Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File:                     sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier:          3h3E1rDi0tyNqCCe+5EQ0qSzSOWyHrx31MF42tI0r1o=
Subject key identifier:   13:75:CC:13:71:BF:17:24:A0:07:A0:A4:9A:54:77:CC:24:63:02:AF
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer:       /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial:       01962E9880FC602048F9FD8BE518C0CE894C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number:          0E79
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: gN+xMt524lPefMx1Rcu/50toESjOm16mDXTK1OhMBQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:fc:60:20:48:f9:fd:8b:e5:18:c0:ce:89:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=1375cc1371bf1724a007a0a49a5477cc246302af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:8e:6b:86:6d:1c:be:f3:45:39:b6:b1:ec:
                    8b:2c:25:e9:d5:90:3c:2a:db:31:42:1c:dd:17:11:
                    5a:40:41:92:8b:9a:02:20:89:25:a7:99:2a:a8:57:
                    3c:a1:5f:8b:27:03:68:52:5f:2c:21:08:e4:e7:ce:
                    4b:91:27:cf:49:99:a2:1d:4f:c1:90:3e:13:77:aa:
                    31:2d:cf:fd:c0:5b:a6:bc:4d:34:5a:de:f5:df:24:
                    06:04:3e:00:2f:d1:a1:45:99:00:a1:0e:4c:d9:34:
                    b5:7c:55:b6:4b:92:fc:3b:34:fe:36:ff:8e:a0:93:
                    d6:9d:e6:0e:e5:60:3b:10:b1:12:a9:dd:37:65:0e:
                    db:4f:37:b5:a5:42:7b:e3:1c:8b:11:b9:a3:b9:b8:
                    dc:c4:c2:27:ee:2e:c7:7f:ec:e0:d4:04:21:7f:15:
                    5d:08:56:0d:27:ac:de:95:cf:9c:8d:d6:1c:9f:05:
                    ef:fd:6e:2f:94:26:b6:14:55:59:cd:43:42:61:c6:
                    8a:c1:a5:ec:41:9f:24:6f:4f:b3:30:87:25:74:3d:
                    16:13:a5:97:75:a5:92:55:b7:10:58:6b:41:00:cd:
                    10:27:10:33:83:4f:16:0e:9e:0c:ad:60:c8:fe:56:
                    4f:d9:6e:d7:91:92:86:a3:e5:8f:2d:f4:b5:96:d6:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:CC:13:71:BF:17:24:A0:07:A0:A4:9A:54:77:CC:24:63:02:AF
            X509v3 Authority Key Identifier:
                keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:dc:3a:17:3e:c6:3b:7a:05:6d:e3:16:f0:00:ac:77:ca:
         f7:85:38:25:13:ce:eb:e5:04:fd:8d:32:a0:73:e7:95:4e:0e:
         a1:a6:af:c2:1e:8f:5a:ff:d5:97:cc:eb:cd:8c:a1:25:b7:1a:
         31:ec:81:46:d0:ec:f5:c8:09:c3:a0:57:87:ca:35:00:0c:d8:
         93:7b:1f:9d:5f:3b:26:0e:3f:ae:fa:85:5a:77:d0:d5:26:30:
         f9:bb:cc:8d:b6:c0:14:5c:9d:c0:bb:61:53:c2:0b:62:b9:ee:
         4b:67:0d:17:5b:2a:48:2f:68:ff:91:6a:a3:b6:07:f9:76:cb:
         7d:e6:25:18:a5:40:e5:64:80:e6:f0:b8:ab:f9:92:f8:28:d9:
         3a:d9:b7:1e:11:13:40:4b:63:3a:1d:54:6d:4a:24:10:1f:9d:
         bd:2a:9d:40:f3:bc:ae:a0:89:e1:2d:e3:17:85:87:31:6a:fe:
         7e:e5:ce:83:63:bf:1b:ee:16:70:c5:e1:40:d2:8d:4c:b0:6e:
         2d:11:b5:e1:4e:33:12:ec:d2:ba:7b:1f:21:36:ea:a8:86:86:
         ed:02:0c:1b:ce:65:c4:24:31:de:0d:69:4e:a5:f7:e8:33:e4:
         36:4f:09:8b:37:0b:59:91:15:43:03:bb:2c:36:d8:16:9e:93:
         89:2f:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----