Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File:                     rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier:          BK/zpN9cxvHMnataDMfRewHeUjc0k5PwHoMXtsQp1fM=
Subject key identifier:   45:07:88:12:47:7E:6A:57:5E:5A:78:5B:52:C5:F9:A2:EE:D1:B0:D0
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer:       /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial:       01962E98F2E6CE9604513F9E4A1DBEEB3CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number:          1068
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: 3x0Z+NOv27+vJ9nw+BRDhbYL5gw8A5cfJslKIRfMvEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:e6:ce:96:04:51:3f:9e:4a:1d:be:eb:3c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=45078812477e6a575e5a785b52c5f9a2eed1b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:db:1e:58:bb:eb:e5:d3:a5:2d:c4:50:9f:
                    e9:98:b2:1e:95:f0:cf:ab:15:f9:96:5f:0c:ba:dd:
                    29:9b:68:f1:49:03:1a:72:b4:a8:7c:27:63:fd:6b:
                    d8:cd:b5:d8:1d:31:b1:aa:0a:01:24:4b:a8:cf:35:
                    f6:13:30:15:7b:d6:d9:17:90:31:ce:a9:dc:29:2b:
                    a8:e7:47:87:a3:f4:85:7a:32:fd:41:ff:f6:61:eb:
                    8e:20:03:38:d7:29:0d:b2:26:93:1f:e9:23:7f:8d:
                    3c:60:41:ef:f1:af:2d:db:01:25:77:e0:bf:2a:55:
                    31:76:d1:e5:f5:6d:ce:8d:17:c8:04:8c:38:ea:37:
                    cd:03:4f:9a:f8:e9:76:03:74:64:d5:55:45:ff:cd:
                    a2:58:e6:51:1e:b4:d8:6e:48:cd:5b:e7:9a:23:27:
                    14:5e:38:b1:41:0a:e9:8a:5a:70:52:09:f4:91:7c:
                    bc:51:db:36:07:1c:35:c6:74:bc:df:86:24:97:24:
                    ff:1f:66:00:17:c1:7e:a1:4c:c6:59:a3:77:7e:c4:
                    64:38:c4:75:97:bb:c5:01:b1:5a:d2:8d:bd:6a:3d:
                    3d:7b:b9:ae:a3:bc:36:06:94:59:ed:a8:4c:d4:aa:
                    29:b9:06:48:f3:a4:36:56:82:3e:3c:8b:de:98:41:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:07:88:12:47:7E:6A:57:5E:5A:78:5B:52:C5:F9:A2:EE:D1:B0:D0
            X509v3 Authority Key Identifier:
                keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:c5:20:dc:5a:a9:d7:ee:43:f7:1f:70:fa:d0:b3:61:fa:
         ee:a8:d6:8c:ed:9a:f8:21:4a:b6:b0:b6:14:7c:77:eb:dd:36:
         6f:c7:50:56:b5:53:b7:82:67:12:cd:3d:95:b0:34:b4:eb:84:
         90:53:b1:b6:c9:b0:d8:52:ae:a4:20:7f:8b:2d:e7:b7:c5:dd:
         1b:cb:11:08:b2:26:70:e3:ea:a2:68:1b:ae:30:65:52:32:fd:
         3f:76:b8:49:ae:10:aa:c6:22:40:7c:4a:bb:d0:7b:8b:77:2e:
         0b:a6:c7:f9:4f:de:f9:21:43:23:04:ed:21:76:4f:8a:8b:48:
         61:a8:6f:4c:18:b4:91:c1:e3:fb:9a:45:bf:57:69:20:f2:3e:
         31:3f:5d:d6:bf:da:ed:8a:12:38:41:cf:47:53:8c:32:be:b8:
         b7:4e:40:18:3a:ab:b6:55:c5:06:cf:23:22:e9:d8:2e:42:54:
         64:88:4a:08:ca:dc:81:54:dc:5f:3c:27:24:7c:4f:dd:5f:de:
         fb:af:6a:1f:2d:48:d5:ec:91:70:c7:92:e6:36:3e:f0:59:72:
         79:6d:f2:bc:1e:fd:72:20:24:dc:53:94:07:9f:f4:34:d8:8a:
         77:b1:f2:1f:a0:85:c1:cd:4c:88:17:56:1f:91:94:73:b0:4f:
         9e:b1:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----