Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          TyaPXJgFXLhArcrIrVJ1HIu7ELowD1dDrgshut+qNwo=
Subject key identifier:   F2:1F:C3:14:E1:2C:CA:3D:CD:2E:E4:43:77:BD:02:95:F4:BA:A1:02
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       01962DF3F09870F891A697BA36CD1A486AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          048E
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: WxJIgk4hM3vP6k/jKNk6wz12Ih6qMivwp92OnDSWnC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:98:70:f8:91:a6:97:ba:36:cd:1a:48:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=f21fc314e12cca3dcd2ee44377bd0295f4baa102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:ae:a5:c1:c4:21:24:1d:51:ff:99:cf:f5:
                    9f:56:9f:3d:6a:06:d0:db:e8:24:1e:65:bc:41:03:
                    35:2d:53:53:e3:48:2b:e1:a2:3f:11:37:c3:76:ca:
                    f2:db:ef:d4:eb:49:12:fa:d9:95:c5:78:b8:d5:df:
                    06:da:9c:97:03:6e:36:16:ea:ac:b1:00:de:60:69:
                    07:9a:1f:ca:39:eb:4d:90:96:fa:f2:ba:db:8c:77:
                    50:36:7d:24:54:9a:19:72:be:05:cf:39:71:cc:d0:
                    9b:e2:77:a5:4c:3f:2c:26:26:3a:05:86:d8:a2:f6:
                    03:29:df:18:66:89:12:83:a7:50:0e:48:d1:9c:11:
                    4f:ca:d8:7a:a2:b0:9f:b1:d6:70:f4:60:57:d4:70:
                    2f:a7:e4:25:d6:0e:5b:e5:10:c6:52:6a:3e:d7:26:
                    81:8f:55:1d:58:94:f4:c0:b9:7f:4d:48:d0:a9:da:
                    d4:ec:e4:dc:07:82:ea:f2:cd:b1:b6:15:cc:24:01:
                    1b:6e:c3:b4:29:81:80:e4:b0:4c:65:e7:05:59:b6:
                    53:84:2c:13:8e:2a:89:6c:d1:36:8a:10:52:ee:f7:
                    2c:d9:4f:4b:b9:c0:f8:bd:15:31:48:b6:bb:03:a5:
                    b3:d4:3e:f5:5c:ac:27:05:3a:bc:6a:87:80:cf:67:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:C3:14:E1:2C:CA:3D:CD:2E:E4:43:77:BD:02:95:F4:BA:A1:02
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:f1:1e:66:53:04:b8:2d:f9:40:7f:5a:61:a2:26:ed:c9:
         56:be:80:c1:19:e3:28:c9:4f:ac:f1:69:8d:c1:fa:96:48:db:
         35:ff:3f:23:89:5b:e5:ed:ce:c4:ac:90:48:d9:fc:5c:dd:d3:
         72:a9:17:1d:11:98:72:fb:bb:fb:f7:4f:fc:52:22:ec:17:dc:
         b5:bb:0d:e1:ff:1c:33:74:d9:3c:7c:d1:3d:32:74:15:f4:f1:
         77:71:ea:03:7a:f5:15:bb:89:06:7f:d3:6b:ce:50:84:50:f6:
         c8:56:95:02:06:f0:9a:8b:f4:74:58:ae:0d:39:43:64:3f:27:
         e3:98:05:95:45:8c:a5:4b:86:4b:bc:65:57:5c:3f:ca:a9:52:
         42:6f:1d:c8:72:79:09:3d:40:72:51:cb:d5:3b:fe:ca:60:95:
         d8:3d:9e:3a:0d:a8:42:52:60:5e:05:fe:41:0c:38:93:d8:8c:
         c0:7c:52:50:12:bf:7c:df:d9:bb:cf:f4:22:14:7c:7c:b3:2a:
         5a:15:2f:a1:b7:b0:79:55:50:3d:14:ba:1f:c6:77:3d:43:2c:
         69:d4:4b:72:05:8a:53:84:33:69:14:d4:ca:ea:e4:e4:d1:70:
         d7:30:c8:f9:6d:9c:e7:dc:ff:05:53:c2:ae:4b:e5:eb:3e:fc:
         46:0f:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----