Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
File:                     nR3U4Tta-cKexamAJQniFjf6CNY.mft (raw, json)
Hash identifier:          yXZzReV5kWW9SohrIMRazN3w9Aro1z/F2rOoeJdP6s0=
Subject key identifier:   56:3C:BE:10:14:00:2E:D2:A2:33:63:C5:55:56:F3:40:69:51:ED:57
Authority key identifier: 9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
Certificate issuer:       /CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Certificate serial:       019547B56995581535F4F05CC91FAEF31366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
Manifest number:          0443
Signing time:             Thu 27 Feb 2025 14:00:26 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:26 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:26 +0000
Files and hashes:         1: nR3U4Tta-cKexamAJQniFjf6CNY.crl (hash: TwyXYGGZGBAxm5snPvV+qru7CsRoD00MKQ0J3LG4ANs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:69:95:58:15:35:f4:f0:5c:c9:1f:ae:f3:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
        Validity
            Not Before: Feb 27 14:00:26 2025 GMT
            Not After : Feb 28 14:00:26 2025 GMT
        Subject: CN=563cbe1014002ed2a23363c55556f3406951ed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:9e:3c:99:09:e1:a4:65:aa:1d:a5:0c:0d:
                    6e:4d:66:20:e5:9b:60:83:d1:50:6a:20:a4:d3:cf:
                    f2:c7:6c:cb:7c:b4:b8:48:f3:e8:f5:45:b8:2c:96:
                    59:59:b3:51:a9:ff:73:39:d7:a3:2a:3e:83:c8:af:
                    c9:ee:0c:f1:c3:8a:07:25:f7:46:d1:11:11:46:4c:
                    83:7c:9d:58:d4:b9:77:f9:4f:c4:53:e3:ad:08:f5:
                    16:ce:ec:40:c5:60:13:c1:56:0a:fe:dc:64:42:db:
                    0d:a2:d8:26:e7:f2:46:06:b6:cf:d6:25:04:af:91:
                    68:20:b1:ad:f7:d7:fd:b5:07:f4:fd:a6:be:f1:91:
                    ba:8b:2a:39:1b:ed:fe:da:42:bf:83:fc:d5:85:72:
                    8d:0c:b0:38:5e:dd:31:1e:46:b5:6c:8e:36:75:95:
                    6b:a2:ec:24:f4:8b:70:c6:a4:ac:c0:10:34:7e:74:
                    32:b1:ae:16:e1:a2:18:ad:f8:b3:34:8b:b7:3a:09:
                    5a:9a:c9:a2:a9:c6:4f:06:9e:23:bc:cf:64:10:e1:
                    ee:8c:89:20:99:37:19:5d:41:91:3f:97:7f:87:73:
                    fb:70:2c:3b:fe:5f:ff:f3:1a:43:a8:e8:7c:20:53:
                    d8:ea:f0:2d:40:84:f1:bf:96:a0:9a:e8:de:94:0e:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3C:BE:10:14:00:2E:D2:A2:33:63:C5:55:56:F3:40:69:51:ED:57
            X509v3 Authority Key Identifier:
                keyid:9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:99:2d:c9:53:ac:0c:fb:f8:99:23:8d:fb:74:f6:3d:2c:7c:
         97:63:d5:7a:ee:cd:cf:d7:a2:53:8e:00:ec:26:a6:24:ea:3b:
         2d:c9:8e:94:aa:3e:45:75:68:b0:cb:7a:c0:cc:1c:cb:15:ff:
         af:17:63:e3:36:92:d6:0e:a0:d4:c3:05:4e:9b:fc:9b:6f:c6:
         41:4f:09:86:ab:5e:21:c1:cd:32:45:1f:5b:1e:21:8e:31:9d:
         c2:be:0a:59:83:16:68:69:a8:08:3d:cb:d1:eb:5c:9d:f2:d4:
         c0:5b:d4:ab:ca:41:0f:87:01:68:a6:a8:c0:f3:f0:8c:73:b4:
         54:1c:52:90:65:c4:95:f1:a4:35:1c:9d:d4:02:38:44:7c:a5:
         45:96:6c:ed:66:01:f2:b5:16:d5:de:35:cd:d8:92:e9:09:12:
         74:e4:a4:94:ea:d5:cf:97:2a:58:a9:dc:5c:ab:3f:ff:28:fc:
         7c:8a:ae:5e:ac:27:ea:fb:e6:d7:d2:68:05:5f:0a:8a:bd:f2:
         0a:fa:af:b8:4d:d6:62:a8:c1:15:02:ab:f6:78:4f:ad:97:4d:
         09:f4:be:ca:4d:ce:cc:a7:32:96:7d:03:8c:df:bf:88:bb:e7:
         47:65:41:a8:36:f1:02:05:89:fb:c0:ce:90:b6:88:5e:73:2c:
         44:dd:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----