Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File:                     1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier:          rVUcVJ5uzbYH8cVNNzTsYs/BVEw7GmKeWP4CeIebjm8=
Subject key identifier:   67:83:3D:E3:B0:0A:06:50:EB:D3:0E:3F:F9:BA:DA:39:C3:B3:E6:AA
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer:       /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial:       01962F0693BF5D2A56A80A12B8DD9D5C6B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number:          0273
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: w0/Q4xKZd+TaV/YisHRQJK4ZRFSWh9cqWqah8wq/o2A=)
                          2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:bf:5d:2a:56:a8:0a:12:b8:dd:9d:5c:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=67833de3b00a0650ebd30e3ff9bada39c3b3e6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:29:a5:9a:20:c8:6d:57:16:83:09:6f:b7:
                    55:06:61:a5:53:56:c7:8d:5c:80:13:e5:35:c8:d8:
                    4a:83:34:77:c0:34:ab:aa:43:86:a5:4b:4e:9e:eb:
                    69:d5:dd:b2:b9:de:a3:d0:ec:dc:4f:6c:0f:b6:68:
                    f4:46:3d:b1:ca:6e:1f:e4:72:05:34:c6:14:ab:67:
                    0e:12:3c:2b:74:19:0e:4d:58:bb:8c:05:d5:4f:45:
                    bf:45:0e:6e:03:47:43:e4:d8:42:4d:98:93:0e:d7:
                    40:2e:a5:24:2f:9d:39:30:68:2d:93:29:91:d1:74:
                    5c:9d:1b:6d:6e:cd:8a:7b:36:04:7b:04:a3:6b:6e:
                    6f:14:21:e3:8c:b9:da:aa:1c:fa:87:84:1f:b9:66:
                    8e:82:d0:d6:ed:57:b6:bd:94:82:1d:08:07:5b:51:
                    3d:02:9d:79:29:a1:1f:8f:0e:2c:fd:1b:89:3d:ed:
                    ab:f8:f4:78:6d:c5:dd:8f:ea:95:b7:d9:b8:36:6a:
                    ec:ca:01:28:73:16:8a:b5:59:79:f2:6d:8d:c5:a8:
                    bd:b8:65:6c:ab:cb:9a:aa:df:c0:b1:be:59:42:40:
                    33:9f:f7:65:a6:16:1d:f1:73:1a:34:5c:54:1e:1b:
                    f0:f3:aa:fb:f6:f1:72:2a:3f:e0:81:af:97:5a:88:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:3D:E3:B0:0A:06:50:EB:D3:0E:3F:F9:BA:DA:39:C3:B3:E6:AA
            X509v3 Authority Key Identifier:
                keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:bd:18:71:0b:7a:d1:cf:07:c6:b2:ff:6c:6a:69:5e:b9:
         b6:23:02:83:5f:13:e2:5b:8e:2e:41:7a:81:76:72:a9:7a:cc:
         7e:6d:b6:d9:f8:ed:5b:9d:ce:89:cb:a6:cc:40:c8:d6:f2:bf:
         3d:09:d2:b7:86:b5:5b:44:ad:41:f6:c2:c7:4c:00:20:07:4d:
         25:8a:0e:e3:12:b3:bf:2e:a4:34:c5:fe:4b:8e:1e:69:bc:5b:
         d2:bf:d6:10:27:9b:07:b4:97:d4:19:46:4f:9d:9c:c3:23:18:
         fa:6c:84:96:a0:aa:c3:7e:2d:a4:68:40:e4:52:9c:64:92:4b:
         7c:a2:2e:e0:03:af:ca:39:26:0e:66:a0:46:f9:b5:bf:7c:2d:
         f8:00:f7:09:80:65:14:95:b8:5d:3d:dc:7f:34:38:a6:f6:08:
         86:f9:9a:ab:8e:bd:6d:3c:36:60:a2:17:de:c6:64:59:4b:0b:
         98:8d:4f:03:47:fb:0d:59:44:57:50:d6:0c:a4:0d:00:59:5b:
         39:2b:ea:26:8e:69:f1:e2:52:92:dc:42:8f:b2:01:2b:f6:cb:
         45:04:82:1f:a5:16:92:00:47:e5:a0:6a:7a:b6:33:e4:d8:63:
         42:05:0b:dc:d1:06:80:f1:66:94:7e:fe:de:34:75:63:0f:ca:
         5d:3e:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----