Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File:                     k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier:          vdUjCubihQmuGH5/byQbPyqAC4Q7IV2VP9W/cGoM/3o=
Subject key identifier:   2D:30:72:53:E1:BB:7B:16:CB:47:90:36:02:CF:61:A8:33:F5:5E:CE
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer:       /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial:       01962F3D5DDA03CEB3DDEA5A6158615455DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: 2gpLaEUMxNPjKsuf3WJsAkKYHYdQC5WSG5cP/P8Mah8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:da:03:ce:b3:dd:ea:5a:61:58:61:54:55:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=2d307253e1bb7b16cb47903602cf61a833f55ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:45:14:0d:c1:a8:1d:1d:00:ac:61:95:11:
                    37:b8:c1:8a:c0:5a:ba:c2:f2:6a:a8:b3:72:98:5e:
                    01:de:fa:ba:3b:86:63:7f:d8:0a:e0:48:ca:40:8a:
                    ac:a6:04:ff:8e:25:ff:0e:6a:d6:9c:fd:03:d5:d8:
                    ed:71:e9:fe:d3:6b:e3:59:88:3c:a4:60:33:57:2e:
                    57:01:1c:42:67:86:e2:09:30:e9:70:0b:8a:47:e1:
                    c3:00:a3:df:11:80:58:d3:88:1e:57:f2:35:cf:31:
                    bb:60:54:c6:ce:75:a1:4b:23:b2:6e:a6:f1:13:b4:
                    09:ed:dd:c1:3b:4b:e7:bb:85:83:06:ad:84:2d:ef:
                    7d:fe:17:cf:62:a8:fb:a9:9d:96:6d:5a:13:08:be:
                    de:0c:0a:75:d8:fd:fa:c9:1d:d8:e2:5e:38:86:cd:
                    ae:74:b8:78:71:eb:07:9b:c0:e2:a0:a4:2f:e1:06:
                    86:31:3a:24:12:22:92:5e:e2:45:42:4a:51:e5:71:
                    88:cc:01:66:0c:6c:bd:b7:4d:30:57:fb:51:5c:c6:
                    1b:cc:4a:55:d6:ca:57:55:62:b4:97:6b:03:52:77:
                    78:7e:0d:5b:d8:b4:59:0b:1c:7d:fa:7c:eb:8e:fa:
                    ef:50:f2:8f:77:f7:12:c4:67:9b:3e:f3:bb:b2:b5:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:72:53:E1:BB:7B:16:CB:47:90:36:02:CF:61:A8:33:F5:5E:CE
            X509v3 Authority Key Identifier:
                keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:06:28:d1:d3:26:b0:8e:db:ed:8f:15:61:80:1c:a9:b5:
         77:64:f4:e0:e1:0d:7b:a2:3d:46:4d:12:ae:0e:a0:1f:84:91:
         db:e1:99:2c:ec:dd:22:34:00:c2:6f:50:9a:08:79:ef:3f:70:
         55:c0:22:b0:d3:7e:ff:08:c4:e4:e4:76:17:4c:06:5c:b8:ee:
         25:ec:f2:ab:1f:39:a5:0a:44:f6:e2:ac:23:93:07:27:f3:57:
         32:bf:57:36:ea:35:f4:52:85:ee:9d:87:e5:a4:53:e7:37:93:
         d9:09:5d:c4:52:a3:97:2a:72:8e:4f:1b:94:f8:8d:d2:13:98:
         d6:f2:e6:25:8b:90:e3:48:23:e0:0c:29:e5:da:ee:31:c0:f0:
         cf:9e:be:ae:0a:7e:04:c9:da:9d:ca:f8:e8:ce:2f:37:0d:dc:
         26:8a:f9:b0:ea:58:24:1e:d0:58:c2:3e:76:44:1d:a1:0f:5c:
         aa:0c:10:35:1c:52:f7:c3:b2:72:37:36:1a:1a:7f:43:f1:f3:
         cd:2b:ca:8a:77:59:84:1f:4f:fe:e1:19:ca:07:96:8a:49:3e:
         b3:c0:37:d4:24:c9:3c:14:bf:c5:ad:08:7a:96:61:54:97:4e:
         f5:71:86:0b:3f:67:4c:73:bd:5d:e4:7e:98:95:8b:32:95:fc:
         09:2a:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----