Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File:                     1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier:          t1PprpPlWml3QRTkzK6ypMkpW1bwZQ2gwTLYNMjSKMs=
Subject key identifier:   77:A3:7B:42:B8:80:FE:EA:64:28:E2:2F:BC:7B:73:A7:AF:D5:0D:42
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer:       /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial:       01962DF41DFDB836E8E3AA1710C0060C3C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number:          0E65
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: L3XpJKvUsU6OuaFKHEsvbuYmgPEonbYjl+208t5Sjic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:fd:b8:36:e8:e3:aa:17:10:c0:06:0c:3c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=77a37b42b880feea6428e22fbc7b73a7afd50d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:d6:42:93:97:66:84:5c:5d:72:ca:66:b1:
                    96:40:82:9e:12:19:6c:5f:8c:9c:e7:cd:6d:bc:54:
                    b4:f5:50:5e:66:eb:9e:27:2f:62:55:9d:e9:01:6c:
                    62:10:c2:0e:83:68:50:94:ba:ca:10:e4:71:31:bd:
                    70:36:30:4f:4b:00:44:6f:a7:3a:24:15:5f:54:09:
                    6e:b1:58:fd:0f:87:d7:07:33:37:36:29:00:9d:f4:
                    69:4b:56:45:d6:2e:21:13:4a:ef:aa:5a:11:cc:a3:
                    e9:60:8a:b9:24:6d:cc:7e:5d:ba:37:e5:04:78:f1:
                    ed:e5:a4:58:55:04:a5:bd:ae:91:85:5c:2d:ad:21:
                    18:d9:d2:66:09:0c:1b:41:86:b9:c9:17:d4:ca:15:
                    57:a3:ba:84:72:4c:17:54:82:9e:fb:f0:45:b4:b1:
                    a5:dc:0f:5e:d1:da:3b:a1:ec:3d:5e:e6:7d:2c:70:
                    98:b0:de:f3:c9:75:c0:6f:f3:1b:50:31:c8:31:da:
                    41:11:89:7b:c5:7c:8c:ad:ae:b4:ff:da:34:5f:40:
                    2b:74:b5:dd:f6:ec:d8:76:3e:1e:41:46:30:35:c6:
                    ae:b4:70:88:c2:1e:7f:7f:f1:ea:d1:d0:b8:7c:65:
                    cd:91:c0:89:3a:de:72:18:46:8e:46:72:32:3f:1c:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:7B:42:B8:80:FE:EA:64:28:E2:2F:BC:7B:73:A7:AF:D5:0D:42
            X509v3 Authority Key Identifier:
                keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:19:59:34:0d:5e:de:c3:67:53:dd:02:11:3b:11:05:be:
         b0:9a:ec:72:5b:55:ad:40:f1:6f:df:ca:d1:3a:8c:8f:43:12:
         92:77:1f:da:0b:c0:df:fd:d3:44:4a:c3:23:f9:96:71:83:1d:
         e4:5b:a7:17:42:7c:14:50:15:2c:f1:f0:09:d2:6a:74:d9:90:
         85:50:5e:9f:56:01:b7:35:2b:df:66:da:0c:89:7e:5b:6b:2d:
         59:5f:47:a6:15:13:7a:26:a1:36:e7:64:91:00:e1:ce:03:7c:
         74:ce:5a:91:01:84:32:c9:54:d6:8c:e9:9c:c2:f1:8b:46:2d:
         a2:be:63:f4:53:3e:68:e8:6b:66:d4:32:b7:09:88:76:82:63:
         6a:cc:56:26:40:ca:23:2c:ae:34:24:ca:b3:68:d9:97:a2:c8:
         c0:6a:bd:1e:c8:a3:be:71:f1:70:7c:b8:17:47:94:d2:93:ed:
         e4:45:b1:01:89:a1:f5:ef:53:9d:7d:c9:11:4d:8e:5b:37:47:
         1a:8c:96:60:eb:17:fa:6e:97:4b:35:9e:73:01:02:4f:d9:3e:
         4f:7b:fd:31:d7:67:c6:8b:2b:85:19:3a:11:fe:e8:12:88:c3:
         5f:0d:33:7f:aa:91:ec:85:83:39:43:9f:56:c7:70:b9:7d:d5:
         5b:60:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----