Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          6Ft9/yvLZrLPa+mNSKOksqbqInTxWv6VCzFBQSKW+Xc=
Subject key identifier:   7F:B8:4F:42:6A:B3:5D:16:01:64:B7:13:08:4D:60:45:5C:1C:36:8D
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       01962F744C964F6D7F05719A91684D6ED142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          0F74
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: xATf6SM+8zO5+4LBl7kFNH1ttUC2nJe1/90meBL+eOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:96:4f:6d:7f:05:71:9a:91:68:4d:6e:d1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=7fb84f426ab35d160164b713084d60455c1c368d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:a9:90:00:6d:e7:24:92:79:a3:54:e4:8f:
                    f8:69:c3:08:ff:d8:34:57:32:85:2f:be:ea:83:19:
                    96:a2:8c:09:31:e9:ea:11:67:d6:29:dc:37:af:05:
                    c8:4b:34:96:af:f9:fb:3d:d5:5e:0a:62:3a:09:96:
                    7c:67:09:94:c0:4d:7a:ac:5a:97:92:db:e8:e1:0f:
                    c3:94:bf:f5:2e:ce:7c:19:a0:64:78:95:0d:eb:84:
                    1e:c9:94:91:5e:61:97:9d:4b:9c:a5:3e:04:5c:0b:
                    d7:c4:76:7e:8d:28:8d:a8:f7:53:9f:d3:5d:92:2d:
                    8e:b3:1b:e1:67:ff:87:00:2d:fd:d3:38:96:7b:be:
                    e6:0a:8a:0f:2a:2d:7a:c4:e9:e9:ab:a2:e5:bd:23:
                    c1:a7:e4:1f:7b:5a:c3:d0:18:00:91:e7:c7:ec:ff:
                    d3:6d:62:6c:34:3c:0c:ac:b8:b7:2e:7e:96:a3:ad:
                    51:79:1a:bf:bb:c1:35:e5:c9:a9:ea:50:60:8a:fa:
                    34:65:18:96:f4:d4:1c:f4:98:07:2d:1d:56:45:77:
                    51:0e:34:11:c2:7d:ba:9f:de:af:bd:7e:32:1f:49:
                    23:cc:df:bf:e4:78:a4:ad:97:e2:77:86:19:77:70:
                    a4:28:8c:b9:ba:07:3d:5a:e8:28:ea:f7:77:0c:66:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:4F:42:6A:B3:5D:16:01:64:B7:13:08:4D:60:45:5C:1C:36:8D
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c4:b3:47:aa:71:78:db:07:3b:9e:f9:5c:85:6d:7d:93:8c:
         a3:7e:33:89:b8:fb:d3:8f:2a:15:78:f6:29:47:e3:9a:8c:b3:
         3e:b0:71:26:0e:f7:81:4e:1f:77:d0:2d:af:23:ac:61:f7:68:
         c7:64:a4:d6:0e:55:a2:12:98:ef:3e:7c:9f:97:80:87:44:27:
         a1:c3:f4:2f:3a:a6:ad:63:c4:44:82:22:10:94:3f:42:dd:fc:
         ce:cb:b0:20:63:72:df:ff:e8:de:7c:1e:38:6f:fc:4d:4b:92:
         75:e3:27:a6:84:c0:06:a9:7c:25:2a:cb:eb:21:e7:5e:1c:82:
         3a:77:7c:0e:26:b2:3a:fc:1f:e0:0b:26:21:01:26:b0:b0:be:
         33:30:1c:aa:c3:ba:5f:7a:98:67:7c:2b:52:f5:01:68:93:b9:
         85:00:5f:75:c8:be:5b:f3:2d:55:a3:a0:aa:a4:ac:ac:65:f6:
         39:f6:43:36:74:1c:52:ec:89:53:d6:ac:5a:22:de:44:42:7b:
         00:73:43:6d:15:50:44:82:88:8a:f3:72:7f:11:89:eb:eb:ad:
         1d:1d:6f:72:ff:e3:07:2c:c1:2e:3e:f9:70:00:e0:e1:aa:67:
         04:85:08:05:d3:ba:12:c6:d3:bb:7b:4f:ab:3a:13:d6:46:c7:
         c3:6a:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----