Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File:                     s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier:          f+Tvartr2nq/gno4p6EDlnkmAdQCwfMFCRW5TKgk9AE=
Subject key identifier:   47:35:3F:09:3E:6B:0A:D7:45:22:8A:3D:F1:BF:61:54:C6:F2:44:5F
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer:       /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial:       01962F3D7E58F69CC58D79AC53668DCA7946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number:          0937
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: M8oM3zuaFIUsWNOmKSQY6s6HScFXVrlf2m4Jc591Sfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:58:f6:9c:c5:8d:79:ac:53:66:8d:ca:79:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=47353f093e6b0ad745228a3df1bf6154c6f2445f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:f3:ed:e9:96:c5:f8:e3:3c:08:04:ab:3f:
                    f1:c0:42:c2:7e:a2:25:fe:9b:d1:60:a7:2e:28:a8:
                    90:1f:53:d0:1a:0a:80:39:f4:e5:50:1a:f0:71:3a:
                    3b:c1:bc:9c:2e:17:d3:b3:28:e1:dd:32:4c:79:95:
                    6a:d1:23:9c:c3:e3:1c:d9:3f:26:f9:56:d4:26:a6:
                    fd:d1:f3:36:7f:eb:f5:b7:1c:60:04:0f:47:74:11:
                    71:66:da:68:8a:13:2e:89:b6:24:65:ec:1a:c8:9f:
                    f0:0d:ac:94:c3:fe:1a:79:bc:4b:24:d9:f7:64:77:
                    99:fd:7d:f5:91:5f:83:4a:df:9e:10:b5:a7:d4:64:
                    c4:bc:32:d6:0d:62:29:10:3a:60:1f:6a:a0:36:63:
                    0a:6e:86:69:0c:4a:70:ff:ef:87:86:f8:c5:d0:25:
                    8d:b1:41:b0:0b:7c:ca:9f:de:f9:27:c6:77:40:44:
                    52:46:db:79:07:18:66:c9:31:41:31:fd:47:bc:5f:
                    b3:62:ad:1d:cb:e4:ac:a0:20:75:3b:72:f3:d0:ee:
                    c2:08:ce:4b:56:1c:7f:24:ee:c7:07:1f:9a:c7:c9:
                    66:ee:af:24:ba:6e:36:ae:c6:04:77:ad:57:64:61:
                    9f:b8:f9:f0:a2:ed:65:7f:2a:e3:a2:fa:cf:6f:65:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:35:3F:09:3E:6B:0A:D7:45:22:8A:3D:F1:BF:61:54:C6:F2:44:5F
            X509v3 Authority Key Identifier:
                keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:ad:d0:50:de:d5:80:7f:2a:38:67:14:d9:11:01:5d:f2:
         33:b1:ce:e8:e5:98:c8:d9:51:5e:8b:32:f1:5b:d3:8f:09:60:
         44:52:d1:6e:97:72:ca:16:85:4a:6b:96:f4:95:c4:e0:f1:1c:
         d7:a8:ef:30:ba:b6:c2:b9:c8:19:bc:35:6f:5b:07:39:33:ac:
         60:5a:a2:2e:d0:da:e0:ce:25:5e:a7:1d:ad:f5:44:34:56:0e:
         fe:0e:2d:e7:15:f0:ba:6e:7a:39:b0:e6:a6:9a:c3:8b:6d:79:
         79:f1:c0:b6:3b:3a:b9:e5:65:de:0d:a4:89:27:9f:d9:88:0d:
         9f:c5:3f:24:78:bb:db:a3:5b:44:3f:ec:6c:0c:c9:e8:39:38:
         12:5d:c8:6d:3f:74:01:15:5a:2c:34:b7:68:47:66:c8:7a:d8:
         e0:06:cc:cc:f0:be:25:7d:fe:bd:0c:d5:1d:f8:5a:b3:44:5f:
         aa:27:4b:a5:28:39:69:8d:e5:71:ef:2c:f3:bd:0c:9c:aa:36:
         fe:b1:88:41:21:48:c6:07:eb:1e:ef:d3:b1:5b:fe:1f:c2:7a:
         c3:82:b2:65:01:0b:ca:8d:65:ea:e7:ce:c5:2d:66:4a:04:33:
         05:65:6b:66:f4:6b:49:71:79:cb:55:6a:ea:0e:9b:59:02:d9:
         0f:9e:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----