Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          PVsyNIuSS9DqjCBQLh037HjU/8KMhVmxfuEZXBpCNq4=
Subject key identifier:   63:88:72:D4:A9:1F:7B:43:55:D7:23:DE:09:62:0C:DD:4F:6B:91:72
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       01962E993E349FDF2D8F904B35A50E30BDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          0CD2
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: Ip0e/LH4HixT37mRE8yGZiJBgZOq90LpDqEF0w5mj3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:34:9f:df:2d:8f:90:4b:35:a5:0e:30:bd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=638872d4a91f7b4355d723de09620cdd4f6b9172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:9c:70:83:96:a2:b1:78:28:ed:7e:99:48:
                    d5:9a:6f:04:93:de:85:6b:e8:11:1c:3a:e9:0a:a6:
                    bc:94:71:0d:d4:da:84:47:59:b4:5c:4b:e9:7e:99:
                    14:53:96:67:1f:a6:88:e2:2b:3f:3f:a9:12:1c:f5:
                    55:74:32:01:4f:b4:a4:34:70:50:fc:19:41:da:de:
                    78:72:8e:de:a0:97:a1:2d:da:f9:41:2f:54:6a:05:
                    38:ec:95:ee:e3:20:f9:6f:83:01:75:d1:16:8a:ef:
                    ef:a6:ce:d9:7f:f5:08:44:ba:53:e2:cf:dc:c8:ea:
                    8a:0b:3a:ad:cc:de:8a:ea:1a:b7:9c:97:fc:37:85:
                    3a:31:48:1e:35:e6:51:c9:db:8d:a4:c5:67:b5:b1:
                    ed:14:a5:80:77:65:96:d8:bd:df:2b:3c:ab:e2:e0:
                    75:a1:58:dd:27:27:f4:cf:06:51:74:40:06:6c:88:
                    1c:b7:38:32:3e:0e:70:a7:0e:5e:9a:66:1f:76:eb:
                    08:a4:ab:01:05:b3:f5:e6:27:90:a6:47:27:a3:77:
                    37:8f:b9:26:11:01:eb:54:45:18:bb:55:85:8c:aa:
                    99:2a:57:b5:b2:4e:ea:79:1f:60:4c:f0:8f:08:07:
                    1c:82:fc:72:a4:20:86:8b:e9:de:69:83:d4:c4:25:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:72:D4:A9:1F:7B:43:55:D7:23:DE:09:62:0C:DD:4F:6B:91:72
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:6d:10:08:99:f6:c0:04:40:5a:5a:8b:7a:9b:5a:3f:e4:
         d3:dd:94:a6:ec:b2:0f:e9:9e:ca:60:27:0c:42:03:9a:a8:d4:
         aa:bb:72:68:6b:3d:8b:1d:5e:85:0d:ea:45:45:14:68:a7:b2:
         83:14:6b:eb:93:d0:90:0c:93:ec:81:e7:32:dc:6e:d3:d2:50:
         8e:2c:71:8b:4f:c8:8c:97:6a:08:83:00:10:d7:b8:74:bf:e1:
         57:23:13:0c:7c:14:03:7e:a4:53:dc:d7:00:79:32:44:4d:aa:
         85:e9:0f:a5:a1:36:37:fc:8c:3e:7e:05:2c:5e:01:5e:22:3e:
         29:13:88:c6:41:b5:ab:a1:4f:c6:cd:e6:d6:cc:ec:5a:1f:b3:
         35:cb:a1:c1:4b:50:cc:96:c2:76:6e:4b:37:d6:fe:d9:84:19:
         18:9c:f7:25:e3:cd:ae:e5:bb:75:07:41:c1:c3:89:07:aa:7e:
         60:fa:c7:ce:32:a5:00:f7:c1:65:8f:da:dd:ca:fe:22:84:12:
         06:3b:3c:92:62:1f:19:9d:36:e7:05:9f:c6:26:d4:61:1b:13:
         04:0a:18:24:cc:ec:d6:80:cc:f6:92:fd:1b:9f:73:58:7b:b3:
         23:9e:ec:3e:f2:cc:90:f1:cc:00:ef:69:8a:96:28:fe:26:e8:
         df:22:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----