Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File:                     I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier:          IrAuJ7NOenrKj4O509K21vqswuSU+teDIzXgmcCl48k=
Subject key identifier:   22:D4:85:85:8F:E1:E8:16:86:F5:CB:7F:55:57:14:AA:C8:10:E5:97
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer:       /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial:       01962E993C9C3B96310DF34C16ECACFE7E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number:          0574
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: HEP9E3JbQXGXgou1vPb3MFhShcYjZ6a3j7nE75saX3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:9c:3b:96:31:0d:f3:4c:16:ec:ac:fe:7e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=22d485858fe1e81686f5cb7f555714aac810e597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:6e:b9:b1:3d:65:17:f3:5c:e2:20:d6:37:
                    a0:1c:40:96:9a:33:07:53:a6:c4:e1:8c:5b:9b:f6:
                    0d:ae:63:16:3e:76:4d:91:6b:c1:d8:33:8a:bb:32:
                    5e:4e:13:6c:c2:f6:02:83:78:24:7d:43:e3:2b:de:
                    c3:97:a1:a9:07:68:b2:e8:ec:79:b6:e2:07:ba:04:
                    63:12:c7:9d:26:e7:97:fa:4c:7b:34:2b:4c:b5:1a:
                    b3:07:3e:c5:7d:d1:45:e2:e7:16:1a:c6:ff:73:93:
                    18:52:57:f9:59:60:48:83:61:48:e0:66:56:69:f9:
                    95:22:c4:1f:1c:5b:2e:b8:17:a5:9d:12:90:1a:87:
                    ea:f5:5e:a3:19:bb:7d:1e:96:8d:87:8d:77:19:0c:
                    f1:29:75:01:d1:02:66:55:db:a0:90:7c:6a:69:c4:
                    22:54:e8:7e:8a:03:ed:b5:2b:06:13:a0:af:88:ad:
                    54:e2:3f:c3:18:9b:1a:95:d9:84:d2:d4:f9:df:08:
                    ef:4a:24:d4:ce:d8:80:74:b6:3d:1b:bb:5f:5c:7a:
                    6b:dc:47:82:fe:e4:15:e4:0a:09:5b:3d:a4:5a:cd:
                    e7:1f:24:78:b2:10:32:15:ee:d0:bb:4c:23:88:f3:
                    e7:ea:ec:b7:f4:be:92:10:09:78:00:a5:eb:76:15:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:85:85:8F:E1:E8:16:86:F5:CB:7F:55:57:14:AA:C8:10:E5:97
            X509v3 Authority Key Identifier:
                keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:e0:48:80:97:95:68:06:61:ef:e9:2f:77:de:36:af:22:
         7a:1b:b6:d2:f2:77:ae:4f:f6:d4:4e:5b:c5:d6:72:f4:56:48:
         08:1d:29:eb:f1:7a:61:b3:e5:42:75:d0:59:95:d5:b1:30:01:
         60:11:24:25:b9:9c:fb:8c:10:7b:50:2a:dc:88:88:bf:17:fb:
         3f:b6:50:36:34:f4:0a:7a:bd:ec:4c:61:ac:b7:79:c2:15:23:
         d9:66:68:c5:69:6b:70:ab:ad:76:f3:89:ec:05:b5:0b:c9:1d:
         0c:62:9d:5d:ca:15:e7:c6:98:8a:2f:ee:4b:1c:48:d7:e7:bd:
         12:39:21:e3:6b:17:6e:ba:3c:93:ce:e9:2f:ae:ce:67:e4:ba:
         52:01:d2:c2:21:86:4f:92:af:95:67:69:0c:7c:c7:16:74:1c:
         59:6c:ca:dc:9e:2c:e5:35:94:a0:13:60:21:55:2a:37:6a:2b:
         63:b1:38:dc:de:22:3a:fd:d6:00:5d:6f:e1:24:8b:67:72:a4:
         26:7d:d6:a1:42:47:0a:37:4b:8b:ca:41:6f:c6:1a:7d:d9:09:
         e8:a9:61:b6:80:cc:83:b9:07:ac:5f:2e:2a:78:cf:63:2e:b2:
         c4:76:7f:f6:26:0d:02:92:2f:38:86:99:14:e8:41:e7:d5:7b:
         50:df:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----