Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File:                     N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier:          HRZ0rIWHVGaET+7cq1OaKvYfDrioW54u1OeTC7gLufQ=
Subject key identifier:   79:33:C8:30:C3:7B:26:F7:8C:EF:A9:6C:15:2F:EE:7B:29:33:4A:C3
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer:       /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial:       01962F06E1E23F3A58EC09E2F7E29B18B219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: 6HDlXyzfHgTfJsTrGiqxwweySJsrLm36lCijL0cSl3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:e2:3f:3a:58:ec:09:e2:f7:e2:9b:18:b2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=7933c830c37b26f78cefa96c152fee7b29334ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:fe:d6:cb:ef:ec:36:bb:d7:64:fe:65:f0:
                    b1:00:30:4e:d4:85:01:66:c4:b1:f6:7a:89:f2:c4:
                    b2:99:6b:52:1a:76:72:80:36:5e:9b:ee:1d:dd:95:
                    cb:26:47:3a:dc:21:60:38:60:13:97:04:30:4e:35:
                    c9:8d:f5:0c:99:c5:a6:89:18:dc:fe:cd:af:6e:a3:
                    e6:98:68:dc:75:cf:a2:ff:17:22:ba:50:f5:f9:7c:
                    dc:63:1f:4f:4b:47:86:a2:cd:3b:ec:92:61:ee:8f:
                    f2:4f:f0:f1:aa:ea:b2:ad:59:6a:c2:ee:c2:1f:3b:
                    cc:af:0e:dd:ef:a5:82:d8:24:57:e9:9e:cb:e6:60:
                    f2:f9:3f:f7:af:cf:6d:92:5c:06:65:d4:5f:4c:d2:
                    08:ae:5d:b6:86:d0:6d:be:6d:5b:2f:49:23:77:6a:
                    1a:dc:75:c9:b9:55:8b:7d:63:2a:37:4a:25:59:cc:
                    f5:10:d7:84:e2:54:d8:0b:f8:f6:94:cb:38:65:21:
                    73:f9:c5:7c:3f:54:7c:57:66:5d:9f:4e:c7:44:31:
                    9a:76:be:d4:7e:1a:bc:e9:4a:aa:78:f1:a1:39:af:
                    6f:79:52:8f:b2:de:81:bf:ce:5b:65:a7:fc:2d:28:
                    dc:28:82:3d:75:f4:2a:b2:c9:10:4b:20:0d:81:71:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:C8:30:C3:7B:26:F7:8C:EF:A9:6C:15:2F:EE:7B:29:33:4A:C3
            X509v3 Authority Key Identifier:
                keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:63:ff:ff:9c:8d:e8:32:64:62:74:40:0b:91:4f:21:df:56:
         82:df:4a:f1:62:72:0d:5f:26:60:db:ba:d2:42:3f:b6:ca:b0:
         07:eb:dd:1e:0c:d8:fa:16:39:77:43:fd:1c:97:57:e6:b7:87:
         59:b2:6e:e5:d9:d5:d3:e7:13:4d:13:32:46:8a:6d:4e:08:43:
         be:79:3d:17:01:24:7a:76:7e:a1:eb:c3:bb:b8:4c:7f:41:df:
         c1:50:b1:5a:6e:52:ef:e1:ab:66:a1:c8:3a:04:8d:6b:95:4a:
         a6:6d:2d:cc:39:a6:7e:49:3e:fc:42:f3:58:fe:1b:77:39:9f:
         bd:5c:8f:f1:55:da:d5:24:e3:ed:f1:c8:7c:e3:29:13:62:b7:
         ae:df:df:9d:0e:a1:14:0b:f3:f6:7b:c2:d8:0e:a8:3e:c5:cf:
         c8:fe:48:60:d6:a4:dc:76:1a:ab:33:03:85:04:e0:34:51:f1:
         c7:3c:44:93:c8:12:b6:2e:24:4e:74:92:4a:d8:30:76:f6:42:
         a4:be:76:ea:4c:62:8b:7f:9b:4c:43:1d:8f:61:f8:8b:63:8f:
         ed:6d:cd:2e:8b:ea:fb:75:6a:66:c4:30:c0:3e:8d:03:29:40:
         47:8a:5b:8b:7b:a0:2f:33:ac:26:74:87:86:dc:33:66:99:f7:
         47:9e:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----