Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File:                     M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier:          QTOiup5PB3STs7sDCFWIpoz4GvKyyxdRqHr73j/6WoA=
Subject key identifier:   77:DE:15:D9:F9:DE:6A:46:EB:AA:DF:AF:18:F0:AE:48:4D:58:4E:DF
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer:       /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial:       01962F068F269FA4EDD42EEF1BB643FE19B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number:          0168
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: RZtzaUzz4DcmDJyoKBgmE4k0fgdJbdc5bM+Whw7KBVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8f:26:9f:a4:ed:d4:2e:ef:1b:b6:43:fe:19:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=77de15d9f9de6a46ebaadfaf18f0ae484d584edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:b0:a1:9f:a8:67:9c:01:79:d8:b4:67:6c:
                    c3:6b:95:f4:bf:0c:39:f1:fa:67:5b:e1:69:d9:c8:
                    0c:d8:54:fb:ad:d3:e5:22:3c:92:fc:f5:54:84:35:
                    05:78:36:ac:8b:12:e2:2e:9e:d9:71:8f:20:69:e4:
                    1b:03:80:8f:23:38:a8:49:07:8b:e2:67:aa:9b:e0:
                    03:cb:99:cd:9d:0b:69:97:91:ee:e6:16:a5:67:81:
                    95:fd:90:cf:41:12:9a:bf:62:cf:db:c7:06:0c:1f:
                    ed:9f:74:85:28:37:a3:17:b0:3b:72:ed:0d:ad:e4:
                    da:d0:d6:dd:a0:ab:72:d3:b9:2b:ed:3f:cc:43:1b:
                    ac:40:6d:04:0d:77:85:84:62:92:01:c6:15:f7:e9:
                    8b:0e:37:18:db:38:2f:aa:e4:dc:c6:23:57:bf:9c:
                    89:24:40:66:dd:60:d2:84:6a:64:3c:9f:07:8f:6c:
                    17:a7:be:1f:16:ae:07:90:ec:f2:23:85:21:2d:f7:
                    e7:d2:0a:53:9d:3d:61:d7:d7:a8:ab:40:c2:09:90:
                    be:19:46:01:53:89:bb:50:ec:a0:8b:96:11:81:20:
                    b1:b6:76:a4:8c:b9:87:10:9d:d4:ba:92:cb:fe:2f:
                    d7:d9:87:1a:3b:f6:9c:f9:40:56:df:73:fc:17:f8:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:15:D9:F9:DE:6A:46:EB:AA:DF:AF:18:F0:AE:48:4D:58:4E:DF
            X509v3 Authority Key Identifier:
                keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:dd:26:91:35:05:2e:75:b7:b1:39:46:07:06:7f:36:4f:90:
         25:1a:b1:e6:c6:d6:cd:15:7e:53:ed:39:ff:9f:e9:95:2f:ec:
         2e:c7:b8:77:77:36:6f:9f:77:2a:ef:40:25:e1:9b:77:15:27:
         6a:74:45:a3:3e:d1:54:7f:9c:9f:8a:5f:39:8a:d5:ff:7b:85:
         f0:1e:8a:3f:ad:eb:dd:b1:ae:d6:b8:77:8c:21:83:10:ee:37:
         97:24:f2:f3:c9:f1:d1:14:fb:e6:41:05:f4:bc:3e:fe:db:a1:
         13:b6:62:6c:e8:fc:6b:8f:52:9a:43:3f:d0:f8:7e:61:7d:91:
         31:ad:3b:0d:6b:12:2a:d9:a8:3f:e9:35:68:df:a1:27:e8:1d:
         2d:e7:f5:81:30:ea:61:c3:6b:ad:2e:8e:d2:88:c7:f3:4a:f6:
         ac:f4:b4:6a:83:b3:0e:b6:2c:f8:24:b0:20:0d:31:34:50:b2:
         ff:36:e8:0f:0d:5c:f7:d0:94:0e:6a:f7:34:1f:ca:4a:9c:c6:
         78:91:92:77:53:4a:56:2d:b6:36:07:34:7c:46:0f:c7:80:f7:
         bf:84:fa:62:35:73:60:53:ad:fb:83:68:6f:a6:33:74:c5:1b:
         4d:88:ad:f6:fb:1f:ad:89:d7:43:63:38:cc:ef:7f:ed:71:be:
         f3:34:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----