Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File:                     USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier:          wFGLrLZY0wqYbK6izJ/SEcfxKBx3RhnenT0gEr709lI=
Subject key identifier:   DB:A5:25:72:0D:05:92:FC:8E:FF:D3:56:8E:D9:52:75:F4:09:6E:0D
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer:       /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial:       01962F3D8684C045BE4F0A48D68EFF5520BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number:          02CC
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: bHD1iDr4XLcQBwTF8XHHQMT2opjZq/nYUECluRFZjRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:84:c0:45:be:4f:0a:48:d6:8e:ff:55:20:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=dba525720d0592fc8effd3568ed95275f4096e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:eb:6d:fa:fc:ef:a2:83:24:5b:0b:f8:48:
                    0f:1f:2d:f2:ac:8b:37:b2:59:f9:7b:0c:8f:7c:83:
                    11:85:ea:41:da:0d:8b:91:e3:65:43:4b:a3:14:72:
                    66:9f:97:f2:20:00:d3:64:fb:43:a2:90:9b:d2:31:
                    07:0b:b8:c0:e0:46:c4:ba:0e:e0:83:ad:69:ff:9c:
                    2e:d4:e1:19:d0:56:6b:6f:13:1d:a2:e9:ef:ce:e2:
                    26:8a:86:9d:30:03:29:33:8b:6b:4b:59:5b:ac:09:
                    73:ff:ec:b4:0a:61:1e:d3:5e:79:79:2d:1e:f4:29:
                    d6:2e:8c:fe:ae:9e:a3:d7:83:c2:3d:98:e1:f5:8f:
                    46:2a:13:96:28:2c:f7:7c:59:39:42:f7:20:35:4d:
                    7d:44:86:31:9b:b4:c2:c9:c4:ae:a3:73:08:f2:e3:
                    f9:f9:7c:2f:b4:a9:99:4e:b0:9b:90:83:ae:b0:65:
                    28:75:10:c6:9f:76:04:25:41:1e:0b:80:d2:90:96:
                    94:39:4d:72:12:3e:af:18:00:c4:10:e2:02:a5:72:
                    34:2d:37:d1:05:6c:36:5e:e4:72:a2:f2:71:b9:ac:
                    63:ac:a4:b2:81:18:e6:b2:a2:27:8d:8b:c4:95:99:
                    ba:1a:d3:fc:1a:a6:30:a3:76:6c:9a:be:4f:4c:e1:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:25:72:0D:05:92:FC:8E:FF:D3:56:8E:D9:52:75:F4:09:6E:0D
            X509v3 Authority Key Identifier:
                keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:49:0d:3c:68:0d:b4:d1:6a:4d:15:4a:06:50:a2:9e:e5:7c:
         68:13:c6:30:f6:ba:35:2e:48:45:34:a7:39:71:00:8e:1c:60:
         63:60:7e:c3:7c:74:a7:b0:39:41:75:60:a0:7a:c0:bd:ba:06:
         f0:82:a1:db:e1:dd:ed:2a:84:c0:f8:2a:70:a5:1a:bb:10:29:
         f7:79:94:3e:44:2b:35:c0:50:36:b3:07:b9:d9:d0:94:86:78:
         fe:ed:13:75:2c:35:96:91:d1:bd:4e:14:be:24:4b:a0:9c:92:
         52:b3:b9:4a:de:bf:58:83:43:a3:a2:42:3f:e5:e7:00:df:f8:
         13:22:28:8b:8a:fa:24:6d:f4:1b:bf:cf:8e:a3:97:b5:d8:2a:
         ec:f8:3d:d2:86:1e:ef:4a:25:6d:53:58:f2:5f:fb:1f:27:cd:
         6d:24:15:62:aa:10:ce:f0:fe:68:5c:b3:57:de:48:62:7b:fc:
         32:20:74:a5:41:94:d0:8c:77:df:ba:71:24:6a:f7:ad:78:ac:
         90:8d:74:e6:65:3b:61:77:d6:41:43:3d:4c:17:09:c7:e7:f9:
         19:88:bc:d8:c7:dd:e8:0d:59:32:0c:df:16:84:a0:52:a0:7c:
         00:ab:f1:35:48:e2:48:5f:0a:43:6d:c2:b8:72:99:1d:3b:ac:
         0a:25:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----