Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File:                     dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier:          TvydHAkxb3z4bAw7Ilee1ZWvrXl2Z/5eexs3N51roiU=
Subject key identifier:   B4:19:DC:A5:CD:71:1D:8D:21:18:EA:F3:61:5F:D5:FE:DC:23:70:ED
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer:       /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial:       01962E988C0D82C0D89F1757D0D8AFF4F648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: LTr3u6idAdZge/ryQN0KLsrA1oBdo05XSy4Mx6QEmb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:0d:82:c0:d8:9f:17:57:d0:d8:af:f4:f6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=b419dca5cd711d8d2118eaf3615fd5fedc2370ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:8b:38:00:7a:43:70:90:c2:69:64:57:c2:
                    9f:b6:ce:77:a5:cc:84:b7:ec:c8:af:3e:94:ae:43:
                    81:c2:e6:c9:2c:96:36:84:fc:bf:f3:dc:fc:79:d8:
                    14:c3:67:60:b3:7c:c3:67:8f:82:de:b7:9a:dd:97:
                    19:f1:b2:4a:0e:b9:92:a3:e7:25:4c:fc:30:00:8f:
                    ae:e2:e3:c9:eb:ed:8a:23:c4:7d:dc:db:b5:95:4b:
                    15:5b:d9:5e:04:32:68:f8:b4:32:08:65:06:55:d3:
                    cc:b2:6e:ca:31:9d:40:a3:46:06:79:3e:0e:c2:eb:
                    69:58:c2:05:0f:73:3e:cb:39:b0:74:a5:2d:fa:08:
                    a6:a5:f9:35:65:45:18:c5:ad:06:7c:f7:3a:b7:26:
                    a3:12:1b:ed:b6:ab:86:18:70:37:18:c4:7d:ce:09:
                    d2:f3:67:16:ee:cd:54:ed:3d:cd:f7:d4:52:1e:85:
                    c9:90:27:62:ab:05:56:cb:30:c8:db:bd:9c:76:9b:
                    b0:cb:ef:1a:64:8d:9c:4c:4e:9f:5e:12:99:73:55:
                    db:ad:3c:75:08:57:cf:6d:1e:a2:c8:b5:2e:8e:9a:
                    b8:e6:24:e8:8a:66:4f:9b:75:9b:a5:99:25:8a:48:
                    ad:3b:f3:8e:a9:a0:ee:dc:1a:18:fa:78:d3:7a:ac:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:19:DC:A5:CD:71:1D:8D:21:18:EA:F3:61:5F:D5:FE:DC:23:70:ED
            X509v3 Authority Key Identifier:
                keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:b3:2d:7d:c6:58:9e:d6:62:50:55:3b:17:4d:a5:05:82:
         29:e3:86:1b:01:ae:ce:86:19:4c:8d:db:29:16:db:ce:78:53:
         70:e1:0a:04:cf:79:04:f8:ea:e0:02:ab:c3:11:c8:c8:a2:20:
         eb:ac:04:b8:78:ba:34:2a:fe:07:98:dd:f7:b1:fb:c6:eb:d7:
         3e:b3:69:9d:43:61:06:47:0b:b1:59:9f:a3:73:91:27:ad:a9:
         be:03:56:77:65:d7:ae:e1:66:fb:43:9c:9a:25:6b:22:09:18:
         44:7d:b2:d7:c3:95:8b:e3:ad:48:fb:6c:0b:ba:c9:b1:b7:5b:
         83:13:75:86:1d:65:26:e2:42:e5:0d:8b:a8:94:7f:d2:79:06:
         ef:d1:54:63:e2:d9:85:de:73:47:c2:af:e6:e5:be:d8:4b:14:
         fa:67:56:36:6f:68:d1:49:95:81:de:82:59:c7:f6:4c:59:ef:
         b7:da:6e:73:bf:3c:71:0d:01:83:a6:27:da:9e:69:6a:ec:f5:
         00:5f:9d:4a:55:d8:1f:ac:b3:be:bd:cc:9e:fc:8d:8b:e0:06:
         cc:76:83:b3:fc:6d:2b:ec:02:ba:9b:ff:cd:c9:d7:53:e0:35:
         e1:60:73:01:90:d9:c0:3c:fb:88:91:0b:57:ec:39:1d:13:18:
         17:5e:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----