Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File:                     rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier:          5ojypyMdP4gqOxd5sZmFPJ+SnXb+DDj9Y6DPQuCc1yg=
Subject key identifier:   07:EC:57:01:96:0C:54:09:2F:C6:9A:CD:3D:BD:7F:28:A0:23:EB:69
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer:       /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial:       01962F746B5EBBD32DE340C5B1ED74738C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number:          0400
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: oLCDp9JpC0+pcs17scDkzF2kja8vKny8nFi/o1m8V7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:5e:bb:d3:2d:e3:40:c5:b1:ed:74:73:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=07ec5701960c54092fc69acd3dbd7f28a023eb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:55:2b:b1:dc:06:c3:3c:00:b1:c1:4b:db:
                    d4:7f:46:d2:3e:60:31:89:ec:0e:7b:8e:26:48:93:
                    a2:45:fb:c9:4e:44:b7:cc:87:e3:2a:83:9e:3e:db:
                    0a:08:de:50:8e:69:a4:98:18:aa:9f:13:96:63:31:
                    6a:4e:5c:a6:be:61:da:f6:ac:85:fd:9d:4a:3b:99:
                    64:8d:f9:36:cc:dc:51:2c:93:94:33:71:43:94:dd:
                    2e:c0:09:f9:69:a5:9f:bc:2e:a3:fe:aa:d3:6a:69:
                    14:fc:6e:17:b3:6d:3d:7f:78:73:22:64:cd:71:ad:
                    1c:74:b2:59:af:3b:51:71:47:22:97:4a:65:fb:03:
                    57:a7:60:20:89:3c:c7:e0:6a:25:b5:2c:36:67:03:
                    81:75:c5:2d:ba:90:b8:f8:66:8f:0f:08:25:66:64:
                    24:d6:bd:59:d9:25:45:c4:4d:e4:9e:36:cf:22:23:
                    a0:fe:dd:bc:e3:05:06:cf:75:c1:9f:ec:54:c7:d5:
                    d5:2b:5a:86:a6:c2:3f:6c:18:2f:c2:73:43:cc:b9:
                    bd:9c:62:82:70:f4:73:20:a8:98:08:38:9f:4e:83:
                    c8:08:1e:68:a2:d7:06:71:c5:82:84:56:6e:16:19:
                    28:68:06:c8:17:c2:a0:2a:e7:71:ee:f4:0c:e5:77:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EC:57:01:96:0C:54:09:2F:C6:9A:CD:3D:BD:7F:28:A0:23:EB:69
            X509v3 Authority Key Identifier:
                keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:a5:2d:74:9e:8f:aa:1f:56:f5:0f:7f:0e:76:e1:d4:41:
         8a:84:62:2d:b3:27:e5:a4:99:6b:ce:02:08:8b:e5:57:b5:a4:
         2d:8d:a5:5f:c7:46:92:4e:74:1b:ec:92:59:dc:d5:93:a1:0b:
         ab:4d:2f:c2:80:b4:a8:da:bf:52:ad:a6:8e:9e:2e:e9:75:db:
         c9:ec:02:9d:7f:6c:71:6a:3d:3d:d6:f3:d7:03:40:df:bf:4c:
         25:8c:a8:6a:05:d4:76:b2:6a:be:2f:67:d6:8e:31:bb:0b:d2:
         89:f1:5b:96:6b:78:40:7a:2a:89:f5:21:2a:c3:13:c5:94:40:
         1f:d7:22:a8:59:d6:f9:89:a7:b9:6a:30:ef:b5:34:bc:dc:e6:
         03:0a:d8:b1:b1:1b:9d:c5:6c:11:10:c0:b4:8f:55:33:ad:04:
         76:ec:dd:17:76:60:bb:f5:c9:02:5b:80:eb:0c:87:c5:11:9c:
         c4:f6:61:f9:eb:0d:e6:5d:d3:f2:76:aa:f4:65:f5:02:e6:9a:
         89:1f:82:2c:42:7a:f1:23:7a:9f:44:0b:04:fc:1d:8b:88:db:
         0d:fe:ad:de:8e:1f:3e:f7:be:eb:b6:0b:f2:ae:9d:db:19:d2:
         ad:61:8d:b3:22:24:d9:ca:d6:69:29:b7:06:c8:23:70:7e:81:
         7e:dc:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----