Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
File:                     s3fTy2Ur05jE2752zbAILp3u1tQ.mft (raw, json)
Hash identifier:          mPVTjSWsAeqspBla7+BSeLOKMqOnTSURdQEtANCDo+M=
Subject key identifier:   20:69:50:38:25:67:5E:BA:58:A0:0F:DD:8D:52:22:D8:B2:FF:A9:B7
Authority key identifier: B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4
Certificate issuer:       /CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
Certificate serial:       01962ECF7887DD541CB9A0F8380D922C5BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
Manifest number:          037E
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: s3fTy2Ur05jE2752zbAILp3u1tQ.crl (hash: Ps3oIknF8ga72wXW2wcIW3jt+uRDEz+30IrDfCvvdLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:78:87:dd:54:1c:b9:a0:f8:38:0d:92:2c:5b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=2069503825675eba58a00fdd8d5222d8b2ffa9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:c3:a6:e7:7d:33:cc:09:67:3c:32:cd:51:
                    da:bf:07:3c:db:22:6c:51:6b:50:b2:60:c1:bb:51:
                    67:43:4f:f2:55:49:a9:d6:cb:81:89:b7:b5:bf:74:
                    eb:7b:95:f4:2c:54:6d:d7:a2:2e:23:94:68:f5:65:
                    dd:41:8b:22:45:2e:14:02:db:a0:42:05:46:15:6b:
                    4d:a0:b1:49:2a:73:2e:18:88:05:13:d7:fb:ad:1f:
                    d2:21:6a:91:3e:d1:07:79:eb:ca:68:06:13:9b:6c:
                    06:3a:db:89:59:16:5f:31:a5:10:8a:99:77:cb:93:
                    46:fb:58:64:fa:98:85:49:92:c6:e8:9b:0e:93:22:
                    a3:82:e8:b0:91:0b:0b:e9:db:78:a1:fe:1b:77:18:
                    cc:be:41:c0:46:92:76:5e:a7:7c:b3:f2:d4:43:52:
                    5f:a3:bc:f8:af:7e:41:c2:7f:8e:35:5d:ce:af:84:
                    f6:29:12:6f:80:74:8d:74:c1:04:14:39:9d:49:cf:
                    48:c3:78:cc:36:13:71:b9:39:11:b5:da:a7:10:bd:
                    bb:2a:d1:0a:ed:56:e6:10:c4:86:19:ec:29:7b:1a:
                    3c:c8:69:e6:c8:bb:13:bc:7f:47:62:5d:59:58:e1:
                    9a:a9:c4:e1:01:ed:72:be:d7:87:93:6b:39:5f:38:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:50:38:25:67:5E:BA:58:A0:0F:DD:8D:52:22:D8:B2:FF:A9:B7
            X509v3 Authority Key Identifier:
                keyid:B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:8e:fb:77:c5:42:0d:06:53:3c:cd:67:60:94:30:ef:8a:
         e9:bd:0d:4c:d3:2a:3e:d5:a6:d7:82:f8:bf:03:c9:18:90:f3:
         75:89:f1:39:a0:19:32:0c:5a:7d:57:4b:57:91:2b:66:75:94:
         72:0a:73:69:94:7b:6d:b2:04:87:08:48:4b:5d:0f:d0:08:c2:
         dd:a3:1f:79:aa:06:0b:b7:96:97:eb:17:67:84:8b:59:e7:b5:
         a1:0c:60:0b:e5:69:68:51:2d:65:4e:25:ee:72:3b:a1:bd:db:
         ac:2c:bc:c1:55:cc:ac:41:1f:33:68:52:15:b8:80:dd:43:90:
         2f:88:dd:07:77:39:da:e2:6c:c3:f9:7d:46:7e:ab:79:e4:66:
         06:62:a2:2e:2a:92:00:dc:a5:eb:00:39:09:15:27:cc:39:07:
         e4:d2:4e:cf:28:51:86:ef:84:bd:6e:f0:25:84:46:a6:bf:e1:
         96:9c:af:6b:b3:29:71:8b:d5:cd:8a:8b:a8:b2:c0:2b:ab:4e:
         21:82:72:a6:34:6d:ca:97:40:28:a5:ab:89:ee:98:90:65:cf:
         da:ed:0c:b5:bf:49:cb:f8:2c:65:f5:4d:75:82:41:4f:71:95:
         ba:c9:13:7f:99:2d:4f:01:7e:f8:11:3c:d0:d9:68:e3:0f:24:
         0d:f6:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----