Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File:                     G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier:          A625ApESmxEsNh3C52E+JyOki+Nq7imlD9iXUI09KH0=
Subject key identifier:   4E:57:13:21:12:F1:CB:8A:73:5A:0D:75:6E:31:4F:4C:95:DA:F7:2F
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer:       /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial:       01962E988087E6C4E3F9D8C16248FFE9D7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number:          0C82
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: jyCMxzr98IBAziIuxogt6tJWIHEvQYd4vct9bKtJwYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:87:e6:c4:e3:f9:d8:c1:62:48:ff:e9:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=4e57132112f1cb8a735a0d756e314f4c95daf72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:1a:63:11:0c:bc:0a:66:89:49:e4:98:f6:
                    ac:d1:70:5b:4a:d6:fa:0d:09:a5:1b:36:20:f7:ef:
                    59:ad:20:42:26:48:6c:c8:1c:b5:d0:b5:41:ee:c0:
                    29:8e:05:6b:ce:42:8d:97:13:10:df:39:92:13:9d:
                    07:7c:8a:f4:0b:d0:7f:27:13:fa:a0:98:08:2e:33:
                    6c:49:75:9e:63:d4:8b:67:8b:5e:98:f1:8f:d1:67:
                    22:d3:d9:7f:41:19:0c:04:ca:ee:9f:f9:4b:67:09:
                    3b:5d:14:04:d5:99:b3:f7:92:02:ec:e0:1f:e0:7d:
                    19:12:4e:75:d1:a7:e7:ff:e1:75:95:78:da:06:ee:
                    70:7a:ad:78:65:62:78:cd:87:da:c7:73:35:45:f0:
                    18:b1:82:f4:7f:27:5b:da:0d:b5:7d:91:b9:5d:e4:
                    ff:bc:74:7b:b4:e1:be:44:b3:13:e3:98:0c:ee:e4:
                    18:9a:75:3a:92:17:ce:f0:18:e0:98:72:2e:e6:bb:
                    e5:7f:2a:6e:9f:fb:08:db:15:41:a1:a2:91:ef:12:
                    84:63:64:c1:ac:a8:84:51:1e:35:86:ea:f0:9f:26:
                    6d:20:48:92:6b:a9:99:e1:b1:5b:ea:af:a1:90:8d:
                    5f:da:d0:9a:97:64:68:e9:cf:5a:5c:8d:c1:05:b6:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:57:13:21:12:F1:CB:8A:73:5A:0D:75:6E:31:4F:4C:95:DA:F7:2F
            X509v3 Authority Key Identifier:
                keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:70:a4:92:07:3e:84:9e:6d:27:74:33:5c:4d:68:7a:f5:56:
         d7:36:da:48:d0:b4:c7:bd:1c:52:04:ed:ea:d1:6a:b8:0a:97:
         7c:cf:be:7d:bb:58:88:e2:d1:62:13:98:01:92:24:cf:28:80:
         3f:16:54:26:5b:fc:0b:5d:de:af:1a:f4:1a:be:7a:19:62:a3:
         d5:e2:3e:74:f8:1e:e2:79:13:2c:58:6d:75:aa:be:36:13:79:
         32:a0:c0:66:91:94:a0:73:e4:11:b3:ae:cd:f9:3a:d9:1e:9f:
         50:06:2a:a7:e5:db:fa:ed:66:1d:79:b0:e6:59:aa:3d:73:21:
         b8:e8:73:26:af:32:b1:52:2d:cf:f2:98:c6:a8:10:d3:37:f3:
         3e:18:1a:d2:f9:2d:26:22:00:e0:aa:11:1e:6e:6c:d3:ce:f5:
         39:2d:5a:f9:25:3a:2e:c3:c0:0e:8c:4b:21:14:90:62:2d:38:
         0a:c5:f6:08:34:fe:5c:68:a5:17:4a:84:46:d2:5a:99:f0:c6:
         21:0e:e5:41:ae:3c:d4:05:a4:6a:bb:36:ff:96:72:ed:9f:95:
         8e:f6:71:71:3d:7a:77:2d:a2:4a:ea:4e:7f:5b:eb:2e:f1:9c:
         05:f9:ee:b7:ec:fe:c5:c6:0d:00:5a:27:05:50:9a:63:d9:32:
         6a:88:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----