Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File:                     U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier:          ntM/kRMFRnVsG4HopLh7gzUWFKMT4y7r9vDsu+aqqQc=
Subject key identifier:   27:81:94:6A:3F:E0:DD:AC:39:BB:01:C5:46:73:A6:C9:2B:A0:E6:02
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer:       /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial:       01962E9973AF641CAD087AE46CFFD9DCAB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number:          044E
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: LIu6uu6VS+EEL5/r4u4pUVmX7vlpvRQB+DF9q0qZ95w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:af:64:1c:ad:08:7a:e4:6c:ff:d9:dc:ab:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=2781946a3fe0ddac39bb01c54673a6c92ba0e602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:eb:1a:10:03:fd:1c:aa:a6:06:93:99:e1:
                    a6:ea:b4:b7:2c:d1:d5:70:ca:94:f8:c2:97:24:2e:
                    53:c1:ca:c6:07:e1:bb:dc:a2:67:0d:38:f0:31:c9:
                    53:e6:f7:a9:cc:87:5a:86:bd:75:7f:cf:63:d2:9a:
                    7e:c2:86:23:d1:5f:c5:ad:a0:b9:af:4d:f9:2e:d9:
                    d6:62:ec:b3:1f:c8:0f:8e:e9:e9:a4:e9:47:f6:38:
                    a2:6a:ae:9d:24:e7:d4:93:bc:b8:75:a3:65:aa:2f:
                    68:7c:49:89:3f:8e:ef:37:cb:aa:0c:6f:29:c6:a0:
                    0a:99:f2:27:50:bb:b9:fd:c7:0c:5b:a2:2b:fe:1d:
                    28:4a:41:77:da:55:2c:88:40:9f:2a:d3:14:48:ca:
                    03:6a:ee:1a:70:04:de:13:3a:65:13:93:16:e8:d0:
                    c5:39:ce:41:e0:64:03:9f:fa:80:f2:75:0d:a1:d7:
                    0f:00:1d:61:a7:96:46:6d:ca:27:d6:55:52:b1:1f:
                    79:1b:39:48:88:e7:c3:5d:f4:6f:52:e6:2a:62:88:
                    68:59:60:fa:e2:0c:80:89:56:f5:09:a9:c3:24:e2:
                    09:f1:4d:cb:0a:31:07:4c:9d:76:5f:ef:90:5a:05:
                    ef:32:d3:2f:4a:b1:72:4d:d1:95:46:82:6b:20:3c:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:94:6A:3F:E0:DD:AC:39:BB:01:C5:46:73:A6:C9:2B:A0:E6:02
            X509v3 Authority Key Identifier:
                keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:56:d2:88:b8:50:f8:d3:5f:01:26:41:a1:3a:0c:88:b8:4c:
         50:67:24:c4:53:fa:5e:9b:e8:82:d5:f8:e3:11:c2:e3:75:40:
         5d:82:45:e2:11:bc:96:a1:ea:85:ff:e4:73:70:60:c1:2b:0d:
         a9:6f:9d:de:ce:af:fa:d0:af:eb:d6:f2:52:76:62:cb:b6:60:
         fd:18:48:4e:d0:8f:0c:fb:73:10:2f:4b:15:2e:77:05:ec:06:
         71:a5:28:07:49:46:6d:f9:2d:34:bd:a7:6d:c1:90:71:8c:45:
         1d:42:2f:4b:2b:b9:09:34:46:74:5c:03:0c:cb:12:3e:c5:6e:
         54:da:9e:dc:fc:c0:f9:26:6d:4d:fb:08:50:ae:3a:d0:73:39:
         ff:b2:37:3f:4f:f0:27:9c:93:b9:46:05:cd:46:0d:22:d6:81:
         d0:fc:04:51:7f:88:4f:ae:d4:a2:82:89:b9:4e:ed:a3:fa:b2:
         7d:63:e3:fe:06:c8:4d:17:d1:02:cc:75:8e:16:3c:76:51:db:
         ed:26:7d:41:9d:42:d1:57:9d:5d:fc:b2:18:c6:45:e3:73:6e:
         ad:f5:e8:08:b9:1a:85:22:bf:af:74:9a:8b:c0:c7:35:be:95:
         19:13:6e:26:07:e4:0f:3b:c4:e5:58:2d:3f:6e:5f:bc:22:5f:
         f2:c6:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----