Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
File:                     kSJw6MgQ1eHznUdcGjEdd08XGlY.mft (raw, json)
Hash identifier:          WlZOHTtDOu+tIz8k6lYqDeucvyWDxO3rDSSL4mJqKog=
Subject key identifier:   97:43:10:21:42:EF:85:25:EB:44:16:67:3C:C0:BD:08:C4:E1:80:ED
Authority key identifier: 91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
Certificate issuer:       /CN=912270e8c810d5e1f39d475c1a311d774f171a56
Certificate serial:       0195C83F2A395A0F98663B8B4B2F065F57D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
Manifest number:          1377
Signing time:             Mon 24 Mar 2025 13:02:17 +0000
Manifest this update:     Mon 24 Mar 2025 13:02:17 +0000
Manifest next update:     Tue 25 Mar 2025 13:02:17 +0000
Files and hashes:         1: kSJw6MgQ1eHznUdcGjEdd08XGlY.crl (hash: nVMvSerJUHXNLD6DUv6xsTsG0BkOcuhJmzPKYi4NDYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:3f:2a:39:5a:0f:98:66:3b:8b:4b:2f:06:5f:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912270e8c810d5e1f39d475c1a311d774f171a56
        Validity
            Not Before: Mar 24 13:02:17 2025 GMT
            Not After : Mar 25 13:02:17 2025 GMT
        Subject: CN=9743102142ef8525eb4416673cc0bd08c4e180ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:7c:0b:cc:8b:74:e8:9b:12:93:ef:b0:67:
                    e9:c6:7d:61:f4:5d:3a:81:5c:0d:6f:7c:b5:46:bb:
                    9e:b6:6c:60:bb:43:25:a3:8f:95:60:23:9f:47:bc:
                    80:f3:20:94:9a:a2:87:1e:38:4d:2f:93:63:88:ac:
                    c4:8e:ae:6b:a5:e4:3c:b9:3b:41:19:3c:f8:8f:54:
                    3d:e3:04:d5:4b:cc:44:cb:57:3c:77:3d:4e:a2:df:
                    ff:e2:19:56:c8:6a:35:6c:c6:e5:90:f8:f3:92:8a:
                    a1:fa:32:15:cc:d9:e7:c7:e4:a2:d9:b2:c3:30:34:
                    6e:3a:11:05:cb:c8:8d:5d:77:88:15:15:21:64:fd:
                    e8:c1:84:c1:0b:0a:f3:92:3a:3b:d0:cd:cc:7b:e9:
                    5b:d4:7c:32:0d:05:ab:73:d7:62:57:e1:48:0d:f7:
                    14:5e:bc:21:dc:75:69:e9:f4:b3:e3:41:69:6c:55:
                    15:5d:6c:39:b2:da:ea:e5:66:e1:af:3d:e4:a4:4f:
                    6d:01:60:d6:71:6e:6c:9a:1b:7b:a2:b2:f5:ea:2c:
                    ab:c2:4d:21:c9:77:22:c7:d7:e8:9f:40:c1:91:bd:
                    92:41:58:4f:e2:8b:96:f4:53:ba:62:d7:c2:b5:0e:
                    a4:86:a7:b9:05:61:18:49:bd:a2:d0:8b:63:66:4a:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:10:21:42:EF:85:25:EB:44:16:67:3C:C0:BD:08:C4:E1:80:ED
            X509v3 Authority Key Identifier:
                keyid:91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:ea:b9:ce:93:6e:63:0b:e5:37:4a:c1:f2:e1:f2:58:32:
         9e:3e:71:1c:ff:08:db:0b:e3:f9:24:02:c3:3d:b5:93:93:f0:
         86:d3:e7:f8:e8:75:1d:c5:57:ad:6e:3b:00:80:55:7c:41:02:
         a7:8a:e2:95:6c:37:8c:f9:61:c1:3d:f8:97:55:e6:11:44:40:
         c1:28:d9:af:64:c4:16:96:2f:06:d5:e1:05:8f:f9:b4:26:f5:
         be:76:a6:6c:f3:61:60:c9:33:c8:21:3e:99:1b:17:b2:1e:96:
         64:70:d4:04:ec:93:37:8c:3b:20:9f:a6:39:cc:48:4f:31:b8:
         41:3c:9c:30:35:98:9f:4f:d8:1a:99:5e:b5:08:ed:c1:a4:8a:
         20:64:37:6a:75:3c:ea:8e:e3:8d:3c:39:42:ab:4b:64:3d:3a:
         d5:db:74:2a:20:bb:19:65:52:aa:75:ca:0f:9e:13:b6:b4:23:
         64:ba:59:fa:79:1e:31:6f:14:a9:89:c8:cd:e4:7d:c1:05:36:
         28:67:f2:44:cd:2b:ed:a7:8f:83:ef:d3:b7:b5:57:5f:a3:94:
         e9:b8:33:11:88:a8:e5:bb:e5:ae:24:fb:10:84:f2:aa:6c:39:
         b8:46:b2:ab:4a:69:08:7f:70:40:eb:f9:2f:7c:03:d7:d8:ea:
         74:75:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----