Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File:                     TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier:          c5A34EY8d3E9kOFByYyJDCiHzlNkU6vPJw35W0rVP5A=
Subject key identifier:   B6:6E:1A:42:94:2F:E7:D7:A4:30:BF:83:9C:B4:34:68:FE:B4:AD:E3
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer:       /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial:       01962F744195A569FA1D870DC6636EA69083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: sbTXTo2JhPLa+SyMTVtV65K03YN9tYTJ+VhkxJ5PNDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:41:95:a5:69:fa:1d:87:0d:c6:63:6e:a6:90:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=b66e1a42942fe7d7a430bf839cb43468feb4ade3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:70:85:cf:85:0d:1a:a2:9f:4e:ac:0d:6d:
                    a0:37:6d:6d:03:81:6a:f4:dd:78:c3:7a:c4:7a:bc:
                    b9:22:03:ab:5b:1d:77:c8:53:74:9a:b5:df:df:7d:
                    14:31:47:e4:eb:01:f0:fa:33:d3:f8:d2:36:08:ef:
                    26:8d:9c:7a:2b:e2:a7:00:f0:7e:55:a1:3c:49:ef:
                    5e:09:bc:8a:a4:b8:70:8f:33:ad:89:8d:76:60:6c:
                    2d:dd:05:38:83:bc:c3:03:5a:b6:7d:f0:17:f3:de:
                    bc:a3:e9:9d:a5:19:38:ac:3f:0a:d3:f5:ba:c8:78:
                    4f:de:16:ab:1d:ef:98:3a:06:ee:84:3e:98:d9:ff:
                    a5:e0:f6:35:12:35:66:fd:e6:37:f2:4d:cb:18:d9:
                    79:6b:1c:f1:ba:61:73:00:43:02:d0:7f:38:0c:26:
                    b8:b0:55:42:d4:02:17:5c:b1:01:4c:ef:e3:3f:72:
                    0c:8c:2b:23:60:9a:24:f5:2d:46:cb:93:dc:b6:ac:
                    66:cb:0e:db:25:f2:5d:cf:7f:53:f0:e1:ab:d1:44:
                    60:89:9a:95:bd:cd:5c:5b:aa:70:97:f3:72:90:4d:
                    fa:50:42:b4:ec:39:bd:52:e6:aa:97:b7:3d:a3:30:
                    dc:7b:1e:56:3e:ea:f2:d4:de:ae:e0:f2:f6:24:68:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:1A:42:94:2F:E7:D7:A4:30:BF:83:9C:B4:34:68:FE:B4:AD:E3
            X509v3 Authority Key Identifier:
                keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:1e:d3:06:1e:74:6c:7d:ca:27:5d:77:79:3b:75:36:84:
         09:d0:29:67:0e:aa:80:59:db:c2:7d:a7:d9:7e:85:4f:96:41:
         17:2d:a4:16:ef:62:1d:7e:34:84:31:e8:e3:93:65:2e:52:e3:
         43:42:4b:c0:0a:ba:17:8d:4e:35:38:5b:36:8c:9b:3c:a7:d8:
         2a:1f:45:5a:06:6d:78:4d:e2:bb:af:15:35:a7:8e:1c:b1:8d:
         10:ef:47:66:60:33:3b:13:bc:34:2d:f8:c0:6a:2c:a0:fe:2d:
         36:c4:ce:2c:04:e7:f6:5a:ec:c8:db:aa:4b:66:88:37:54:a5:
         6c:c4:75:e3:c0:d6:d6:bd:91:85:2d:ac:ba:57:94:80:4e:23:
         70:34:c8:c0:cf:a5:7c:c0:91:2c:14:b8:59:64:e0:d2:e4:25:
         6a:3d:31:6b:bb:76:e6:96:1b:91:d2:15:35:b4:16:3d:09:12:
         93:e8:43:11:96:ad:43:a5:22:17:a9:76:96:cc:9c:1b:c9:a1:
         99:27:73:ed:15:31:30:26:39:1b:ad:9c:df:a0:12:53:93:b7:
         ab:a4:83:05:a2:c3:e0:e6:c5:d3:3f:b1:51:c1:13:6f:af:2a:
         2f:14:48:c4:21:76:55:c2:83:c8:32:06:38:9f:98:e9:ce:d9:
         98:45:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----