Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
File:                     Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft (raw, json)
Hash identifier:          JbXJUSxOxbq2HoIwuzm0UD20FSScMreb2s0okzpR6SA=
Subject key identifier:   44:F3:53:34:5E:6B:5F:65:3C:5E:92:9B:5C:93:B6:F5:A3:33:8E:0D
Authority key identifier: 21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE
Certificate issuer:       /CN=21be340b6a32098919788336fce1e689203fc4be
Certificate serial:       01954823A43FB5946E63E511CC9A5CD940A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
Manifest number:          097C
Signing time:             Thu 27 Feb 2025 16:00:50 +0000
Manifest this update:     Thu 27 Feb 2025 16:00:50 +0000
Manifest next update:     Fri 28 Feb 2025 16:00:50 +0000
Files and hashes:         1: Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl (hash: SV5q8sfnCLKSMXpD6U7JqsV1fyHWpnzAE375aB0Wxs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:23:a4:3f:b5:94:6e:63:e5:11:cc:9a:5c:d9:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21be340b6a32098919788336fce1e689203fc4be
        Validity
            Not Before: Feb 27 16:00:50 2025 GMT
            Not After : Feb 28 16:00:50 2025 GMT
        Subject: CN=44f353345e6b5f653c5e929b5c93b6f5a3338e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:2a:f7:0b:8c:1b:f5:7c:b2:1d:f0:e2:4d:
                    10:ad:81:ab:07:be:ef:d0:c3:57:2b:b0:80:3b:42:
                    3f:a5:0f:5a:cd:c0:f5:f3:ed:83:0a:c8:e8:6a:d4:
                    c5:e5:a4:91:e6:3c:e2:df:36:44:80:a3:a6:f4:01:
                    0c:05:ca:56:b4:a8:40:5e:df:ee:78:cd:56:00:0c:
                    33:24:65:ea:0d:fb:ae:26:1b:75:3d:d4:a4:f0:43:
                    75:f2:d2:9c:e0:37:99:a2:b6:1c:e8:36:f4:03:b9:
                    1b:b5:b5:ed:9a:01:42:15:29:92:13:30:14:c8:c3:
                    b9:84:1a:6f:4e:c0:3e:b7:6e:75:1c:43:02:27:a4:
                    9a:d4:15:1c:a0:32:75:33:ee:69:e2:9a:1d:c2:60:
                    de:96:9f:8c:3f:d8:65:17:e2:ae:8e:e7:4e:35:6e:
                    84:6a:12:c5:0c:e2:27:e4:33:c2:14:dd:a9:34:93:
                    a9:d9:c9:f8:05:56:78:9a:31:b6:29:59:92:48:cf:
                    4c:27:51:bc:99:bb:62:c1:07:da:5c:25:57:9f:6f:
                    fd:4f:84:bf:6b:5a:43:e1:12:db:5c:0e:76:70:29:
                    93:e7:ea:06:e5:09:dc:e6:cc:e2:56:e0:0d:91:71:
                    3c:1f:da:a1:3c:08:be:78:fd:80:77:bb:59:14:0a:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:53:34:5E:6B:5F:65:3C:5E:92:9B:5C:93:B6:F5:A3:33:8E:0D
            X509v3 Authority Key Identifier:
                keyid:21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:44:f3:35:97:e4:57:b5:b1:89:fb:b7:d5:10:f0:e6:07:
         b5:4a:5d:06:7a:a7:72:06:c9:4e:49:50:ca:a0:44:d1:cf:e2:
         49:dd:5e:87:bf:55:03:87:29:f3:14:ff:00:0b:12:19:29:1e:
         d3:ba:04:d9:0c:19:7b:dc:53:39:bb:8e:4c:f0:73:00:e2:ea:
         41:6e:fc:8b:db:a9:b3:0a:e7:cc:a0:24:c6:6c:48:bc:ba:8b:
         88:3d:a0:73:92:ec:b7:58:f6:cc:bf:5d:5e:07:8d:2a:41:4f:
         48:f8:27:af:be:c3:cd:af:2a:6d:0b:41:c7:67:1a:94:69:c3:
         d3:58:99:4b:a9:f5:30:03:ce:1b:bb:36:8c:92:e0:df:4b:c6:
         ad:ea:4c:c3:04:51:27:9e:d1:dc:99:eb:5b:c1:4f:b7:17:d9:
         f4:d5:01:e9:b5:6a:ec:e2:b8:4f:c4:71:16:eb:a5:d4:7b:54:
         fa:eb:9d:32:aa:6a:73:b0:e2:83:a9:71:d1:ed:67:66:b0:a8:
         4a:74:39:fa:94:ff:f7:56:ac:e6:65:c9:65:7e:d4:a3:aa:31:
         23:ba:4d:3c:27:b1:5a:be:42:79:08:f8:f9:12:8d:7f:43:02:
         97:6c:d3:23:85:48:6e:64:73:da:aa:40:46:68:81:e5:ee:ac:
         75:0e:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----