Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File:                     Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier:          vOa3iLdvvMSWzhgrY3VWhvPdUE3izoLCAWQfFPsq4rs=
Subject key identifier:   96:94:00:82:C7:55:21:33:DA:40:D4:E4:14:73:96:E5:EA:EC:F8:55
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer:       /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial:       01962DF3F0AD2F11FB25F3D11D232509D413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number:          1135
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: 1dxGzSQ/9sYuMhtxEZVI7+67w2TgH7iUzwR0VwBOIUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:ad:2f:11:fb:25:f3:d1:1d:23:25:09:d4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=96940082c7552133da40d4e4147396e5eaecf855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:10:17:f1:36:a5:67:d5:1d:65:5d:86:90:
                    26:37:2c:50:56:9a:2c:17:1b:87:9d:77:83:57:18:
                    c2:e9:bd:39:3e:ac:fb:13:76:7f:1f:da:af:d9:a6:
                    89:4d:cc:71:d4:a5:bc:23:3f:ac:8e:c2:dd:9a:e5:
                    dc:2b:75:e8:b3:e3:7e:c4:26:12:01:17:2e:e5:42:
                    07:11:2a:84:a8:ec:85:bf:ab:1b:d9:a6:6f:98:10:
                    2d:bc:cd:ff:94:02:6c:b3:26:41:22:e1:83:c3:26:
                    04:bf:0b:9d:48:26:79:07:2d:4c:c3:51:13:cb:8b:
                    ee:84:cd:23:c8:fd:4a:b7:43:06:07:c3:15:94:28:
                    ba:37:75:a2:79:c4:24:01:90:4a:ad:e6:37:b8:72:
                    88:99:11:fa:a3:16:db:1f:0d:85:e8:2d:36:a8:59:
                    f7:32:88:ac:70:48:32:c4:d3:bb:b8:8a:68:c3:e7:
                    3e:74:cf:c3:74:8e:bb:63:d7:27:75:d0:30:a9:6c:
                    ff:dc:2f:2c:c8:1c:6f:2f:54:1f:d0:55:4e:c0:7d:
                    dd:ae:9d:cf:a1:1f:cd:9a:a7:a0:5a:86:63:bb:17:
                    4e:61:72:38:c4:69:08:da:65:89:20:b6:dc:b1:d2:
                    28:d8:cd:f5:03:ec:6d:7d:d7:83:f3:55:d2:ee:b0:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:00:82:C7:55:21:33:DA:40:D4:E4:14:73:96:E5:EA:EC:F8:55
            X509v3 Authority Key Identifier:
                keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:3a:3b:36:c7:a2:98:e1:f5:45:c4:64:4e:1b:23:ad:4c:
         46:31:25:a1:41:35:de:3e:0e:ba:fa:e6:da:eb:20:97:56:8e:
         0b:39:8a:65:7b:b2:c0:e1:0e:76:0a:d3:15:5e:76:c2:1a:4b:
         4f:ee:a0:72:d8:67:f6:be:e7:a4:e0:bf:2c:4e:1b:c3:6e:6c:
         7e:32:ae:1c:13:cf:6a:65:b4:b0:a2:cd:25:57:ae:45:14:cd:
         79:17:eb:7c:6e:c5:a4:aa:51:52:21:ab:89:4b:79:97:16:84:
         d6:31:95:08:b9:08:44:1e:34:da:43:47:0f:cf:08:bf:61:c4:
         2a:dc:80:a1:f7:60:47:7d:47:21:1d:bf:0a:6c:3a:be:46:4f:
         30:61:45:7c:f8:f8:fd:23:44:1c:49:12:d7:37:ad:fa:8f:f4:
         fa:dd:ab:1c:cf:2d:8b:57:f4:55:f8:63:00:41:5b:33:52:64:
         5e:c4:52:1a:94:be:81:4c:a8:e0:96:cc:94:89:10:7f:f7:f6:
         7f:af:b5:46:4f:74:c0:f4:4c:b7:50:4c:97:fa:9d:3a:61:17:
         d3:4c:2b:a8:cc:42:d8:21:17:a7:4f:92:e1:34:b8:fb:3d:06:
         5e:25:13:2d:4d:61:d8:0d:83:f3:ad:6d:76:cd:4d:b1:15:63:
         28:b8:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----