Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File:                     k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier:          D/sfMjBTYHC0nELVFeJtCUfwnaBKVF0UmzHddy1F3Qg=
Subject key identifier:   4E:B9:0C:5C:1E:42:F4:36:77:D1:A7:B9:92:41:70:53:2C:D9:16:FF
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer:       /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial:       01962E61767B15A2CB78A54CD6E2A4700E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: bWA8PdGn58MyxyxZfjHJ7Vy7KaGS80t/UOKXCSeSZM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:76:7b:15:a2:cb:78:a5:4c:d6:e2:a4:70:0e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=4eb90c5c1e42f43677d1a7b9924170532cd916ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:33:71:3f:f3:93:f6:11:94:e3:a9:22:01:
                    ac:97:1a:90:14:98:fb:d4:93:fa:98:24:96:78:0d:
                    2f:65:3f:f6:94:94:e3:c6:2a:b1:f2:82:5f:74:08:
                    7f:a9:9b:bf:d4:b2:db:af:0b:d9:ec:62:c7:87:4d:
                    b2:78:13:e7:98:db:b2:22:7d:98:ce:5e:8a:35:73:
                    85:10:df:cb:96:55:0f:03:2c:04:54:c7:55:47:ed:
                    14:bf:e9:21:b4:72:41:68:4a:8e:9c:af:8d:f2:e1:
                    ff:4e:f9:5a:fe:6a:a3:87:ee:2e:64:3d:e3:77:88:
                    97:be:d4:bc:50:26:f7:90:75:4f:a6:76:c4:93:04:
                    ca:70:b1:a8:87:f5:44:d7:d9:4c:7e:23:8a:bc:5d:
                    99:77:2e:14:fc:b8:58:c7:c7:92:4e:ff:2f:3d:ba:
                    c7:2c:87:9c:f8:e1:f4:59:3f:61:7b:9f:13:e6:5f:
                    3a:2b:32:d0:60:7b:a7:9c:54:1a:8b:70:e5:51:b1:
                    a8:f1:8b:59:7c:fd:c8:c9:73:e5:76:c7:fd:f8:00:
                    6b:7a:86:c1:53:1e:27:64:83:e7:03:4c:9b:b6:bf:
                    c1:6f:69:63:fa:01:b9:7b:bd:d1:7c:1c:c0:c0:14:
                    38:18:eb:76:e5:91:15:90:b1:4e:c2:07:43:dd:31:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:0C:5C:1E:42:F4:36:77:D1:A7:B9:92:41:70:53:2C:D9:16:FF
            X509v3 Authority Key Identifier:
                keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:f9:cf:02:df:48:9a:5d:c3:93:96:9b:9d:8e:73:83:9a:
         58:6f:a7:03:c2:b6:39:2c:01:08:3c:d9:ae:21:ae:b1:a2:51:
         c9:7d:41:a5:05:e3:90:ff:4b:68:8f:a3:0e:be:58:f5:61:43:
         bf:8a:d5:3f:9f:9c:9f:38:c3:e0:b9:e6:5e:4b:2e:4f:f5:64:
         e9:3a:dd:e8:b3:0a:59:57:de:cd:15:ff:c7:3b:72:da:96:a8:
         dc:84:2b:32:4a:1c:b2:40:6d:be:4f:96:b0:a4:c6:f5:67:ec:
         4b:04:9b:ac:87:55:7b:27:0e:8c:27:cf:55:58:c6:7d:c9:0f:
         d0:2d:a9:22:1f:db:74:1e:f2:5b:f2:fc:8a:57:3c:db:70:50:
         48:ce:b4:2c:a7:4a:73:52:34:a6:1f:8e:21:2b:e6:19:ca:ef:
         d7:ab:2b:3a:d9:9c:4d:2d:eb:ab:1c:72:07:48:a7:af:57:e4:
         df:51:01:bf:0e:1a:e2:f2:26:f9:a1:4f:88:a6:a5:ec:be:68:
         82:3b:d3:2d:b1:23:51:46:90:6a:80:cd:fd:2a:99:2b:23:d7:
         e0:d8:af:14:14:52:c3:aa:e0:ba:29:cf:98:0b:aa:f5:b4:09:
         42:22:65:49:56:03:d8:af:ce:8f:62:22:30:be:77:95:8e:02:
         40:d0:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----