Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
File:                     ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json)
Hash identifier:          JZkTBqxX/fE6W/sLgg9vVgZ3hWPiq+pzPHdZ3+PLWRY=
Subject key identifier:   CF:41:24:CA:B5:AB:A4:B3:B0:41:FC:0D:6F:3E:9A:47:3D:C7:AC:5A
Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Certificate issuer:       /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Certificate serial:       01962E9973AF85082EF0B3A6666E2237131F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
Manifest number:          127F
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: rJEjpfLpaRthfudS52jBfIamqfNzwX+iCFdq8B5QepI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:af:85:08:2e:f0:b3:a6:66:6e:22:37:13:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=cf4124cab5aba4b3b041fc0d6f3e9a473dc7ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:29:4e:70:fb:05:f7:2d:8a:68:c5:0b:04:
                    ec:43:63:38:b9:ea:c3:b2:20:85:3d:88:71:6c:f1:
                    ef:04:c6:28:64:08:05:40:09:11:fa:e9:2b:91:1d:
                    5e:9b:47:b4:fc:4d:7f:4c:29:4a:4b:9f:9e:e6:c4:
                    85:65:d8:0b:4c:58:c2:70:9e:31:ee:ce:c0:6f:a2:
                    9a:56:c1:e6:e7:f8:73:fd:dd:e3:e9:5e:14:bc:67:
                    78:43:0b:9d:df:52:78:81:36:3f:42:8e:25:00:a0:
                    9c:07:03:b9:4f:9c:9f:f6:b2:8f:95:40:8b:b5:a8:
                    f5:85:ca:de:c0:1f:09:28:06:8e:18:15:66:86:89:
                    38:dc:21:b2:8c:19:5e:80:64:20:c7:fc:d7:05:eb:
                    7e:79:85:91:92:4a:59:1a:00:82:c6:b6:0b:f0:90:
                    ae:58:ed:aa:54:23:18:17:5a:41:fe:d8:13:4c:10:
                    a5:99:78:47:da:a1:90:8b:7a:aa:7a:6d:ef:8b:31:
                    49:33:cc:e3:92:ba:47:91:17:32:f8:e2:19:31:e7:
                    71:d4:c0:ce:b8:96:62:8f:c3:57:db:e2:49:68:55:
                    90:9b:15:22:1b:a5:6e:b2:c2:6b:50:6a:f2:f9:a2:
                    67:f1:bd:a5:3f:5a:91:c9:d2:0a:5e:c7:c3:73:95:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:41:24:CA:B5:AB:A4:B3:B0:41:FC:0D:6F:3E:9A:47:3D:C7:AC:5A
            X509v3 Authority Key Identifier:
                keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:52:69:49:f3:05:fc:5f:81:82:c9:81:1e:3c:e4:0b:ad:df:
         52:b6:e6:94:73:c7:e8:20:88:84:43:d8:e0:cd:07:de:a4:56:
         77:62:db:4a:14:c1:da:57:9e:49:70:8d:2c:94:a1:59:a5:b4:
         c5:37:ac:91:87:23:e2:31:f1:34:c9:71:67:b7:bd:b2:78:af:
         bc:93:46:98:a6:8f:1f:90:7b:ce:f0:02:4a:fa:d7:8d:da:1e:
         fe:ca:4f:42:a5:d8:09:3e:69:1b:c9:73:30:5e:81:70:ce:d1:
         14:69:44:24:98:20:c1:2b:17:ce:5e:bd:30:93:57:1f:21:98:
         53:5a:09:31:ed:43:00:52:ef:56:c1:61:f8:0a:6d:86:5e:f4:
         14:7e:67:a5:31:66:96:15:6c:fb:06:21:cc:c9:7f:80:a3:c4:
         2e:28:dc:e6:9f:b5:bc:ce:bf:6f:41:59:72:b5:3e:e6:b2:bd:
         5e:ca:ed:ad:be:2a:a8:7c:6f:43:a1:36:5a:5b:73:12:f8:49:
         ef:a9:89:ea:0c:70:69:f0:09:ca:7e:19:2c:36:e6:90:13:73:
         1d:e2:42:f3:9c:6e:39:ce:bb:0c:62:b7:02:a7:e5:21:39:94:
         bc:c5:e4:60:65:af:cd:b3:06:65:0f:43:bd:d5:1c:5f:2c:3f:
         56:58:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----