Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File:                     tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier:          9KaTKi1wBVkZqMoQBDoDcj05VoGNZW1PSYqxgWX8a4k=
Subject key identifier:   63:86:9A:04:9D:D8:27:36:F8:CA:8D:22:1D:32:DB:FF:F7:9D:18:7A
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer:       /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial:       01962E98B5193F37045AE795D6BDE718F7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: I5NfAa6M9yWdhZL11arXR0BV+ij8ahKlZdbRuXSmUyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:19:3f:37:04:5a:e7:95:d6:bd:e7:18:f7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=63869a049dd82736f8ca8d221d32dbfff79d187a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:48:40:c7:a7:d1:0a:a2:c3:d7:38:be:bf:
                    9c:8b:8e:bd:b3:dc:53:ef:60:04:76:90:be:3a:d2:
                    dd:15:a4:25:72:bb:b2:ea:b0:f0:69:d3:f5:c1:15:
                    48:c8:46:89:ea:69:b5:d4:37:c0:c5:09:b1:9c:59:
                    8a:ef:d6:29:6c:2d:c7:ed:58:4a:9c:47:57:ac:41:
                    78:8c:cd:3a:73:2b:67:6e:57:1c:44:d5:4b:dd:58:
                    05:c2:44:25:72:cb:8e:7e:3b:cd:8d:33:88:f0:f5:
                    51:5b:56:ab:d9:58:f2:e6:1b:92:18:02:3c:e1:9c:
                    6b:83:a1:13:04:82:b0:e5:d4:40:38:88:c4:e8:00:
                    8f:96:82:e0:08:74:73:42:e6:1c:ee:43:2c:ed:d2:
                    5e:a2:62:98:f5:89:2c:05:ce:65:1a:36:58:9b:fc:
                    48:95:51:bb:72:0f:f2:08:62:04:a1:9e:77:6a:84:
                    8f:d3:2e:70:05:a3:4e:8d:84:ca:b6:dd:36:81:93:
                    d7:aa:a3:eb:49:80:4a:0a:42:dd:c0:5d:86:ae:f9:
                    f5:1c:20:d3:03:57:5e:4a:74:e6:62:9a:32:d2:0c:
                    86:15:7a:24:b7:30:1d:97:dd:c4:3a:f6:73:53:48:
                    ea:63:ab:18:18:63:8d:19:dc:a2:23:7c:60:37:26:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:86:9A:04:9D:D8:27:36:F8:CA:8D:22:1D:32:DB:FF:F7:9D:18:7A
            X509v3 Authority Key Identifier:
                keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:34:26:1e:5f:56:d1:dc:c5:a6:b3:b5:93:5e:70:2b:19:dc:
         3b:5b:ee:0a:b1:9f:d2:76:ad:67:6e:11:1f:99:63:80:f3:36:
         a2:0f:af:9b:37:68:90:6d:64:55:2c:27:9b:b1:f4:89:d6:ed:
         5e:b0:f6:61:cc:4c:0b:9a:1d:e2:7c:0c:43:d2:40:f2:7a:61:
         b1:d5:32:43:1d:19:00:0b:c6:07:cc:42:79:3d:af:fb:96:07:
         7a:9f:aa:ca:42:fc:50:59:02:ad:94:24:10:fb:68:47:1a:48:
         d3:23:96:72:f3:30:39:94:9c:b8:42:4f:45:40:48:df:a9:a5:
         b6:00:f5:01:f9:dd:df:5a:c7:db:aa:1f:84:48:36:66:18:08:
         bb:5f:c9:bd:0b:0b:31:d8:ee:18:29:88:73:92:0f:5a:b8:02:
         10:86:cb:76:87:15:d7:1b:9f:f8:74:ad:3a:15:8f:5d:da:cf:
         d9:51:7e:31:6f:8b:23:cf:00:30:85:de:5e:f8:66:54:2d:68:
         aa:c8:a5:67:86:1c:64:e2:de:44:6e:b5:54:61:c2:4b:ff:4d:
         47:25:05:e3:9f:53:f3:16:f5:9c:6e:7a:c9:89:44:35:84:05:
         d3:57:47:5e:f7:58:c7:79:87:5b:52:3e:c6:59:82:7c:ab:47:
         6d:63:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----