Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File:                     T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier:          bfWEq5hS2k5+mov0JbfI/l5VSFL65aoG4+uy5VmPDlw=
Subject key identifier:   4B:22:EA:BC:54:F2:79:DB:66:C4:9D:12:64:CA:DA:2A:14:B1:D4:96
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer:       /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial:       01962E2B19255CB022F8D5CBFB91AD89EC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number:          3B
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: nDZ81B1jCY/b8HhOOfo7Qx9/EzZ3DgR41IY0LQQpenA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:25:5c:b0:22:f8:d5:cb:fb:91:ad:89:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=4b22eabc54f279db66c49d1264cada2a14b1d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:44:7c:0b:a1:c3:65:90:94:65:45:17:2c:75:
                    f8:a0:04:96:64:ea:36:55:67:49:ff:e6:fc:4f:de:
                    67:f2:40:c8:53:8f:af:00:14:04:11:d2:ce:b2:35:
                    72:96:35:c1:1b:3f:59:bb:ab:64:31:84:76:dd:f7:
                    63:e1:e3:9c:f3:15:41:d3:3c:b6:ca:5b:9e:90:43:
                    f3:03:a7:8d:5b:88:44:2e:22:ab:a7:fd:0d:b9:b8:
                    b7:bb:aa:3e:e5:9d:10:ae:54:50:c6:b1:de:f1:5d:
                    66:b1:96:a2:eb:b2:f1:d1:38:18:5e:f0:10:d3:74:
                    3a:d2:45:e7:47:8e:16:7c:ab:c5:8b:98:19:51:22:
                    49:c9:c0:73:1d:67:dc:36:b1:7d:3a:f5:c3:cb:bf:
                    a6:17:8d:dd:8f:d8:b4:92:c8:22:b3:c5:45:5c:68:
                    fb:b3:9c:7f:ba:ec:d7:69:89:b5:da:a5:20:42:23:
                    59:a2:c4:8b:de:d7:6a:b0:16:df:6e:79:14:9e:e9:
                    d6:bc:42:7d:4d:46:e8:a8:33:3d:51:5f:66:75:82:
                    28:c3:11:fd:42:b6:71:72:5c:6b:04:6c:c9:a2:ef:
                    3b:c9:d5:10:e8:b5:7f:fb:cb:9f:33:1b:d2:b3:d7:
                    f1:85:0e:cd:dd:bc:77:9b:f7:d6:b8:2e:cb:0f:e1:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:EA:BC:54:F2:79:DB:66:C4:9D:12:64:CA:DA:2A:14:B1:D4:96
            X509v3 Authority Key Identifier:
                keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:3d:3e:53:0f:6a:9b:7e:b1:32:92:90:b8:f4:d4:c4:ee:
         3c:83:ea:2c:44:f2:2c:98:4c:47:9e:24:02:cb:c3:d6:9c:eb:
         40:9f:2d:b0:60:be:4f:d9:77:f0:15:9b:2b:70:d8:48:fd:2c:
         07:9a:29:38:da:f3:59:20:97:e9:a2:df:ca:3f:63:ec:2e:44:
         db:ad:21:51:ce:68:28:64:5a:f3:22:cc:84:d8:dc:7d:6d:c6:
         8d:a1:6c:a4:8e:1f:0d:75:24:74:01:43:0d:21:4b:85:01:64:
         0b:5d:5c:df:6a:45:b8:1b:58:24:0d:4b:dd:97:bf:f8:5b:fc:
         76:8a:a4:63:d5:8b:14:50:bf:66:f3:a9:07:b6:f7:38:98:8c:
         31:d7:8b:c6:b3:51:ed:61:57:ce:1d:a4:bf:f3:a7:08:60:6e:
         d1:c2:21:b9:57:bf:a3:41:b9:80:78:68:d7:a8:70:08:22:d2:
         2f:52:1d:28:91:b9:51:8a:07:85:5c:95:88:29:72:7f:5d:9a:
         28:68:ea:cb:16:c9:c8:06:0e:17:bd:c4:d4:88:92:d9:89:f0:
         06:92:bb:01:7c:4a:29:b7:f6:a1:62:a5:ee:5c:e9:34:8d:37:
         c4:42:91:fd:b2:d4:b8:2b:f3:29:44:2c:06:56:64:fc:2c:27:
         6e:6d:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----