Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File:                     mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier:          xScQt+IeLuvUmUbCQY2XYANI2p6OSxRgMd6LQntm0/0=
Subject key identifier:   95:7F:CD:87:99:A5:D9:A8:46:4A:19:C2:3B:BC:BB:55:38:10:1E:A2
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer:       /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial:       01962F06945FBEEC1280146D1E8B8B5EC83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number:          039C
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: b9XFKRdgdTZ/ZasoRZbtnUTEXkdOKuf1eaIxQ0DNCQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:5f:be:ec:12:80:14:6d:1e:8b:8b:5e:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=957fcd8799a5d9a8464a19c23bbcbb5538101ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:19:fe:34:2c:d2:8b:29:8a:39:de:6d:79:
                    4c:be:53:86:d4:71:a3:2e:57:45:7e:f3:f0:ab:ae:
                    b4:a6:78:26:74:51:bb:d2:a4:d8:59:5e:e9:7a:8d:
                    fd:5c:d5:66:66:bd:44:c0:40:07:b3:a2:24:7b:b8:
                    b2:72:d3:96:28:2a:f2:4c:c6:5d:e3:cd:61:cc:65:
                    95:e2:7c:6c:c0:aa:62:33:e8:b9:30:d2:2f:7d:34:
                    6e:5b:8f:f7:7b:3c:4b:9f:53:6d:d5:08:4f:a8:e1:
                    35:49:63:7f:7d:1e:13:25:bd:1f:85:4d:09:61:9e:
                    f7:08:ee:a4:9c:aa:d7:46:9e:04:26:3d:a2:a0:d7:
                    74:34:72:98:51:6f:bd:64:25:29:79:37:68:c4:1d:
                    82:4f:95:18:86:ad:4f:db:05:00:dd:64:96:15:89:
                    ec:4a:dd:d8:63:ab:ff:72:3e:3b:ba:c9:9d:72:4a:
                    4d:25:ed:6b:af:b4:54:4f:75:7c:47:f0:cf:96:a9:
                    0c:55:2d:9f:67:02:99:7c:79:6e:c3:f1:cb:21:a8:
                    de:a3:d2:bf:b0:ea:98:da:53:c3:4f:31:ee:50:1e:
                    4d:cc:f6:cb:9c:be:9f:e8:8e:e3:4c:8f:77:68:7f:
                    e1:68:96:0a:61:78:31:58:46:66:07:02:fb:64:cd:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:CD:87:99:A5:D9:A8:46:4A:19:C2:3B:BC:BB:55:38:10:1E:A2
            X509v3 Authority Key Identifier:
                keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:ca:df:d8:43:f9:ac:11:12:01:6a:72:ae:53:9b:44:1a:
         0b:30:88:48:2c:a8:40:9b:60:4b:70:c9:30:87:66:ca:67:eb:
         ef:90:1b:01:1b:b4:61:57:fd:cc:ae:19:0c:39:f5:b1:e6:f6:
         e6:e0:31:92:16:23:60:6d:5c:37:fe:49:f6:fb:91:c2:29:5b:
         0e:56:95:c7:4a:11:45:e2:50:ca:22:55:b0:7d:67:c0:19:5d:
         8d:fd:dc:7c:3e:87:2f:d4:ab:93:c1:f2:e2:a3:12:c1:d0:83:
         51:4f:9b:7e:28:8c:b4:81:4b:d4:d3:25:0f:d9:7b:1c:57:28:
         40:88:1f:15:3b:6c:96:7e:64:4b:73:8d:62:cc:1d:23:7a:59:
         f6:24:7d:69:bd:5c:71:31:bf:15:46:a0:46:4e:7c:df:d4:a1:
         f9:b3:b6:87:e2:e9:87:a1:e8:a7:e8:17:e1:37:ca:ce:72:10:
         f5:ef:4e:12:e0:71:44:a8:95:a6:16:f5:28:ca:57:44:93:71:
         32:a0:f9:ef:b3:fb:d9:b6:2c:ba:6e:e7:a9:73:29:2b:76:b1:
         06:24:97:36:51:15:60:0b:ed:33:16:a2:9a:8f:dd:c5:31:5c:
         e1:21:9c:6b:46:09:c6:40:ff:9e:43:fa:e2:8a:42:18:36:75:
         00:21:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----