Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File:                     cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier:          RtCaG0y4tmcTYdzRv80CMYUhEBBJdFzhAu8Iu8vZ644=
Subject key identifier:   50:52:6E:B0:4C:D5:79:6A:6D:C9:3A:CD:13:34:4A:B4:28:B6:EB:C1
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer:       /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial:       01962E9946CD33FFDBCEDCBB417E9E928D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number:          03C8
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: Mpl0f4buoZVfe0UI4K40Dx0AWBlHbclD6DMAN+fVFKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:cd:33:ff:db:ce:dc:bb:41:7e:9e:92:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=50526eb04cd5796a6dc93acd13344ab428b6ebc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:1c:8d:dd:7a:d8:c3:29:16:0f:65:bf:07:
                    3b:b9:e9:74:3b:3f:f0:df:86:2b:93:59:f9:08:59:
                    db:75:5a:80:b4:ba:45:55:d6:0b:b9:a6:1c:74:6d:
                    47:23:ab:a0:12:fe:35:72:68:b9:8a:59:e3:bb:39:
                    00:a6:6e:cf:1a:b6:ff:2e:d2:30:18:80:b6:ce:53:
                    51:9f:c5:97:93:ec:e6:83:36:7d:6f:09:19:18:c2:
                    77:f4:32:30:24:9f:ed:9d:62:2d:67:a8:11:6f:df:
                    05:c0:b6:af:1a:7b:73:d1:1e:60:78:66:9a:26:27:
                    39:7b:39:e1:df:ba:62:a7:07:a4:f4:6e:13:c9:87:
                    5c:88:f4:7f:30:73:1c:30:9a:8b:1f:39:bd:e6:9a:
                    e1:b4:ee:d6:81:46:a8:99:7f:b0:ac:ec:37:88:36:
                    36:99:90:a8:81:3a:d5:ee:e0:a8:e3:db:77:2e:a7:
                    40:77:f7:76:c1:89:cb:3d:52:bc:e3:b5:65:1e:bf:
                    8f:5b:e3:be:bd:4d:ec:55:b9:23:d3:55:63:9d:3f:
                    b5:fe:29:bc:b9:3a:c0:85:e3:92:82:4c:b6:3c:cb:
                    95:88:8d:72:95:d9:9e:37:c4:c3:18:f5:e1:eb:38:
                    d2:a0:d7:03:c8:81:0a:6c:66:ce:87:62:5c:43:3c:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:6E:B0:4C:D5:79:6A:6D:C9:3A:CD:13:34:4A:B4:28:B6:EB:C1
            X509v3 Authority Key Identifier:
                keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:4d:42:49:66:7a:1e:03:24:82:fc:d9:9f:b3:a5:db:31:
         59:cf:b3:5e:b9:7e:90:83:62:7a:51:c6:9f:cb:ba:95:e8:62:
         27:a1:18:65:b1:e8:a9:52:31:4d:3a:71:04:32:14:97:5d:b5:
         90:71:00:fa:a3:4f:fa:56:cf:7e:94:62:58:6b:5c:b8:83:1e:
         e4:cd:f2:64:10:d7:1a:18:68:87:87:5d:d7:58:f0:53:cc:0a:
         2f:fe:55:ee:8c:f4:57:69:99:9a:0c:1a:84:12:68:76:d5:81:
         86:ea:26:d5:d7:10:39:ef:de:6b:c1:17:01:49:69:36:fa:d7:
         ef:bd:b3:8c:8c:06:40:c8:e0:d2:76:c4:29:34:4e:20:25:25:
         5a:17:0c:6a:2d:56:1a:bb:14:f2:c5:ed:ee:00:eb:11:e8:41:
         fa:e8:9a:ce:f5:ce:61:5e:6d:30:6c:b4:e3:be:6f:24:fe:fc:
         70:53:98:38:c0:bc:f1:23:3c:c6:e8:d2:1f:dc:9f:89:9f:c2:
         72:de:b7:72:ca:20:2d:d9:8a:56:09:89:ed:99:8b:83:d3:f7:
         7f:50:d1:8d:38:92:fa:c7:82:9b:46:b3:00:59:ee:3b:08:fa:
         c0:f7:25:49:a9:a3:90:01:5c:e0:ad:b6:0e:fc:9a:1d:4e:e3:
         ea:49:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----