Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File:                     EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier:          qCjUDzSBip5gG6tsKuP53+udiZHm45sxI4crprxVwps=
Subject key identifier:   B5:BC:24:2E:79:80:4C:A7:2D:9C:1B:DF:69:18:D6:3F:68:45:31:C4
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer:       /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial:       01962F3D47A6949CC6E8FBF9BE5B0FDE7CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number:          1258
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: hclFlsaN7P48xTGgrQzXK/DPCUO6xWg8mW1+DvTwzwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:a6:94:9c:c6:e8:fb:f9:be:5b:0f:de:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=b5bc242e79804ca72d9c1bdf6918d63f684531c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:0e:18:a1:b3:a1:bc:f2:d9:19:98:72:e9:
                    78:38:81:89:5f:70:b2:2b:06:81:50:e4:1d:9c:3c:
                    24:2e:bb:a5:49:44:38:89:98:ad:9a:ef:64:a5:75:
                    e9:23:22:eb:ce:a1:71:05:78:c7:e9:16:b2:d9:38:
                    f4:14:e8:38:0c:ef:39:a4:9f:a5:0c:cb:d9:04:b7:
                    ee:15:bf:e1:e1:c5:ba:16:aa:a4:93:fa:ea:3e:ed:
                    76:4e:cd:5a:53:e1:59:ec:38:9d:1c:7c:34:9c:e3:
                    13:1b:a0:00:29:66:35:33:70:de:43:21:0a:22:6c:
                    22:a8:9e:9d:ce:14:bf:d9:b2:fb:2b:66:94:13:47:
                    f9:df:32:ad:46:32:51:f8:38:01:ea:54:74:3e:50:
                    ae:ed:1b:f8:6a:e6:5b:3b:16:53:78:de:b9:23:63:
                    12:30:93:5d:25:7a:ab:74:aa:da:df:4a:f6:1b:5d:
                    50:38:6e:31:f6:c4:f4:e0:8f:09:a4:8a:e9:ae:54:
                    cb:6b:e2:5b:df:62:55:e3:4f:54:55:8c:49:ef:4e:
                    4d:31:0d:3c:2d:16:e7:b3:da:6d:58:b8:a0:9a:1d:
                    f4:0a:9b:d8:f2:ab:f7:1d:6d:d9:ed:5a:6d:6b:a4:
                    12:ff:6d:0c:de:e7:d6:bf:52:00:38:91:2f:9e:d1:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:24:2E:79:80:4C:A7:2D:9C:1B:DF:69:18:D6:3F:68:45:31:C4
            X509v3 Authority Key Identifier:
                keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:b1:8a:cf:eb:a1:e4:c9:98:1c:37:4f:8c:c7:ad:c6:1d:
         81:69:77:6b:c2:ea:ab:42:55:5f:62:81:88:55:68:66:40:70:
         d5:c1:b9:9d:92:ad:28:fb:14:69:23:34:6d:cf:51:02:d2:4d:
         13:6f:98:7f:11:40:b4:c1:90:dd:75:a4:a7:e8:ed:65:07:be:
         ea:88:ab:6b:45:54:46:9c:00:4f:ca:47:1c:ea:ce:1e:80:73:
         14:fb:f9:65:02:65:2f:8b:78:54:0f:e3:1c:9a:a2:e3:02:a8:
         85:99:ed:cd:09:23:ff:7d:20:a0:e7:35:f9:41:30:20:fd:b8:
         6b:a6:24:fe:5a:de:83:ad:59:56:11:46:e2:59:d1:4a:29:66:
         e1:7e:a9:45:ac:35:83:b1:8c:19:f3:33:b8:d5:e3:84:ef:c8:
         fb:af:b6:91:c4:ec:48:07:bb:b8:3f:70:b9:d5:80:87:0a:dc:
         26:0a:9d:12:97:8a:0e:31:ce:2b:77:b1:73:c9:74:d4:ef:1f:
         2e:50:f2:a8:fe:54:8a:2b:f4:93:f7:6c:4b:f9:d2:34:4f:df:
         bc:e9:22:80:e3:07:f9:b5:7f:48:94:64:2c:26:52:5c:3a:b2:
         0a:3e:91:0a:b0:8f:68:2c:51:39:1f:dd:2d:07:25:f9:f4:c0:
         b0:26:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----