00:48:ff:ae:9e:17:94:32:
                    c6:04:6c:0c:b4:0f:94:40:a4:0b:7a:d5:93:0b:77:
                    66:55:87:5a:ab:a4:61:eb:bc:34:47:b7:3a:d7:77:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4C:DF:A6:D7:FE:A5:4F:9C:70:A0:68:44:C3:1A:BB:3A:08:62:12
            X509v3 Authority Key Identifier:
                keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:bf:30:0e:fb:a5:e7:5f:6f:10:2a:ec:c1:8c:4e:2d:c8:
         f8:56:76:60:71:a8:67:0d:c3:c2:6c:fb:a8:28:a2:96:10:9f:
         86:d2:fe:03:2c:22:e7:4a:ec:75:d9:6e:45:18:3b:b0:4c:97:
         ca:3f:0b:95:43:b4:24:bb:37:2e:0b:5e:e5:08:d8:7f:b0:a5:
         6a:86:47:2c:2a:49:75:f5:89:13:f8:5e:b6:60:af:07:9e:72:
         71:cd:ca:91:b5:62:de:4e:98:96:af:5d:12:3b:7d:40:01:95:
         62:d2:fd:c7:52:a0:7b:47:f7:ba:f4:88:fb:28:bf:f8:ad:9a:
         21:7c:26:61:e5:b8:bf:4f:50:cf:36:6a:c0:99:58:2a:42:c6:
         e6:92:1a:8f:de:63:d8:23:77:7a:e6:c6:6d:98:94:09:16:5c:
         f7:e2:2e:96:6f:ce:ab:09:86:22:7e:3a:d9:9c:69:ab:0d:19:
         d0:82:df:17:b7:28:d2:20:1d:05:b4:f9:d8:ec:7f:3b:27:65:
         f7:01:b0:12:0b:81:ad:35:cc:7c:a2:4f:14:11:80:f3:a8:52:
         bb:4f:d9:bf:b6:1e:49:86:ca:0e:3d:7c:0e:be:67:39:cf:41:
         a8:10:f2:f3:45:61:86:08:50:83:37:70:76:84:e4:cc:52:11:
         1d:a9:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----