Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File:                     2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier:          kxcgn7+6W/kRWyrAtZKsEU2Ma7Or+q2BcKnDD84NXdA=
Subject key identifier:   D0:BB:BA:FC:B4:8A:35:C5:56:46:90:A6:10:5B:5D:0A:C4:96:7D:7B
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer:       /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial:       01962F3DB9A3E3794209AD95C363CE167213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number:          1447
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: ALON0rSJ69/M5oxAr29NbbP6Y5PXAWZHUxU3/7+vb8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:a3:e3:79:42:09:ad:95:c3:63:ce:16:72:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=d0bbbafcb48a35c5564690a6105b5d0ac4967d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:6a:32:3e:4b:c1:ed:74:fa:36:29:9b:c2:
                    98:0e:00:49:6b:b7:9d:41:ff:f2:79:22:08:ba:bf:
                    b1:6f:74:1c:9e:eb:d8:b9:3e:f5:64:88:4d:03:18:
                    ff:41:df:ae:e3:18:8e:37:3d:52:c2:c8:83:37:85:
                    c2:74:59:a9:7d:9e:aa:4d:df:ed:db:f8:3c:09:83:
                    10:b8:86:e5:37:dd:a6:05:11:6d:3a:b6:2c:bf:3a:
                    bb:87:8f:b0:db:56:22:c0:83:c8:94:5d:5e:bc:07:
                    40:c0:51:47:82:91:ab:01:0d:c6:27:2e:ef:94:56:
                    36:68:5b:e5:83:99:97:01:cb:40:a1:b9:af:c9:94:
                    11:1e:2d:a1:01:f6:bf:1c:8a:a5:74:aa:9d:c8:d4:
                    ef:03:f0:f9:24:b2:e6:e9:f3:d3:e7:f8:21:56:53:
                    a8:3f:be:c2:f4:20:fe:37:7e:56:ac:ed:66:95:91:
                    c6:e8:ae:b8:02:e6:71:a3:6c:90:60:42:32:76:9f:
                    79:c8:a2:e9:05:82:27:78:97:a8:8e:e9:ca:e7:b9:
                    6e:2a:ab:05:80:18:e9:35:c2:e0:42:26:89:52:cd:
                    43:f8:36:a3:ac:70:01:d8:6e:32:2c:30:1e:24:32:
                    31:db:8b:55:6f:37:ae:e0:1b:a6:df:83:37:07:2b:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:BA:FC:B4:8A:35:C5:56:46:90:A6:10:5B:5D:0A:C4:96:7D:7B
            X509v3 Authority Key Identifier:
                keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:ce:b2:59:18:a5:a2:0e:b9:95:84:9d:41:10:fe:56:7f:
         d4:58:bb:eb:37:b8:21:28:6d:17:3d:bf:61:85:7e:50:b1:32:
         49:58:12:32:f3:20:9a:b4:ef:32:50:b2:40:b1:81:10:2f:59:
         5a:a5:94:77:85:19:9e:4a:26:ba:3c:50:f6:d8:b3:87:ad:6c:
         95:54:cc:3a:d0:b9:1a:96:55:80:24:c5:bb:96:2c:54:84:3b:
         6a:11:85:3b:b3:2b:9a:fc:e7:3e:44:ea:d3:39:6f:13:f6:dd:
         d1:aa:3f:31:45:41:fa:1d:57:93:ef:20:36:65:93:03:37:2e:
         5b:77:60:83:d6:0f:b5:aa:2c:e4:13:b2:93:f7:38:fd:b2:0d:
         d7:bc:34:02:fb:ce:b9:e4:c5:18:91:6f:67:64:41:97:f5:75:
         1e:2b:0b:4c:79:51:e6:1d:d3:07:be:7f:ec:e4:f9:eb:6c:6a:
         dc:03:79:69:3d:96:32:5d:8c:f3:b6:c4:50:a9:40:0a:99:e4:
         6c:f5:f8:e5:43:46:30:e9:8e:18:44:05:8e:ce:73:26:75:6a:
         45:61:c3:b9:1f:28:53:27:bc:23:1c:3d:ae:d4:0c:4b:bc:3b:
         e5:26:96:17:2a:ea:f4:e1:0a:63:94:12:3d:6f:a0:47:6e:1e:
         ce:63:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----