Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File:                     MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier:          WCZ0t/H5kdTYMZia/3r+OkEBdtsCWP/D/evcHO2J8uU=
Subject key identifier:   A7:29:3B:5F:23:EE:D4:CA:8A:F3:FB:23:A7:3A:8D:52:49:9F:1A:50
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer:       /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial:       01962F0747A8B8CABCC4568B8BD806D3D49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: LGQg/ObbLNkuICJFsHYO57o+BbPrOARbQhRr3woaRRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:47:a8:b8:ca:bc:c4:56:8b:8b:d8:06:d3:d4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=a7293b5f23eed4ca8af3fb23a73a8d52499f1a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:bc:29:d3:88:82:2f:7f:ff:2e:f2:b2:24:
                    80:9e:99:16:6e:16:a4:a2:f8:29:9d:5a:6d:0d:90:
                    f8:63:a2:19:b8:03:30:91:43:00:37:1d:f2:9e:61:
                    94:9c:93:b3:a9:d3:44:65:81:75:2a:f2:93:92:82:
                    14:39:02:6d:32:4c:bb:3c:69:7c:47:1e:31:9a:e6:
                    16:ad:84:b5:b6:a9:2c:15:95:0f:2c:66:9c:ac:83:
                    04:4c:51:78:e5:80:0e:2f:ee:61:47:ca:3e:87:a5:
                    6e:4f:e5:60:62:ad:c2:21:2f:36:1c:76:1b:96:d0:
                    5f:2d:80:19:29:f6:70:1c:bb:f0:13:44:df:e6:36:
                    30:90:5d:b8:7a:cf:28:29:34:10:f8:b5:27:29:84:
                    bb:84:b9:c3:3f:ae:70:7e:a2:69:df:91:98:0b:07:
                    a4:a1:9b:03:7f:0d:1d:f5:f3:78:11:f6:88:5e:e1:
                    72:d1:71:94:00:ed:56:f5:3c:09:da:4f:2c:c0:8a:
                    7e:b1:76:7e:c6:f8:99:36:58:4f:aa:f6:79:56:79:
                    30:4c:c5:41:eb:6b:09:52:9d:82:8a:9d:3e:73:c5:
                    9e:53:2b:80:26:43:f1:bc:4b:0e:0d:82:80:b9:49:
                    13:b1:08:c3:2e:2f:55:4a:c1:b1:6e:3c:41:fa:24:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:3B:5F:23:EE:D4:CA:8A:F3:FB:23:A7:3A:8D:52:49:9F:1A:50
            X509v3 Authority Key Identifier:
                keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:07:7b:04:9f:bd:fa:c5:2f:3b:62:bf:c8:2f:2c:05:c2:
         7c:7e:53:61:1a:76:c7:4b:6f:76:9c:53:62:34:9e:70:69:c9:
         84:36:04:88:ae:d2:43:af:9d:a9:91:d9:6e:33:12:67:3d:64:
         5f:59:95:4a:f4:98:6a:bd:4f:60:24:18:e2:5d:59:3d:76:77:
         fe:94:ab:b2:f5:30:ab:d4:2d:40:fc:a8:1d:6c:bf:2d:98:6b:
         42:d6:0c:57:b8:ff:15:59:49:34:cd:32:4d:8c:34:61:f0:1a:
         d5:b0:47:65:2f:e6:47:8a:98:ac:54:2b:d9:48:31:b4:fc:b3:
         99:0a:4c:3c:ab:93:f5:6a:23:63:97:d8:6d:82:d6:50:df:37:
         63:dc:34:f5:0e:0b:da:e7:df:f6:b1:a3:32:0e:44:c9:ed:f9:
         f1:dd:af:24:6b:05:97:ab:68:6f:66:19:6e:3e:da:e8:4e:c2:
         7c:ff:25:c6:d5:96:e2:c5:c2:7c:89:95:0a:57:d3:0b:92:0b:
         e1:a1:d3:09:f8:a0:70:3d:41:d2:1e:da:40:1a:00:4b:bb:62:
         94:6d:7b:06:bf:d1:6f:4e:39:42:8c:42:ae:bd:77:ec:fc:cc:
         5d:7f:de:ec:c9:05:05:fe:44:e4:4b:23:8c:3c:e3:aa:94:0d:
         ea:8d:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----