Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File:                     VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier:          A0aQDfqqcRpAFIb2GJlMYCla3uSaXSBPqv3on2wHI5Y=
Subject key identifier:   34:F8:9A:9D:B1:AC:40:61:07:2A:33:9D:9D:AA:A2:A0:0B:9D:A8:85
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer:       /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial:       01962F3DBDE910629BDECF6BE2B0409D520C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number:          124F
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: XU7RHKt9SWVFQhBlPSREYXJvH5TwU5714vC12wWcUm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bd:e9:10:62:9b:de:cf:6b:e2:b0:40:9d:52:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=34f89a9db1ac4061072a339d9daaa2a00b9da885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:76:57:85:4a:26:ed:8b:f0:3c:08:2f:34:
                    c8:df:f9:c6:e6:4e:48:1b:b0:51:a6:76:40:ae:4a:
                    d4:40:fd:33:52:3e:59:ac:75:16:eb:6d:61:c6:0b:
                    a4:8b:99:16:f1:99:70:bd:1d:e9:c2:17:fd:14:df:
                    bb:03:6b:03:57:cf:4a:cb:97:7a:33:81:57:5d:93:
                    bd:9b:62:c9:bd:fc:56:bf:01:7d:4c:58:a7:59:6d:
                    c2:5a:a8:47:b3:b7:b2:4a:d2:ee:1f:ac:84:25:69:
                    67:cf:46:6d:c2:4b:e2:a3:2b:8d:8d:42:b9:10:28:
                    87:ce:a5:fc:f4:07:62:7d:2b:91:44:bb:b0:62:7f:
                    8c:49:47:92:73:9b:fe:22:73:b1:d2:8c:40:80:5d:
                    59:76:8a:d0:fb:67:e7:45:04:16:cc:c4:91:99:7e:
                    f7:c4:d4:16:05:dd:18:c1:1a:2b:02:4f:97:47:0c:
                    80:b6:ca:c1:34:83:59:ec:8b:f0:dd:7b:b2:dd:a4:
                    90:27:1e:c9:82:56:89:73:67:d8:c0:a6:09:30:66:
                    f1:f6:40:5d:63:89:4f:2a:e4:12:2e:59:33:90:87:
                    45:15:f0:0a:35:e5:86:61:e8:71:e3:4d:dd:04:34:
                    ae:a8:0b:33:81:9c:71:f1:bc:67:7d:3c:ea:ac:f7:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F8:9A:9D:B1:AC:40:61:07:2A:33:9D:9D:AA:A2:A0:0B:9D:A8:85
            X509v3 Authority Key Identifier:
                keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:87:94:a7:50:14:c5:11:04:75:0e:af:ea:6a:6e:fe:d2:
         a4:4a:93:f7:f8:4a:4b:c5:8a:b4:e7:c1:92:39:cf:da:6c:38:
         51:70:9f:5c:a8:10:a5:52:22:03:09:21:e2:aa:1a:cc:4c:d6:
         07:88:d2:ca:b1:a2:33:fa:59:94:d9:79:70:d2:4d:63:5e:d3:
         1b:75:f2:b4:46:6b:02:00:2d:f2:18:3d:f9:1d:5b:3a:3e:85:
         83:21:47:ff:98:11:d4:76:27:44:c4:b7:9c:0a:4a:a3:7a:05:
         63:e3:4f:87:5a:6c:d1:a1:3c:94:e8:64:54:a9:5f:bc:60:d1:
         c8:a8:b1:5e:e0:e2:18:f9:dd:2d:34:75:b6:d2:7e:03:2d:ce:
         3f:a2:00:f2:66:83:d2:13:db:53:38:ed:02:ac:a3:5b:c3:20:
         5e:c2:17:68:40:c0:7e:1c:1b:bc:46:1e:ce:a8:6a:d5:8a:6d:
         40:50:df:c1:90:fa:41:e5:fc:0f:d7:e4:39:83:c1:e6:fc:2d:
         cf:41:a3:b6:17:14:29:46:22:df:f2:c1:31:f2:17:c0:f3:a1:
         e3:ff:d8:d5:2f:6d:ff:69:c0:6a:8b:e1:18:43:7f:a2:5b:35:
         dd:72:89:25:96:b4:ee:c0:25:dc:37:72:53:e0:c5:b8:01:31:
         3b:55:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----