Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File:                     BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier:          Kn44COwRBAkUl4bqPY+RbcZbZTUQngejLuIYu9kQoT8=
Subject key identifier:   0D:34:4F:46:95:4A:C6:66:62:0D:D7:49:91:DD:27:89:98:67:73:06
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer:       /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial:       01962E98C69880D49CAB387E17F1FB161400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number:          0849
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: Oi9We6KmO6eqJ1cFFqPFupn3yajI7WtqcLiTKstqmYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c6:98:80:d4:9c:ab:38:7e:17:f1:fb:16:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=0d344f46954ac666620dd74991dd278998677306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:b0:ad:d7:5a:b3:6c:30:bb:84:51:5e:ce:
                    2a:c0:d8:99:d7:08:a0:9a:09:94:07:04:23:5e:f2:
                    db:ac:7b:58:dc:67:5b:0a:57:21:04:51:ce:1a:5c:
                    39:79:f3:86:e5:2b:d9:1e:4f:cb:f0:de:a1:25:e1:
                    70:e2:ab:f7:cf:44:ad:8d:9f:f4:7b:42:f5:c0:e1:
                    5e:df:51:79:a5:a0:3c:c1:50:f3:c9:ba:08:b1:f8:
                    7f:17:e0:ec:7f:16:58:8c:95:e5:91:1e:54:9f:bc:
                    7d:de:0c:24:b6:d4:f5:83:58:16:79:8c:30:da:42:
                    4e:cc:1e:76:40:d6:e1:93:48:6e:a5:29:f5:ab:0d:
                    31:a7:1b:96:3c:db:4b:f9:5e:77:2a:86:c9:fc:ab:
                    b1:3c:db:0b:cf:69:ce:74:37:a7:1d:27:7b:38:cf:
                    3f:66:70:93:c7:03:34:97:21:f7:e6:d8:2d:f3:fb:
                    52:6d:90:4c:e7:f2:d0:d3:37:34:41:cc:01:db:bd:
                    93:40:92:e5:9d:28:c5:71:b4:79:02:33:f9:3a:aa:
                    02:13:45:dc:1d:e3:76:02:26:56:12:77:83:d5:c7:
                    66:6a:82:95:49:2f:c0:75:a2:ca:1d:07:8a:f2:c9:
                    03:39:55:ae:b9:0e:95:6a:18:9a:70:ee:e0:30:1e:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:34:4F:46:95:4A:C6:66:62:0D:D7:49:91:DD:27:89:98:67:73:06
            X509v3 Authority Key Identifier:
                keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:22:96:27:48:70:51:06:19:d7:c5:96:99:47:08:32:c5:
         ab:e0:4e:80:7a:cb:70:75:9a:a0:2e:6f:43:4a:8c:b0:f2:fc:
         d1:b5:6b:e5:62:e6:df:0f:b5:e1:21:ec:df:95:d9:d4:36:f7:
         7b:68:53:b6:37:66:6c:60:91:ad:20:72:e4:ab:d2:1b:93:cb:
         4d:5e:40:82:c9:e7:a3:9f:52:1b:ee:31:6c:a6:e2:8c:c9:7d:
         b6:f2:dc:35:9b:6c:fa:f8:7b:69:48:4f:5f:02:e7:d4:6f:39:
         8a:c8:fd:fc:7a:c2:b4:cd:40:b4:dc:0c:d4:6a:70:59:18:5b:
         e9:29:a5:2f:d7:3d:9a:d5:ae:97:d4:f8:a5:45:72:93:ec:3e:
         ca:50:d6:29:11:30:4d:20:d7:6c:68:7e:70:17:6c:f4:5d:d1:
         e5:5f:5e:0d:d9:91:1a:7f:12:c6:e0:b1:95:36:a3:3a:fc:6d:
         f0:5d:73:28:13:de:a8:48:c2:fd:fa:d9:e2:38:9e:c4:82:75:
         a8:82:74:e4:f6:d2:dc:21:c4:6c:70:05:86:48:55:28:75:e7:
         16:74:b8:f8:0f:80:98:dd:9b:74:b2:6e:89:02:c8:f6:01:f4:
         e6:67:33:f7:6d:05:a9:56:81:59:e2:7b:e2:44:23:37:10:de:
         39:1b:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----