Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
File:                     CUsU8URwOb33-d7l-ik4XB3OlZ0.mft (raw, json)
Hash identifier:          7bWf3l9nVLVe2CM3h7lEuxD8ogO4nsM/Jx4Ry2uNCRM=
Subject key identifier:   BC:F0:A8:76:EC:B7:7F:7D:A4:F7:97:C8:8F:19:B6:9C:D4:94:A6:C4
Authority key identifier: 09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
Certificate issuer:       /CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Certificate serial:       01962E989C50ED23CA922FEE7D6C5A2A6529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: CUsU8URwOb33-d7l-ik4XB3OlZ0.crl (hash: /ynT8V18OrYGfho/e3Xt9gPnG4kPyLu/SEMkZYWTwKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9c:50:ed:23:ca:92:2f:ee:7d:6c:5a:2a:65:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=bcf0a876ecb77f7da4f797c88f19b69cd494a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:20:6b:bc:56:41:f1:4c:1e:37:31:4f:a8:
                    9e:08:4d:7b:f0:49:a3:31:34:3f:01:6c:d8:c2:c2:
                    e8:7f:13:69:94:3c:d4:bc:78:9f:3e:c8:32:4f:b0:
                    b0:86:ed:4b:69:ed:37:71:dd:23:f5:24:74:df:22:
                    df:eb:fc:16:44:8c:8e:69:a1:fb:d7:a4:77:14:af:
                    c3:1e:a6:ab:cc:e9:c6:10:62:6e:a6:db:a5:68:99:
                    b1:7c:64:a9:46:ce:85:11:21:fd:24:bc:53:0b:15:
                    49:18:19:b2:e2:50:7c:70:30:f9:7d:8f:74:51:9a:
                    51:f5:0f:9c:3c:9a:45:c3:af:21:89:3e:c7:e9:e6:
                    ef:68:a8:ca:af:cc:78:ad:04:6b:bf:a5:43:bf:b8:
                    45:79:6f:26:f3:cd:c4:31:aa:5a:81:4b:98:5e:a0:
                    61:7a:df:28:9b:ec:f1:3f:cd:a8:fe:32:85:ef:08:
                    33:d2:0e:7d:81:b8:11:37:13:52:6a:f6:9f:a7:5b:
                    82:0b:ef:46:1d:41:00:69:6a:de:e2:5c:ec:7c:ee:
                    29:6e:6e:c1:8a:76:10:80:83:54:fc:39:a3:62:f9:
                    da:e9:5e:9f:2f:9e:c4:e4:53:20:8e:93:ee:ad:a9:
                    26:7f:f7:5d:c7:65:ca:ba:b3:aa:89:38:55:7b:f7:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F0:A8:76:EC:B7:7F:7D:A4:F7:97:C8:8F:19:B6:9C:D4:94:A6:C4
            X509v3 Authority Key Identifier:
                keyid:09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:d8:a6:e8:54:0d:e8:2c:6c:e5:5e:03:33:cf:79:26:34:
         5e:f3:da:98:11:c8:d9:ed:6c:d5:6f:89:f2:24:eb:71:c9:b1:
         60:0a:db:ba:0d:76:24:92:44:15:fe:3a:ec:29:ad:bc:a3:2e:
         94:3e:af:73:d5:d8:02:3e:f3:3b:b4:42:0d:f9:16:ec:d2:6d:
         0e:a2:1c:38:33:3e:cd:bd:f0:fd:76:ef:b4:00:a2:5a:8d:bb:
         78:df:2d:2f:3e:91:ac:0f:f5:44:05:fc:7b:78:49:2b:af:35:
         27:cf:98:c5:9a:3c:f0:18:0e:a6:3f:f8:a3:30:07:bc:13:5a:
         75:e5:de:34:90:0e:3c:58:fa:18:76:92:aa:a9:74:72:ba:06:
         b3:53:14:cd:91:51:61:81:14:c6:f3:ee:84:58:42:b2:02:32:
         c0:3b:92:9a:48:e9:2c:53:2a:20:2b:08:5a:5a:5a:44:12:aa:
         45:e2:2f:4c:19:2d:e4:14:30:49:7c:02:4c:d9:79:36:e0:f2:
         2f:30:a6:54:ce:0a:9c:56:97:a5:e4:e8:15:dd:9b:1d:7c:50:
         26:06:c0:e3:0b:81:bf:99:32:2c:09:89:d8:91:02:14:20:79:
         4a:9c:14:60:a3:9c:cf:72:a6:45:d5:ac:46:09:29:65:6f:ae:
         24:8d:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----