Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File:                     Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier:          Ps9wZdqSbYI2n+18efjm06SwkeFc7OI82VFZk0pQ4fo=
Subject key identifier:   DF:F5:DB:02:BD:D1:65:45:AD:AD:23:70:FE:94:0E:0F:A2:9F:AA:40
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer:       /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial:       01962F3D8EEFA80C8C3BEE3D957CDA9D3C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: C6CjKFZIaHcz5GplltsoqvIF3UPQeoiaEK7oyqrXv+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8e:ef:a8:0c:8c:3b:ee:3d:95:7c:da:9d:3c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=dff5db02bdd16545adad2370fe940e0fa29faa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:1f:80:fd:ea:b1:83:6c:eb:08:b2:26:92:
                    09:22:f8:9a:b8:d2:9e:2b:50:f3:d4:fe:a3:2f:82:
                    1c:66:a0:05:f8:c2:51:c8:ec:2f:7f:06:55:f8:fe:
                    bd:11:d1:ed:42:10:ea:98:76:44:5b:90:0f:00:e3:
                    41:24:69:9e:0e:dd:6a:a9:2a:aa:04:cf:55:52:ae:
                    7f:8e:30:1f:d9:0e:8d:9b:73:64:91:3d:6b:cf:86:
                    47:81:c9:65:10:c0:11:4f:1e:6f:cf:d3:36:5e:04:
                    34:82:c6:59:cf:d4:21:ee:27:a6:c9:05:8e:03:54:
                    77:92:8b:ca:1a:d7:fc:69:33:80:de:22:55:d1:a5:
                    66:8a:97:b7:35:17:6e:0b:b6:22:1e:d9:87:02:2a:
                    4f:c1:a8:83:67:84:76:d3:12:72:fb:e9:a0:59:5d:
                    fc:1b:27:ee:40:96:b6:bc:75:9c:fd:c2:8a:80:13:
                    e8:2a:25:df:30:c9:a7:c6:be:ce:7c:0d:0a:47:ca:
                    71:b3:02:c6:3b:6e:ab:d9:e3:b4:6a:92:ad:5d:fd:
                    a7:e6:f6:46:3a:8a:7a:71:9b:5d:a4:12:c9:5c:fe:
                    d1:a8:91:20:24:6b:a9:fa:7b:0d:d4:fe:b6:8b:2e:
                    5f:84:07:ae:aa:3d:ac:ff:5b:58:ff:a7:f3:f7:54:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F5:DB:02:BD:D1:65:45:AD:AD:23:70:FE:94:0E:0F:A2:9F:AA:40
            X509v3 Authority Key Identifier:
                keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:3a:92:e8:de:06:e1:ae:03:d4:95:c6:e8:a5:54:0c:6b:
         1a:84:50:d0:de:76:ee:91:71:c9:c7:28:31:b9:f3:02:58:e7:
         68:4c:c5:00:2f:cd:63:0d:54:e5:e5:b9:dd:de:3b:e9:97:58:
         29:ab:5e:0c:19:ce:e1:a4:62:70:88:d4:f3:7c:ed:b1:dd:53:
         a8:ad:39:60:76:89:37:b1:e2:fc:df:58:53:8a:0e:80:d8:c5:
         88:0d:3b:b1:da:93:4a:e8:e4:fa:d7:45:5a:57:55:0b:a1:ce:
         c4:29:a0:7b:9f:b1:07:7a:68:b3:95:88:32:b3:ca:16:9b:3c:
         e0:31:9b:cd:31:1e:03:f1:9a:13:61:a3:49:18:66:fc:41:62:
         8e:6a:15:65:b1:2e:6f:1c:9f:3b:d1:ed:15:18:d4:3b:ce:5d:
         f3:76:51:4d:eb:bb:c5:d1:b7:8e:e4:77:f5:ba:10:64:59:ec:
         21:50:20:03:fb:53:7c:7a:62:57:98:2f:57:77:48:3e:6a:2d:
         49:0b:7a:46:24:62:29:e5:5a:92:dc:12:30:94:63:59:a2:68:
         a0:b7:b7:58:18:0c:b6:7c:ba:5e:2f:88:2d:78:ff:c9:48:76:
         33:0a:7a:b5:68:a9:08:57:e3:e5:ff:18:53:d7:29:8e:f6:4b:
         37:b0:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----