Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File:                     R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier:          eLCEB04Lbr4zXGGY7cPd5JN30O9yvd//DlUz6X5qx/o=
Subject key identifier:   39:01:1D:FA:34:65:E3:0D:6E:34:51:CA:50:04:40:40:F6:29:B4:C9
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer:       /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial:       01962E98DB543F6CD9AC47C5083C36B554C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: 63ODZU0cjhf2brxAD+YkH6DGk1N/ECkMhpBxwR58Vk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:db:54:3f:6c:d9:ac:47:c5:08:3c:36:b5:54:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=39011dfa3465e30d6e3451ca50044040f629b4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:a5:1f:72:cf:23:41:f9:b4:d1:c4:32:23:
                    5d:28:c1:d5:f1:43:50:19:d2:35:fd:6d:a8:3a:64:
                    a4:92:4a:b4:ee:01:dc:5e:da:af:e7:c7:2c:aa:52:
                    02:f5:61:cc:07:ec:cd:d3:56:12:7b:ff:db:e4:0c:
                    e4:ed:2a:00:60:0d:98:82:f9:4a:bb:c6:ec:23:6a:
                    3e:0f:f9:ac:9d:1f:05:51:49:43:68:81:0c:61:a5:
                    25:bd:9a:ac:d3:2a:49:5f:7d:ad:65:2d:8e:77:77:
                    9c:77:12:1d:b4:5e:37:33:7d:41:6f:42:89:6a:4b:
                    79:35:a3:82:9d:e9:a1:44:4c:1b:e6:08:e8:22:c4:
                    4d:e4:a8:f0:91:39:46:23:04:96:de:32:3b:7a:d3:
                    b8:62:e6:7f:d7:3c:1a:15:f8:86:fa:ec:69:92:8d:
                    ad:f0:97:1e:cd:21:8c:d0:bd:57:f9:9c:e1:2a:51:
                    cf:54:05:5a:46:c2:e0:ef:85:fe:72:fd:bb:e7:13:
                    7d:04:b3:fb:c0:6a:66:c3:1f:d3:a8:6f:50:3b:89:
                    67:86:d1:df:79:8d:f9:26:1d:e1:3f:42:cc:af:46:
                    79:73:41:63:f5:e4:e7:f7:d9:84:17:29:24:0a:4d:
                    34:f5:22:af:77:16:91:1c:87:58:19:10:5b:a9:9f:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:1D:FA:34:65:E3:0D:6E:34:51:CA:50:04:40:40:F6:29:B4:C9
            X509v3 Authority Key Identifier:
                keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:78:45:1c:49:c2:5f:8e:71:2b:0d:d3:9d:9b:1a:2f:b7:97:
         ec:b2:91:9e:c8:ac:10:45:13:eb:0d:d1:a7:52:11:8a:61:f1:
         39:06:27:16:f4:c8:28:45:02:49:3a:f1:4a:d6:44:d5:08:6c:
         46:ec:a3:b6:3e:e9:1c:d1:47:80:37:d3:83:a5:5e:16:59:06:
         68:92:05:c1:f8:ac:ba:6d:52:5b:77:07:88:63:d4:99:fd:3a:
         97:4b:ad:12:36:19:4a:3a:a0:9e:b9:46:e6:8b:c0:a0:5e:3d:
         9f:b6:19:70:8b:b5:f9:a0:41:f5:de:64:89:a4:18:99:0d:a0:
         df:57:2a:b3:96:1b:19:2d:6e:b7:1a:56:26:1d:d3:eb:51:3d:
         28:ab:16:27:11:0e:21:a8:b3:08:57:fd:00:c4:be:f5:f0:31:
         05:22:36:3e:dc:d2:5f:8e:ee:9e:8a:6b:b7:c6:67:34:88:5d:
         79:b2:9b:e2:c3:6b:54:0d:be:a4:2d:45:77:4f:1d:24:6d:72:
         9e:00:a4:eb:38:ee:76:4f:55:22:dd:9c:1e:8a:c9:93:0a:99:
         1b:9f:3b:f6:2d:22:2b:20:b0:d3:d1:5d:9d:3f:6f:fa:ca:b1:
         a0:3c:d4:4d:96:95:61:1f:dd:81:d2:07:a1:72:14:ea:46:d0:
         24:ec:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----