Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
File:                     04BE23ZiygAUgai9swt6vRi86ao.mft (raw, json)
Hash identifier:          gE7qwK/ikn2OksVIJl/5abUr243vhfQJAI+4YF9qsX8=
Subject key identifier:   56:27:B4:98:05:38:3A:76:1C:43:DE:7A:EC:53:EC:FE:91:24:26:B1
Authority key identifier: D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
Certificate issuer:       /CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Certificate serial:       01962F3DB2C001D2F49F27285B26D360BEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
Manifest number:          0FAD
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 04BE23ZiygAUgai9swt6vRi86ao.crl (hash: VURbWckn605V8Nb/wGevSWeJh/kS6MfS+VZSbySmmds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b2:c0:01:d2:f4:9f:27:28:5b:26:d3:60:be:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=5627b49805383a761c43de7aec53ecfe912426b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:f5:ce:19:e9:24:f9:c8:43:41:05:af:04:
                    9a:55:4e:a8:13:65:9e:9e:e3:ad:9c:86:db:83:0f:
                    18:1a:98:8d:0b:41:46:3a:54:97:38:a6:9e:d1:7c:
                    5c:60:fd:d2:1c:b3:04:75:3b:dc:54:fd:0b:92:cf:
                    35:89:46:79:42:d0:8b:da:82:7e:41:e0:3c:99:bc:
                    8a:86:11:ad:00:cb:20:63:d4:b8:99:d2:6e:06:26:
                    37:b5:99:92:a6:f9:53:a5:91:47:1f:3d:61:de:5c:
                    93:8b:8e:64:5e:8b:ae:d5:06:ba:6f:ad:25:42:1b:
                    f8:9b:f9:5a:56:7a:30:7e:1f:3f:b4:bc:74:f5:02:
                    f3:da:7b:2e:d6:66:2b:9c:5f:d1:80:69:65:5b:20:
                    93:c2:3f:9a:2f:5c:73:6d:45:37:c3:ac:a9:be:ba:
                    cf:80:27:12:fc:70:ce:9a:f7:e9:93:bc:d5:01:c4:
                    b6:69:36:a1:e9:e4:33:a8:df:ad:78:ac:0f:e1:ae:
                    81:12:e1:1c:d2:c9:87:41:db:60:61:c0:c9:6d:1d:
                    1d:34:86:14:3a:44:cd:2b:6d:f9:07:ff:1f:3a:7e:
                    be:65:18:1d:e8:4c:a1:72:20:ec:de:7a:31:9e:42:
                    7f:0a:70:f5:f4:3d:50:16:1e:cb:bc:90:3e:57:a6:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:B4:98:05:38:3A:76:1C:43:DE:7A:EC:53:EC:FE:91:24:26:B1
            X509v3 Authority Key Identifier:
                keyid:D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:ca:0c:0d:db:48:10:27:d1:02:e6:95:92:7f:7f:78:c3:
         60:52:86:8f:70:77:a9:dd:a2:ad:5e:68:d8:ce:a8:64:5c:1e:
         41:20:fb:ca:cc:ba:71:4f:d8:18:4c:bb:3e:64:b8:ee:68:16:
         f3:67:3c:9a:e2:51:ac:7d:6b:21:5c:93:12:32:1a:d4:fd:64:
         c0:fd:ea:b9:63:a1:8b:a0:e4:7d:34:ba:18:09:81:72:fd:33:
         7a:f2:54:c2:16:8d:db:c2:d8:42:1e:9b:c4:71:be:de:9a:60:
         47:10:bc:35:75:bb:fa:ce:87:f9:77:22:6f:d3:52:df:d3:f5:
         a1:3f:79:0f:0e:36:08:88:17:cb:5c:fb:b7:ea:75:c1:6d:ac:
         8f:2c:6b:07:98:c7:67:75:f2:60:ad:00:a9:a8:ad:04:29:a2:
         e1:aa:d4:79:96:4d:b5:5e:f2:4b:a1:88:b4:72:d4:0b:39:bd:
         0f:0a:2f:7f:88:b3:be:c0:e5:4e:4e:5a:59:63:bc:28:c4:72:
         2c:32:2d:d6:32:43:e6:0b:96:60:e7:57:f4:7e:a5:81:53:8f:
         1d:49:df:c4:32:d2:5d:d3:bc:bc:a5:5d:e9:a7:e9:ab:23:02:
         99:48:e7:29:10:3c:e1:b4:89:24:da:ab:17:ac:17:47:09:75:
         cb:46:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----