Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File:                     ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier:          KYAY8a/QvATPXm1vKN+MJwmiPSS29DKGKXm+J062rFw=
Subject key identifier:   45:7F:72:A8:69:EB:18:36:2E:26:DC:54:AD:FA:07:B1:92:57:CB:0E
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer:       /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial:       01962E986717C11C00792B75F4CDD84E1942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number:          0658
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: 6gnShQCBVV54xdDtKNOVttNd0iLpQyZRlurBJj4oeBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:67:17:c1:1c:00:79:2b:75:f4:cd:d8:4e:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=457f72a869eb18362e26dc54adfa07b19257cb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:80:05:a7:53:1a:53:9b:a7:29:4e:cd:fa:
                    2c:e7:eb:bb:e5:aa:06:58:9c:f4:bc:0b:b1:de:e7:
                    5b:ef:7c:47:8e:a6:8c:fd:fd:9f:c7:23:91:05:13:
                    38:9f:2c:65:db:bf:42:ac:1b:28:f0:71:b6:00:42:
                    dc:e1:2f:b6:00:11:86:4e:a4:8e:bd:fd:25:25:bb:
                    c5:b5:31:71:a5:2b:d6:9d:5d:4c:6d:37:f2:49:a4:
                    bb:19:30:4c:e6:2e:3e:5b:7d:3a:e1:7a:7e:72:34:
                    aa:c2:63:0a:18:3f:da:85:34:56:d9:77:3e:18:32:
                    a7:9b:c2:65:eb:60:5f:70:5e:0e:40:5f:3f:b4:df:
                    07:9a:00:5a:ee:b1:2b:6b:e1:40:6d:8c:3f:b8:1d:
                    46:f3:7e:99:a9:53:1e:5b:21:9f:e8:03:c7:c2:75:
                    89:38:30:3d:92:a0:3f:13:42:70:3a:90:52:2b:44:
                    b3:a7:1a:2e:9a:db:4f:6f:ed:0a:15:0c:da:01:fb:
                    98:5b:39:5d:ca:8f:86:c8:c7:44:8c:a8:db:03:b4:
                    9b:8a:07:db:8c:08:d8:5a:ff:2f:9c:ee:32:ba:e7:
                    7d:f8:af:6b:48:de:ed:74:07:7a:f6:58:f9:71:1e:
                    54:03:85:7d:c7:3f:4b:d9:17:6f:ec:3e:ef:17:bf:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:72:A8:69:EB:18:36:2E:26:DC:54:AD:FA:07:B1:92:57:CB:0E
            X509v3 Authority Key Identifier:
                keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:83:44:13:3a:1d:d8:8a:9b:33:c7:49:72:f7:83:2d:db:1b:
         53:b5:89:4c:11:6b:18:b2:05:2c:bf:ed:e2:06:c1:5b:c2:bc:
         14:df:9d:ca:85:2a:6a:6f:ff:b7:55:27:e5:fb:34:10:53:98:
         cf:9f:5d:d0:25:33:0e:ec:61:54:81:e2:3f:ca:38:5b:db:25:
         68:0d:a1:af:78:50:6c:9e:10:8a:eb:b8:f4:31:2f:c2:eb:d1:
         09:50:40:91:37:26:a4:1f:d5:9d:fe:a0:e7:c2:f8:e6:af:72:
         52:a2:a6:d4:af:bf:5e:b1:bc:1e:9a:19:35:70:6c:6d:40:a1:
         9b:62:f3:d7:7a:74:87:1e:ae:0a:9a:cd:e8:03:2b:57:92:e0:
         0f:10:43:cd:70:78:a2:29:c3:69:5e:42:4e:b6:53:cf:0e:e3:
         56:90:0c:21:17:eb:79:0a:91:4b:fb:ae:be:11:b4:c7:f9:9d:
         38:d5:c3:83:69:fe:95:aa:e4:88:55:a4:7a:9d:b9:5f:f6:e9:
         4a:4f:0a:a2:2a:75:09:0b:93:c9:6d:48:9e:66:73:26:ff:b3:
         a5:24:ee:c3:d1:47:c6:1e:3c:e0:f5:e4:97:cf:7e:a0:a2:5f:
         a5:c9:cf:fa:b3:6f:a3:11:3d:24:bd:5d:b4:8f:45:50:33:78:
         79:c7:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----