Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File:                     sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier:          vKvNwExdyWGgsryThtCuERqZD5AO+QHVtHCCWJYb/3A=
Subject key identifier:   7E:AE:1E:DD:33:45:84:7E:F2:A1:97:25:A4:18:95:4E:C2:06:9D:A3
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer:       /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial:       01962F06D7394B77DDC036F2438C2842E1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number:          095D
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: XX3tPd/9BkN22oL1W2gyi/EK07ayskaCxwXvlHJJcdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d7:39:4b:77:dd:c0:36:f2:43:8c:28:42:e1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=7eae1edd3345847ef2a19725a418954ec2069da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:7e:70:0d:e7:5f:5c:a2:7d:5b:20:d3:96:
                    52:cd:c5:5a:36:1d:b8:60:8e:d2:07:04:bd:1b:20:
                    1e:3f:01:86:49:4f:ef:85:f9:33:7a:32:5f:a0:43:
                    50:49:00:00:07:c2:78:26:0e:33:05:42:b3:01:56:
                    0d:7d:2e:87:ba:3a:88:48:8d:eb:64:15:80:53:c9:
                    fd:19:db:3e:8a:0e:e1:34:28:1e:6f:5b:bd:cd:da:
                    0b:13:1f:da:fc:43:4d:e5:48:c9:bf:09:bb:f4:2c:
                    9f:af:7c:a2:12:fa:78:c0:df:88:e7:52:98:9f:10:
                    eb:0a:35:b8:48:d7:e8:50:a5:9d:46:39:7c:1a:52:
                    75:94:8f:4c:23:95:58:ce:e2:52:ca:e0:1e:3b:58:
                    84:dd:f1:48:2c:7b:63:c6:36:d7:fd:5f:3e:dc:22:
                    51:e8:6f:e5:3a:1a:9e:0f:9f:45:da:5b:1a:c4:62:
                    47:4e:08:53:6f:4d:f3:26:5b:b7:bf:03:44:da:16:
                    cb:45:5e:b8:ff:67:0a:52:5f:66:3d:a3:15:2d:39:
                    42:13:b4:65:c1:50:0f:fc:be:82:a0:24:71:aa:ba:
                    da:e7:e3:da:55:bf:b3:6a:6f:5e:78:99:4d:cc:c6:
                    f0:32:9d:b5:b5:34:cd:16:29:a5:9e:29:7f:f4:33:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:1E:DD:33:45:84:7E:F2:A1:97:25:A4:18:95:4E:C2:06:9D:A3
            X509v3 Authority Key Identifier:
                keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:7a:11:6b:55:dc:30:5a:45:3a:b6:f5:7a:34:ad:72:69:db:
         cc:21:5a:02:99:81:55:d2:53:9d:3c:57:c6:26:f8:d4:2a:1b:
         06:de:13:28:91:e2:e0:91:22:04:ee:2a:b6:5a:88:ff:3c:1c:
         4a:25:e0:bd:91:ef:28:d9:8f:49:1e:71:fe:a4:75:55:ac:d7:
         8a:8a:fb:ff:45:47:ab:1d:01:f9:fd:c5:24:b8:cd:70:68:cf:
         05:55:46:30:4f:db:11:24:c0:fe:f4:ba:d0:44:bc:24:c5:6b:
         d7:24:7d:75:f4:7d:cb:e3:09:a7:b6:64:e9:f2:61:da:5f:45:
         13:35:ce:18:78:93:64:64:89:9d:2c:ab:76:96:27:77:fc:cd:
         e8:e7:07:e6:7d:1f:4f:01:ca:6d:f2:40:f1:e8:e9:fb:53:07:
         7d:96:66:df:72:ae:40:a7:69:11:97:3b:79:57:ba:50:23:3f:
         b5:64:e2:8e:e0:2e:77:20:bc:05:57:e3:35:78:be:90:8b:18:
         75:4f:1a:d3:59:d9:08:0c:3b:15:65:bb:b5:e6:97:11:2f:d5:
         09:6a:c3:3b:0b:ac:97:87:05:7d:d0:65:2e:c2:b1:53:eb:8d:
         fb:45:de:6b:98:5a:5c:b8:81:b2:1d:8e:c5:4e:d3:1c:71:0f:
         27:a7:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----