Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File:                     skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier:          /GulROXVKnY0rRFred/RCzugvkZ3jdSh/06WecIocbw=
Subject key identifier:   5A:F6:47:A4:27:18:D5:AA:A1:41:9F:33:B7:D9:22:D3:89:83:5B:A2
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer:       /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial:       01962E993C99F3F3F2F4E6DDB0B98D5E0C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: YAFw0bjD51qq8sjHPIe0H+YKdvSNTuFpq/us27F9Hnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:99:f3:f3:f2:f4:e6:dd:b0:b9:8d:5e:0c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=5af647a42718d5aaa1419f33b7d922d389835ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:23:94:1f:bb:db:da:a0:63:0b:07:2a:da:
                    ad:3b:c3:82:27:d8:9e:b4:87:34:55:e7:68:93:4e:
                    c1:6b:e5:49:2e:f5:45:b3:cb:76:9c:76:24:57:e4:
                    02:77:98:14:ec:41:9e:7a:b8:45:5b:0a:38:14:bb:
                    ad:93:43:76:f9:97:21:e0:1e:c0:d4:e9:22:65:ac:
                    a1:d4:9b:53:c9:ed:6e:a1:0f:e8:3a:95:90:05:4a:
                    d2:29:ef:6d:45:65:c1:27:56:30:26:3e:81:5a:bc:
                    96:ed:5c:13:cd:9d:0f:1e:91:56:55:d4:3b:af:04:
                    0b:77:88:fa:49:4a:e7:61:78:a6:6f:4e:74:1e:97:
                    be:5a:86:98:88:07:72:49:f1:be:2b:1b:0a:e9:cc:
                    ff:80:1e:fe:4a:31:e8:27:d8:7b:5f:54:1c:44:c1:
                    a1:af:48:a7:74:27:3c:fe:03:71:d2:b1:96:f5:d0:
                    ab:97:4f:d7:18:f3:56:d8:ca:86:8a:42:bb:ae:25:
                    b0:b1:a8:b6:54:60:19:f3:05:96:66:84:bd:2b:ae:
                    63:05:29:1f:6c:8a:69:ee:f6:81:6a:0b:45:36:ce:
                    31:07:76:fb:a8:66:74:ab:af:35:b8:87:76:3f:4e:
                    0a:2e:d8:34:8a:f3:f0:1d:42:f7:2f:f8:7c:cd:d7:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:47:A4:27:18:D5:AA:A1:41:9F:33:B7:D9:22:D3:89:83:5B:A2
            X509v3 Authority Key Identifier:
                keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:71:43:ef:dd:c2:1b:56:df:f6:fb:0a:dc:18:30:26:d3:30:
         65:e2:43:c6:fe:91:22:3b:de:b3:f1:b8:cb:72:96:0c:6d:57:
         09:3a:10:34:a2:fb:15:ac:b2:be:6b:05:4c:1f:c9:47:29:1b:
         24:52:eb:3f:11:e9:0c:bb:cf:92:b1:b5:21:a3:72:42:83:7a:
         78:50:ec:36:f2:c7:8c:66:02:2d:d3:3d:17:1e:8d:44:94:df:
         18:43:ef:d9:2e:f6:cc:ee:2e:e5:8f:29:b6:bb:a5:12:93:31:
         33:6b:b7:23:26:18:0c:94:73:7a:1c:e0:e0:bf:c0:bd:ea:99:
         d6:c5:37:8f:20:82:8f:4a:a6:aa:1d:08:2c:38:83:07:85:0c:
         7d:e6:bc:cf:b5:67:5e:19:02:4f:63:3e:b3:89:b3:fb:b8:63:
         05:ca:53:dd:e5:d0:a1:7a:70:45:43:45:c8:5b:8b:a9:3f:17:
         8c:8d:4f:d9:2c:b7:40:a9:12:b0:af:b0:fb:aa:ba:a2:f1:2d:
         78:d0:4e:2e:c0:e0:90:89:1e:55:1a:8d:4e:71:48:a9:a6:44:
         3c:8f:ac:a6:34:8f:e4:65:ed:c1:37:09:21:f7:c8:98:33:96:
         e8:89:b2:16:27:95:ce:12:64:0b:5d:86:e2:58:8f:13:1f:17:
         d2:e1:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----