Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
File:                     1lcpIU0Paz-lGho4A32rjeSOBVg.mft (raw, json)
Hash identifier:          DShqcZfOXph6oydQFCPQUPSsHFtE8fKPjs5F/BnHHQs=
Subject key identifier:   C1:F9:4A:C5:ED:C6:21:77:3B:4D:AA:C0:BA:31:61:07:BF:42:A7:A8
Authority key identifier: D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58
Certificate issuer:       /CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
Certificate serial:       01962F3DB4F1DEC2B0637CEF272B419F0302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
Manifest number:          054B
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 1lcpIU0Paz-lGho4A32rjeSOBVg.crl (hash: H4Lke5nx4TyORfNQzAx7mCcJo6LzCxntkzV+3gnAVmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:f1:de:c2:b0:63:7c:ef:27:2b:41:9f:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=c1f94ac5edc621773b4daac0ba316107bf42a7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:94:c6:01:d5:c6:e8:cc:49:54:15:ef:c8:
                    e5:fe:df:c1:1e:c2:34:cd:44:b4:2c:2c:1c:db:64:
                    d0:cb:10:50:83:13:ee:47:ee:19:8f:db:64:57:8f:
                    d5:18:0d:cc:f4:35:77:b3:21:7f:24:89:a5:46:7b:
                    36:2c:79:03:52:f0:90:df:7d:a2:ad:9b:03:f3:99:
                    d5:db:cd:35:ed:ba:71:a3:e9:17:fb:ac:46:77:4b:
                    11:44:14:9c:80:df:e6:22:09:7d:0c:75:00:94:62:
                    02:2f:e8:af:71:25:aa:6c:2c:86:18:b6:99:f2:4f:
                    df:d7:52:e4:89:6e:a0:bc:15:39:2e:32:1d:42:be:
                    4e:fe:a9:de:85:f4:f3:c3:d1:a7:23:b5:37:90:cf:
                    b2:bc:14:88:15:2f:e6:5b:c8:df:79:c6:3a:5a:58:
                    4b:89:ee:1b:ce:ee:d1:f2:d7:ca:dd:09:d7:22:4a:
                    c8:cd:1d:26:c2:1c:ed:89:74:09:04:5d:56:98:9c:
                    f0:17:5a:60:bc:e2:ac:88:59:49:e7:15:8d:48:09:
                    b6:cd:f7:d0:58:20:9d:b3:7d:4f:0d:9e:96:87:a5:
                    85:7f:51:1a:54:d6:41:db:a1:0b:4e:fb:68:e3:66:
                    7e:da:f6:a2:cb:d4:24:88:a7:b0:a0:0b:89:40:37:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:4A:C5:ED:C6:21:77:3B:4D:AA:C0:BA:31:61:07:BF:42:A7:A8
            X509v3 Authority Key Identifier:
                keyid:D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:aa:ed:bb:7f:8b:8b:d8:f4:fb:ee:67:24:85:c1:1e:a6:20:
         ad:b4:84:58:58:ac:c7:07:f4:3d:dc:05:97:87:5d:ee:fd:15:
         8f:93:cf:3f:cf:cf:9a:bf:19:99:0b:5b:bc:5c:10:ed:76:70:
         96:33:17:80:69:ae:61:76:14:6d:24:77:de:3b:17:2a:a8:7c:
         2c:5a:3d:d1:6b:01:39:2e:e0:87:a0:d2:bc:ab:10:53:4f:3a:
         9a:2a:9e:a5:bf:fb:3f:21:ae:62:27:40:aa:1e:e1:5c:a7:1d:
         30:74:6b:8d:56:41:71:e6:9a:02:99:1a:1d:73:00:d5:33:c7:
         2b:fc:12:b4:e0:b0:b8:41:c6:07:20:00:42:40:9a:60:3f:de:
         ce:e0:42:d5:c0:52:b8:a9:68:ac:74:6a:2e:e7:e5:ef:6e:32:
         e9:8e:43:56:76:f0:13:a8:f7:c1:33:0b:04:ba:6a:9c:d4:d2:
         82:28:d6:21:cb:96:81:a5:c9:6c:99:8d:7f:eb:ef:3a:58:be:
         33:e3:7c:e4:0a:11:59:05:57:ef:6a:c4:52:bc:8e:12:91:72:
         49:7f:11:85:33:27:f0:0c:68:24:e0:5c:94:e1:30:0c:16:d9:
         83:d7:05:b8:55:da:22:3d:a9:0b:38:f7:63:40:88:d0:48:18:
         bf:3b:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----