Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File:                     t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier:          sfBwEfStJ0n7oXL+NNsX0ssb+khojOC5xWY/P2MzY2A=
Subject key identifier:   F5:38:41:E4:07:68:21:F0:B3:7A:0D:D2:AE:0D:6E:D7:D5:EF:C0:E9
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer:       /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial:       01962F06A57CDD00052D47F4B26A146DD372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number:          1249
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: TW/7/fYaspvUQ+jstlapatTcpGD+HgbwLbT1RX6vi3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:7c:dd:00:05:2d:47:f4:b2:6a:14:6d:d3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=f53841e4076821f0b37a0dd2ae0d6ed7d5efc0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:20:18:1a:bc:47:77:f5:1a:04:23:d7:63:
                    4a:aa:4a:e4:cc:d2:3a:db:e1:32:a6:0a:d2:a6:4b:
                    ff:58:12:94:32:6d:cf:ff:a3:fb:ee:0e:4e:49:fa:
                    e2:12:f3:c7:0c:94:cd:82:58:61:8f:a3:3f:da:17:
                    6f:28:44:3a:f0:76:5f:d2:d2:ab:78:89:d4:6b:35:
                    77:78:8c:bc:a7:c4:ef:45:0d:68:98:bf:ed:f9:69:
                    63:82:94:7f:ee:5f:7a:15:d6:be:bb:fb:8e:f4:16:
                    69:ed:8b:27:14:d5:51:47:44:84:f7:86:69:76:e8:
                    a3:1e:e8:14:37:79:4b:94:aa:31:01:27:23:83:e4:
                    2a:f4:85:de:d6:42:a6:ea:d4:8d:2f:f3:0b:78:9e:
                    24:8c:85:a9:d8:8c:64:e3:b6:22:2d:99:2a:c6:2a:
                    ec:fa:eb:df:8d:30:62:4e:83:36:cf:4b:8e:ab:57:
                    12:56:72:8d:16:25:0a:cf:26:ee:72:0d:de:6a:a9:
                    db:c2:55:83:e5:7b:f2:e3:cc:81:91:ac:a6:e3:b0:
                    68:fb:97:ca:6e:27:6d:db:31:aa:9c:e6:23:8b:f2:
                    64:bd:59:d4:47:f3:4e:e5:40:8c:47:b9:98:5a:18:
                    c5:7e:e6:af:c8:8a:1f:0c:5a:69:a1:fc:5d:48:4d:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:41:E4:07:68:21:F0:B3:7A:0D:D2:AE:0D:6E:D7:D5:EF:C0:E9
            X509v3 Authority Key Identifier:
                keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:dc:8d:b6:49:16:42:d6:89:d4:cd:7e:7f:83:9a:95:fd:
         34:4b:7d:a5:0f:77:72:7c:67:60:d9:2a:78:e4:29:63:f6:bd:
         b3:ac:9c:4e:22:b2:27:47:8d:44:ac:18:bf:d3:fc:f6:d3:c2:
         73:d1:3e:5c:95:31:da:6a:73:14:8e:d3:74:66:2a:7a:28:0c:
         b6:b5:57:59:41:43:eb:be:e2:bd:5c:5a:19:da:45:e8:7a:f7:
         16:1f:80:69:18:00:30:43:35:33:13:60:dc:b8:40:32:73:08:
         87:b0:42:f2:cf:81:3f:ca:b3:ea:c1:4d:13:17:72:6e:36:cb:
         04:27:02:d5:da:e0:e5:f2:83:6d:bc:8a:ee:09:66:ff:b6:25:
         33:32:6f:e7:a0:74:05:89:92:6b:7f:e6:ad:34:4c:2b:92:38:
         a1:64:c6:8d:62:b1:4c:7b:10:65:d8:f4:3f:19:33:81:95:43:
         47:b7:10:d3:13:e6:d0:41:53:cc:d8:e2:e7:a5:99:a5:f8:25:
         9f:50:fb:15:f4:8e:28:2b:a4:19:15:ac:0b:d6:a7:66:fe:57:
         78:65:6a:e6:65:74:95:7a:b5:e9:dd:52:1d:49:4c:20:49:c7:
         20:c9:ca:8d:db:c8:fb:a8:46:96:9b:85:c7:ad:30:a1:34:a2:
         17:c2:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----