Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File:                     T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier:          avMUa5rf+b+aUJxJTC2ChdLWGtRdkvIgT7BAQrY1oOo=
Subject key identifier:   F3:36:7E:D1:FC:8F:73:BA:38:D0:6A:D2:7C:4D:14:5C:DE:5E:7A:12
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer:       /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial:       01962E991DCEA26E0ECEF603067B2C767041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number:          102B
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: poObYjJhM+ndGlj8p2zu8ylGDvO719Y25CMwsEMFNJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:ce:a2:6e:0e:ce:f6:03:06:7b:2c:76:70:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=f3367ed1fc8f73ba38d06ad27c4d145cde5e7a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:46:0c:65:b8:73:91:49:ed:75:10:13:81:
                    86:b8:a8:b7:4b:89:b0:00:7b:32:28:ac:3b:66:7b:
                    20:3a:92:7b:63:29:21:d9:35:b9:95:70:cc:5b:79:
                    3b:2d:45:b7:25:f1:75:96:75:30:a4:3e:1b:48:e1:
                    4a:bb:26:2e:20:e0:a8:ab:4f:df:31:0a:71:44:77:
                    3c:4e:6a:3c:50:e6:f4:b6:20:ce:fc:80:08:8a:21:
                    b1:5e:32:7d:3e:2d:9b:ad:96:82:31:be:5e:c5:b1:
                    a3:40:49:f2:ea:5d:58:7a:a5:a0:e4:46:0b:74:15:
                    82:bd:20:c1:be:6d:48:32:de:58:51:4b:4e:da:6b:
                    e5:2a:96:36:6f:9e:73:ce:0a:1c:4d:28:ef:b4:ed:
                    ee:73:56:80:ad:96:14:21:44:61:a0:71:53:67:92:
                    c8:65:50:7a:7d:02:4f:d9:72:a9:29:5a:68:1d:2b:
                    85:f9:27:0b:ce:bf:3e:c6:e2:81:9b:f5:75:f5:73:
                    12:4a:13:7e:a6:7d:bc:13:e2:f4:e5:f6:3b:95:ee:
                    58:65:ef:99:7a:95:9c:88:bd:34:34:66:7c:46:14:
                    8b:6c:55:7a:38:b3:0c:8e:0b:90:2e:d6:ed:84:32:
                    1b:1c:29:76:2d:d9:c1:b7:79:d0:2d:aa:9c:f4:1a:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:7E:D1:FC:8F:73:BA:38:D0:6A:D2:7C:4D:14:5C:DE:5E:7A:12
            X509v3 Authority Key Identifier:
                keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3d:fc:90:a6:8c:36:93:a1:55:39:59:d4:d9:cb:0a:a4:01:
         6a:06:17:13:cb:15:0b:2e:d0:d8:b1:6a:eb:b5:36:16:7d:cd:
         74:3d:bd:44:e1:c3:b8:c1:83:14:d0:fe:45:9d:02:69:59:71:
         15:f3:86:51:1a:dd:6c:90:a8:1b:27:9b:73:e6:1b:32:f5:da:
         37:e2:93:e8:7f:36:55:41:ce:d3:7c:6e:24:5d:e9:38:99:c5:
         06:6a:51:87:59:92:bd:7f:26:a2:71:c7:e4:9b:19:19:00:54:
         f1:d4:89:62:17:3a:b2:74:e4:bd:e8:f8:6d:12:b4:fb:87:0e:
         b2:a6:50:02:1a:9a:4f:81:71:a6:7c:4e:f8:a0:1e:89:c1:4f:
         07:af:2d:3e:95:cd:47:19:62:26:de:c4:cd:22:47:0b:e0:26:
         75:a4:1b:6b:89:d3:09:62:5e:f9:e5:b0:d2:aa:9b:23:75:6a:
         8a:04:89:c8:0b:d4:52:1d:98:1c:69:9f:5c:1d:a1:af:66:b7:
         82:b5:8e:20:1b:2c:c7:83:7e:15:21:c5:bf:fc:48:b7:8d:c4:
         7b:d5:ae:ea:6c:ad:9d:d4:4a:9c:d8:07:01:f8:c0:8e:75:64:
         cc:9a:65:3f:da:00:76:24:23:f9:1e:11:a3:53:1d:0b:10:2f:
         ad:93:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----