Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File:                     idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier:          Wh/89PfW9Gjqgqke9N7LydjTdUyOG6Pqqu7Y4kBYtNg=
Subject key identifier:   D7:CE:F8:B2:C3:FF:81:7C:67:9F:D8:E0:59:20:28:00:53:A4:39:76
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer:       /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial:       01962E9870B0BF682D99527A0DEF91B6323C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number:          1067
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: Ioz9wOeMDuOYlxeugXr4gtf9/QYUODIUrsYyRH9V8Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:b0:bf:68:2d:99:52:7a:0d:ef:91:b6:32:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=d7cef8b2c3ff817c679fd8e05920280053a43976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:1f:e2:b5:4d:ee:15:b6:b4:5c:c5:41:3c:
                    7d:e7:e0:c6:df:d5:fa:3f:82:a0:7c:f6:6e:ac:32:
                    80:b4:54:69:25:59:2f:b4:c5:80:c3:70:86:f9:d9:
                    55:c1:95:42:09:53:55:ab:5e:f9:54:e4:ad:f6:a7:
                    89:fd:a9:d6:a8:e9:0e:a4:62:79:96:b2:06:ad:fc:
                    16:20:a3:b9:04:f6:79:72:e1:37:59:2e:52:ec:3c:
                    13:2a:bf:98:14:49:5b:9b:8d:35:7d:21:cd:c2:d9:
                    ac:27:68:f2:e6:2d:8d:49:22:20:b9:1d:dd:94:b0:
                    50:66:a8:05:f7:f5:b7:0d:3b:a2:77:0c:39:d4:42:
                    47:75:9d:10:67:e1:ed:d0:35:20:c0:1f:65:84:98:
                    6c:2e:48:85:20:9b:9c:a4:33:3e:93:c5:ac:cf:5d:
                    15:9f:a1:2e:7b:3c:29:c2:5d:40:bc:02:56:5d:ac:
                    2e:c9:8a:66:2a:09:fb:33:fb:66:2f:0c:a3:f8:eb:
                    8c:18:b9:b0:0f:28:6a:07:d2:66:98:25:45:26:79:
                    07:4c:62:9a:da:6b:71:fa:30:12:04:3a:27:8d:0f:
                    63:ba:52:a2:4a:91:42:87:37:c8:08:e6:2d:f7:6d:
                    45:54:b5:98:1f:31:6a:1b:a6:3a:43:94:92:5a:85:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:F8:B2:C3:FF:81:7C:67:9F:D8:E0:59:20:28:00:53:A4:39:76
            X509v3 Authority Key Identifier:
                keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:9a:50:db:ee:5a:a7:d7:ef:a7:2b:f1:28:3b:8f:a8:6d:
         a7:5c:61:30:d5:d9:f3:16:12:df:f0:9e:86:a8:ff:ef:62:c9:
         98:74:da:fc:22:8d:8a:35:59:1b:9c:e8:10:ec:72:a1:00:3e:
         fd:50:cd:65:11:eb:e2:0f:89:59:f8:e7:fb:48:51:ca:02:41:
         5c:aa:3d:5c:a8:1d:6f:28:88:bd:f6:75:21:9b:67:75:b7:0f:
         d0:e0:d4:05:f7:20:52:0b:77:ec:d2:d3:bc:22:03:15:2e:e0:
         0a:33:36:d5:78:67:d6:7c:93:0c:d3:cc:fb:40:94:12:c5:91:
         64:72:ab:ce:38:6a:97:35:ab:61:46:3b:60:3e:2d:e6:30:dc:
         bd:ad:cb:55:44:a6:43:c9:9f:03:23:e4:84:32:9e:bf:6c:cc:
         fd:7c:a2:9c:7e:87:bb:b1:bf:aa:46:10:47:a9:12:45:ac:24:
         4e:e1:aa:b2:64:8a:5a:09:a5:cc:86:34:eb:6a:04:34:31:e9:
         33:b2:39:84:17:d1:70:dd:a9:03:f2:46:b9:47:82:4a:59:33:
         5b:5a:74:77:b2:8f:50:c8:3d:d0:25:0f:3e:b4:15:a1:75:77:
         d5:70:48:2d:a2:3b:1e:74:20:69:28:1e:0f:73:aa:40:ab:1c:
         92:7d:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----