Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File:                     I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier:          bIjsfhm0qbK6AHXE9N8AO48EFoRUli/qUIwvSrXmqXQ=
Subject key identifier:   35:E7:42:A9:7D:E6:D9:0C:C1:38:52:AF:AC:46:09:D5:A4:EF:37:90
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer:       /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial:       01962F0718F05F3502581C8717C98E6C2E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: UlmQtiu09e3fQyzMkcs6LGiCrA4PQMetYraf0FAHR14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:f0:5f:35:02:58:1c:87:17:c9:8e:6c:2e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=35e742a97de6d90cc13852afac4609d5a4ef3790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:98:79:ce:5e:b3:c2:d8:f7:95:a1:62:ba:
                    69:db:e3:1f:3d:17:3e:e8:b0:89:0d:8b:15:01:7f:
                    0d:c5:f8:18:fa:4f:9b:ae:1b:1e:3c:1e:33:83:97:
                    83:13:da:24:86:8d:e2:23:e4:a7:e4:e7:f5:2b:6a:
                    2a:14:58:17:61:4b:5b:01:e5:27:10:3a:50:a7:9d:
                    8c:ea:7e:fa:ea:58:e9:56:20:ca:14:0f:8a:d2:88:
                    73:1d:9f:be:d4:e7:90:ea:7d:ce:1d:fb:e1:47:b6:
                    bd:87:ec:92:65:22:ad:6e:ac:06:5e:40:3f:3d:ab:
                    cc:06:bc:35:b2:ef:59:87:a5:43:18:16:d8:1b:42:
                    65:7a:6d:e6:f3:8a:2a:5a:68:68:c8:ad:80:86:7f:
                    b6:70:13:c6:ad:08:00:33:2a:6e:7b:60:25:46:2c:
                    21:90:8a:10:c9:bd:41:a0:0e:95:df:8b:dc:9a:1f:
                    cc:22:51:ad:73:03:1f:33:31:0a:de:fc:ae:ac:35:
                    fb:bf:e1:08:47:93:8c:96:f9:32:40:8a:2b:e7:f6:
                    1b:3f:b5:71:73:5f:a4:7b:9c:d8:a4:26:1c:57:09:
                    9a:ab:00:23:df:74:bb:78:61:c4:ca:d9:c8:c6:d7:
                    d7:c5:2c:c4:23:09:78:18:46:af:4f:5d:60:43:05:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:42:A9:7D:E6:D9:0C:C1:38:52:AF:AC:46:09:D5:A4:EF:37:90
            X509v3 Authority Key Identifier:
                keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:d5:64:4a:fb:4b:f8:34:7b:67:74:cf:d3:bf:13:80:b9:
         d9:fc:12:01:b5:e2:ee:ad:50:75:2f:5e:73:e2:70:1e:c9:41:
         c6:2d:2b:65:a4:8f:58:79:9a:63:91:e4:9e:3d:ba:de:46:fc:
         84:eb:a7:4b:9e:7b:a9:54:2f:ff:0a:44:f9:3c:13:ce:0d:a5:
         dd:39:a0:91:6f:07:fb:09:d9:22:c0:a6:be:d4:ac:7b:c9:b0:
         d1:ef:85:bf:de:1a:bc:86:5f:76:87:41:06:e8:b8:fe:fc:4f:
         dd:a8:1f:25:40:c3:4e:e9:47:1d:b1:e8:72:b8:a6:6e:ed:46:
         d7:cc:c6:bf:7a:4d:58:55:fb:e8:ad:dd:2f:be:b3:37:57:88:
         cd:99:18:5f:16:12:4a:73:1d:5f:fa:cb:bb:b7:6e:fe:05:bc:
         72:14:81:0a:a9:af:34:0a:46:2e:0c:f0:78:a8:5b:66:5c:c7:
         59:3b:f6:d7:af:8d:89:4d:f8:04:e7:67:f7:c2:b9:98:5c:1a:
         fb:4b:5d:76:d8:f3:cd:b7:7c:bd:d8:f1:21:a5:d7:a0:25:2c:
         22:16:f8:53:23:21:29:87:3f:d0:a8:cc:54:b7:2f:78:a2:0c:
         4d:58:a7:49:96:a5:64:b3:7c:c5:75:09:f5:7c:b9:f4:09:d7:
         c6:39:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----