Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File:                     TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier:          XWeRwyrBKzhTaKbrVzCUHfugDH/VpP67j/lbcUTMtDI=
Subject key identifier:   40:F2:0F:40:09:C7:35:D8:30:1F:F6:CA:2B:09:C3:2E:9C:B8:1A:86
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer:       /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial:       01962E9896029A5CB081A25356218A78C89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number:          07D8
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: pN/YsCQUfi1L1KlhqeH5QDdcROp/FHgR8taLCM/FkCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:02:9a:5c:b0:81:a2:53:56:21:8a:78:c8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=40f20f4009c735d8301ff6ca2b09c32e9cb81a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:40:11:ab:02:f2:d0:7d:47:91:82:9f:c7:
                    97:14:5c:67:23:34:1c:9f:79:3a:b8:af:62:d6:d8:
                    51:12:ab:ad:ae:ff:72:71:51:2e:e5:fb:02:99:e5:
                    7a:0a:8e:ac:cc:bb:57:7e:20:53:47:0a:03:fe:6b:
                    f7:c8:de:af:79:ed:51:df:4b:55:57:4f:09:47:56:
                    46:df:51:5c:47:18:06:4b:b8:62:94:45:bf:c9:fe:
                    d5:6f:2f:75:16:a0:92:77:a2:00:2a:8b:74:1c:59:
                    9c:e9:0c:40:8f:f7:1f:3f:d7:fe:7e:9a:a0:b9:e0:
                    b3:66:eb:31:f7:b5:c9:a4:b2:3c:e3:9b:12:55:40:
                    7f:10:60:13:7d:b7:3d:c7:35:2d:96:cf:ac:57:0d:
                    5f:c5:94:cc:40:42:d7:75:e9:1c:76:c1:2a:e8:fb:
                    b2:7f:a8:91:22:52:26:34:41:1b:9d:0b:33:9b:16:
                    43:6f:a0:99:36:81:b4:46:d9:3d:87:c8:29:dd:c4:
                    1d:39:b0:2d:47:5c:0d:fa:b5:63:c9:2b:16:10:9b:
                    2a:32:cc:97:af:19:c1:79:1c:51:ab:6d:b3:fe:e9:
                    e0:28:bf:d0:0d:39:23:51:52:53:6c:19:29:da:ff:
                    79:b8:96:42:b1:32:66:c8:0c:ff:74:79:9f:98:55:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F2:0F:40:09:C7:35:D8:30:1F:F6:CA:2B:09:C3:2E:9C:B8:1A:86
            X509v3 Authority Key Identifier:
                keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:be:14:34:c4:35:e0:57:25:62:7f:ba:5a:8a:f2:a9:5c:78:
         54:c0:de:a5:f4:5f:22:40:a6:e7:b1:46:a5:35:dd:4b:6e:73:
         d4:2c:34:bd:35:46:8e:0d:94:77:5b:a2:9d:ca:2f:e8:a6:dc:
         cc:03:ec:15:95:d3:91:09:96:22:de:29:24:e1:1b:fa:9c:2e:
         4b:f6:53:cc:05:de:cd:28:36:fb:bd:0f:74:96:db:21:08:77:
         77:1a:9d:3a:b6:43:5a:32:00:c3:f9:a6:d4:c6:7d:bd:6f:7b:
         93:5a:21:59:29:c7:f1:66:ac:61:dc:8f:f1:f0:48:06:54:fd:
         e8:5e:a6:ea:95:b1:8d:b2:78:9e:09:bb:e5:4b:fa:db:0d:51:
         a2:07:46:fb:40:48:5e:7f:68:84:4e:38:45:2d:e3:9f:a5:28:
         9c:5d:33:3f:cd:a6:91:fe:c8:cd:91:1c:da:69:30:68:4b:47:
         56:32:19:9f:e4:cf:72:bd:74:9c:0f:53:9a:67:4c:8c:16:8c:
         d3:97:fe:23:3b:af:f1:aa:4d:25:a9:91:95:33:d1:50:97:26:
         18:ce:35:5f:1b:64:2a:60:a8:ee:19:15:2b:c1:e1:93:52:46:
         7a:59:2f:99:c0:df:3c:cf:18:9a:33:95:5a:3e:fd:8f:d2:7e:
         77:85:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----