Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
File:                     U_tSQvmM_53qm6qMiuRmpCtTfFw.mft (raw, json)
Hash identifier:          aQKTHKMbL/NvAsbcrfwILO5JAdhBMNYjhJX9Xz+SNZA=
Subject key identifier:   56:5A:69:07:4A:60:7E:A9:80:4F:95:EB:E2:27:DF:F0:FE:A0:7E:3A
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Certificate issuer:       /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial:       01962E99B5A1994C03CF00E11F5DA39AE029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
Manifest number:          14CF
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: U_tSQvmM_53qm6qMiuRmpCtTfFw.crl (hash: InDJYFAf01+J5p9pOiI/H2hbaLoHwXCTFbeZqH/B9oA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b5:a1:99:4c:03:cf:00:e1:1f:5d:a3:9a:e0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=565a69074a607ea9804f95ebe227dff0fea07e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:30:31:fd:07:ea:4b:48:0d:6f:f5:07:e1:
                    2c:b1:8d:6f:c8:d8:17:32:e3:6c:81:51:67:94:1f:
                    07:e2:94:85:bb:a0:26:79:10:0f:2e:cc:d9:79:03:
                    b2:ac:ee:c7:a9:53:8b:30:46:e3:60:d3:ce:09:ae:
                    46:8d:c2:74:c6:78:50:b6:c5:b3:a9:9f:db:55:84:
                    5d:03:5f:4a:0b:3d:5c:06:6a:c7:18:03:e5:9f:2e:
                    85:9d:9c:58:b7:ca:d2:2b:87:e2:c6:6a:04:0c:86:
                    f9:5d:c1:58:c0:92:de:5c:ec:04:bc:23:25:4c:6c:
                    29:07:a4:6a:a1:b0:42:65:e8:d4:f0:dd:91:af:6c:
                    53:2c:42:f0:a4:65:a6:31:ec:16:c4:91:48:61:00:
                    c9:3b:d7:fb:95:d2:b0:ea:6c:e0:2f:f4:17:aa:78:
                    25:c9:5e:9f:56:24:6d:4a:64:90:4f:86:3f:1d:c4:
                    69:ec:d9:6b:80:15:08:f2:8c:1d:96:7b:17:80:3e:
                    62:ae:e9:62:30:a2:fd:98:33:2d:b5:35:4e:2d:10:
                    e8:81:31:39:9b:eb:c4:5b:cf:7a:66:c5:d2:fe:12:
                    6d:ad:f0:25:fe:21:f0:01:0b:70:60:97:4d:b3:d7:
                    ed:d9:ec:8f:aa:6d:5b:2f:d4:ea:9d:24:ba:6a:28:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5A:69:07:4A:60:7E:A9:80:4F:95:EB:E2:27:DF:F0:FE:A0:7E:3A
            X509v3 Authority Key Identifier:
                keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:fa:b5:4f:3c:87:dc:f6:50:98:ef:db:1d:ff:ac:06:01:
         25:59:22:49:bc:15:71:ea:6d:c7:df:0b:2a:ff:90:6c:cf:66:
         9f:d1:1f:7e:e0:72:5c:29:61:96:15:60:09:6e:1f:d8:3c:e1:
         f4:77:19:0a:af:10:da:9e:c0:4d:a8:ac:dc:f1:2a:a1:2e:c5:
         af:37:c6:5b:49:54:fb:fb:b2:51:38:b9:c0:c3:36:86:2a:e5:
         9d:ea:33:54:dc:01:2c:2f:2d:1c:39:cb:99:02:30:24:e9:36:
         97:79:21:58:72:bf:7f:d1:6b:4e:19:38:2a:a2:fd:a8:f5:6d:
         14:c2:db:09:1f:a0:de:2b:ec:8f:6c:8b:76:4d:1c:66:0c:61:
         06:13:71:a7:07:ef:5b:4c:5d:61:10:8b:a9:2b:39:f7:c6:0b:
         8a:b6:00:12:8f:b8:74:0e:74:d1:26:e3:e1:c7:ae:c8:8e:6b:
         cb:c8:9e:bf:e8:be:ae:08:4b:20:82:27:9d:c9:37:24:95:a9:
         42:14:01:dc:ac:61:ed:eb:1c:8b:24:78:27:71:d3:92:7e:c5:
         7c:fd:3f:86:9c:f4:d8:e3:50:63:dc:68:c5:56:e2:10:7e:d1:
         e3:fc:3a:5e:d9:df:4b:c0:cb:7c:ee:c9:60:aa:a0:4e:ce:71:
         2e:50:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----