Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File:                     IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier:          XBfD72S3T+ScBj7tf4g58tYviPiLxslMxmMXqMq39tE=
Subject key identifier:   F0:DA:95:F1:F4:62:AE:45:36:17:F0:4E:B8:6B:04:7A:16:CE:CE:32
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer:       /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial:       01962F3D9B1C959032C389495C4DFF5D24A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: SukxE+xWDlqgPNTPucnOXkWE/rZotzfGJ4VMaLEEARs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:1c:95:90:32:c3:89:49:5c:4d:ff:5d:24:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=f0da95f1f462ae453617f04eb86b047a16cece32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:ff:3b:f7:23:dc:15:dc:5d:03:94:c0:b7:
                    da:1b:d9:d6:27:92:7b:d8:09:d4:cc:3c:7c:4d:4d:
                    92:3c:cf:a6:25:d6:6f:28:41:b9:86:a3:fd:97:34:
                    2c:f0:77:91:4f:27:4e:58:96:0c:b7:6d:21:fd:56:
                    d0:93:c1:05:35:70:f5:da:fa:59:86:0d:e9:a8:c8:
                    cf:58:e2:23:8f:df:5f:24:b9:0c:0a:69:b8:12:19:
                    94:de:a5:95:40:cd:06:69:f1:e5:a9:19:8d:0c:da:
                    4b:c8:0c:e7:86:90:61:c8:2d:29:fb:76:7e:5f:80:
                    7d:80:fd:b5:2b:b8:ef:c3:07:44:06:97:40:cc:7a:
                    0f:0c:72:cb:e6:8d:cf:a8:84:92:03:f9:04:57:04:
                    8e:ba:52:27:c1:9e:a3:0c:ad:cd:d9:ec:33:cb:ab:
                    ec:9c:1b:96:68:fe:82:9d:7a:80:bd:e4:24:2c:4d:
                    8d:5b:1a:41:3e:8f:36:49:68:11:4d:50:14:10:97:
                    c0:a0:16:76:aa:e1:ba:4e:8c:11:70:6a:f8:32:ca:
                    d1:22:ae:73:1c:b5:60:09:b3:7f:5b:0d:21:cb:6d:
                    63:20:47:41:65:29:9d:c9:6d:fd:66:fa:d3:c9:b1:
                    d9:99:66:48:80:33:95:b5:11:3e:98:fe:75:a2:0a:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:95:F1:F4:62:AE:45:36:17:F0:4E:B8:6B:04:7A:16:CE:CE:32
            X509v3 Authority Key Identifier:
                keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:50:ea:48:9e:21:5a:40:31:62:6b:4b:77:bb:df:36:b0:
         09:52:04:66:3a:c2:26:fb:fc:6d:3c:c0:79:b5:a3:0e:34:a8:
         da:42:a6:ca:91:a5:17:1c:d1:5f:00:b0:11:92:a4:15:44:ea:
         ae:55:48:8d:a9:13:c6:33:d5:4a:84:b8:da:88:17:dd:89:95:
         eb:4c:1d:22:22:d6:df:7f:de:df:9d:27:43:76:9a:c3:bc:55:
         29:50:8f:aa:6b:50:0d:b3:ca:ac:63:61:15:aa:44:59:39:e5:
         cb:fb:55:83:62:3e:34:86:d3:c1:83:ae:3e:01:c1:c8:09:c6:
         73:c9:67:16:26:01:71:78:e0:de:9c:e2:57:2b:c1:49:9e:4b:
         ef:39:cf:e7:ac:ac:f5:f2:e8:4a:72:fa:98:a1:75:ec:d6:c2:
         00:9c:0c:6f:f1:d6:4b:f1:0e:ec:82:27:8d:24:44:0c:09:b0:
         e3:18:5d:c8:3c:40:21:b9:38:87:1d:61:f6:cd:52:e8:40:ff:
         75:8f:dd:ad:02:f0:ee:93:c0:c5:01:74:5f:08:1c:9b:7a:74:
         83:87:7c:32:90:f4:51:b2:36:21:9c:3c:33:17:ea:1a:2f:c7:
         72:b7:a6:07:c0:9d:a1:9a:fb:f0:75:43:dd:ae:88:94:4f:a3:
         f2:f3:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----