Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft
File:                     RXHLqFoCMKnLR6vrWzue1NUxz54.mft (raw, json)
Hash identifier:          OnRRLO75/e+bKACKfMqAj4dsS+vzunvSZCqs8CeTbmg=
Subject key identifier:   62:54:4A:62:BC:A3:6D:0A:AC:93:EA:7F:EC:3C:4E:9A:5B:F6:A8:4A
Authority key identifier: 45:71:CB:A8:5A:02:30:A9:CB:47:AB:EB:5B:3B:9E:D4:D5:31:CF:9E
Certificate issuer:       /CN=4571cba85a0230a9cb47abeb5b3b9ed4d531cf9e
Certificate serial:       01962F3DBA722CCEA38AE9D7BD99E4D453CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXHLqFoCMKnLR6vrWzue1NUxz54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft
Manifest number:          0294
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: RXHLqFoCMKnLR6vrWzue1NUxz54.crl (hash: qosZelIxffNPttxaeoPRseJPK5WUim4DH6IdOJVKVUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ba:72:2c:ce:a3:8a:e9:d7:bd:99:e4:d4:53:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4571cba85a0230a9cb47abeb5b3b9ed4d531cf9e
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=62544a62bca36d0aac93ea7fec3c4e9a5bf6a84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:3a:95:bf:b3:83:ae:1f:07:38:bf:b1:52:
                    10:73:9b:1e:a4:7f:40:1c:3e:2b:eb:1a:95:3f:3b:
                    ab:a9:8d:ca:84:45:57:21:c3:4f:34:e5:03:f1:ae:
                    23:9e:53:06:52:8b:c8:55:d4:7e:59:78:7b:89:63:
                    2c:3b:b8:23:f1:bf:b3:ec:5e:57:94:a1:98:c7:a9:
                    c1:b9:98:09:d9:82:20:56:99:42:aa:1f:bd:ee:ec:
                    e2:e9:88:65:b3:e1:21:e1:21:18:0f:21:b1:1f:e3:
                    83:db:8a:8c:04:5a:2d:bf:c5:64:e2:62:92:28:18:
                    3f:67:90:13:7f:a9:ec:d5:c7:90:30:8a:5a:68:62:
                    f3:f6:2e:af:db:61:0c:e6:a3:73:d3:51:1c:c9:98:
                    71:4b:ba:54:fe:d0:4a:3c:a6:78:bc:98:6b:70:b2:
                    8a:9f:87:6b:d2:3a:c9:fb:cd:f9:8d:e3:e5:87:72:
                    e7:72:a4:e0:35:1c:1c:d1:86:16:06:54:14:92:6c:
                    e9:e8:a5:3d:24:00:98:49:5d:49:54:c5:e0:ed:ad:
                    0a:d0:a1:f0:db:95:6e:c2:1f:1a:fc:9d:94:24:11:
                    42:55:5a:98:e0:32:32:e5:f0:2f:3c:d4:5f:e1:06:
                    e8:40:83:13:c7:9d:7e:63:0a:38:8b:f3:fc:be:f8:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:4A:62:BC:A3:6D:0A:AC:93:EA:7F:EC:3C:4E:9A:5B:F6:A8:4A
            X509v3 Authority Key Identifier:
                keyid:45:71:CB:A8:5A:02:30:A9:CB:47:AB:EB:5B:3B:9E:D4:D5:31:CF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXHLqFoCMKnLR6vrWzue1NUxz54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:8b:9e:57:5e:62:68:25:b8:b3:21:d4:97:24:c0:6b:db:
         58:f8:9b:ad:23:5d:f2:93:17:33:09:70:6b:ca:38:42:4e:a0:
         20:76:53:67:db:4c:51:c1:10:ba:42:7e:a2:84:14:94:b9:77:
         3d:52:29:c1:9e:cb:f4:48:7b:e6:8d:7f:3a:45:c5:51:89:5a:
         50:d9:25:86:01:73:f9:33:f1:3d:75:01:06:28:41:33:dc:c4:
         28:9b:6e:23:0c:7e:cc:b4:6c:7e:68:63:5b:27:ce:8b:4e:59:
         79:fa:cf:e8:6e:03:14:48:0c:18:a4:fc:d5:5f:42:06:9c:84:
         fc:18:ce:f2:f6:42:55:21:4d:dc:af:6c:ae:c7:cb:41:d6:58:
         ec:9b:06:35:89:43:0f:e0:12:e2:14:e4:63:50:b1:35:43:7d:
         ed:bd:ad:55:1b:85:fd:44:8f:4f:6a:f7:37:ab:4f:2c:7e:fe:
         c5:2b:b9:a6:94:1c:aa:59:4d:05:b5:1d:0e:46:d0:4b:a9:6e:
         e6:3f:84:55:17:ae:d6:76:02:c0:b6:34:b4:dd:b0:30:f3:69:
         d7:26:b0:51:18:85:e6:37:ee:fa:72:ce:e4:cf:4a:3c:3f:e2:
         ed:47:a0:45:da:ba:dc:23:35:27:1d:cc:37:67:e8:70:d0:20:
         22:d4:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----