Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File:                     pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier:          gENUAd5F4fQd/TbNUZaTO+jsNhdRoqu6dfhp96fHR8g=
Subject key identifier:   A1:BF:9C:6F:C9:99:42:1F:EA:88:0D:94:B3:BA:C2:8F:83:4D:F6:F0
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer:       /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial:       01962E9864B51DA6FFC0719EB24B2DF7C6F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number:          07FF
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: QmxRlb4FiW6DpNj6EBVPikliRAWY1tGE5d4g58uiKqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:b5:1d:a6:ff:c0:71:9e:b2:4b:2d:f7:c6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=a1bf9c6fc999421fea880d94b3bac28f834df6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:f6:bd:90:9a:82:e1:19:99:7b:bd:ab:6f:
                    7e:5a:c8:55:d8:79:c2:3f:10:55:96:aa:0c:4b:2b:
                    33:e7:ce:b1:c6:9e:08:08:a0:45:e5:21:80:fc:ca:
                    29:1f:a6:cb:8e:75:82:2d:6d:99:06:81:a6:10:b1:
                    05:e6:33:77:fb:a0:b1:b7:25:63:51:4c:89:3b:e4:
                    05:15:db:81:f0:72:01:e3:89:f0:e2:c5:bb:a4:8d:
                    fa:5f:1d:83:48:82:07:e8:f2:fa:8e:1d:37:87:17:
                    26:9a:0e:18:f8:11:f5:2b:a7:6c:2b:57:31:ff:53:
                    b0:7d:e7:7d:a6:54:55:fd:a7:20:89:dc:ab:21:ca:
                    f5:d2:34:63:12:00:9b:b7:5e:e6:fa:e5:27:b9:9c:
                    65:88:8f:10:89:55:62:ca:24:fd:f0:df:1d:2b:b1:
                    e3:94:0d:13:d0:b2:b4:f8:af:1d:d4:13:92:e5:3f:
                    f3:61:b5:e8:a9:33:24:33:81:1b:42:a0:bf:3b:53:
                    d7:24:a1:a1:5f:9d:4f:f2:6d:c2:59:0d:1a:bb:5b:
                    db:67:91:54:dd:2f:37:66:bb:ed:a3:7e:7e:15:93:
                    47:6d:e7:be:7b:2e:56:13:fe:be:7d:81:5e:a8:8c:
                    69:ef:1b:5e:29:00:d8:15:f5:2d:39:2e:fb:34:77:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:9C:6F:C9:99:42:1F:EA:88:0D:94:B3:BA:C2:8F:83:4D:F6:F0
            X509v3 Authority Key Identifier:
                keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:db:bc:3d:d6:25:f0:f6:80:d1:de:8b:6e:fa:00:10:c9:
         30:a2:13:91:03:0e:0c:76:6b:20:7d:5d:9e:3b:cd:22:d1:6e:
         e1:77:93:83:ac:a4:77:77:67:29:f3:38:8e:83:7e:27:92:c7:
         f5:22:a3:35:47:79:38:a3:ef:00:1c:21:ef:af:cb:5f:dd:d6:
         b7:ff:76:00:7d:4c:ba:ef:f1:49:ba:38:a0:e0:0d:7a:a3:e6:
         50:ab:a6:5f:52:61:a8:4a:0a:24:05:dc:06:e7:59:a4:9f:c9:
         00:4f:51:c8:c8:2f:f9:4a:f4:a5:40:00:90:54:69:10:0e:53:
         cb:88:54:ee:3b:14:27:5d:33:51:10:df:cf:55:78:91:03:eb:
         6c:2c:2d:72:9b:60:68:f7:17:99:a4:73:44:d5:b0:56:71:c6:
         7e:b1:ec:eb:40:f0:94:e2:55:b4:c7:21:ae:e4:a3:bb:bc:f2:
         cb:b3:4f:fd:f0:4a:50:f2:e7:ca:61:48:0d:02:bc:08:1c:b9:
         e3:03:56:1b:11:cd:a1:eb:ea:bc:f5:6a:f6:a1:23:04:35:64:
         dc:93:b1:df:d7:d4:7c:2e:58:8c:8c:15:26:04:6d:1d:f2:9f:
         11:97:b2:9c:d9:57:49:45:d0:30:6f:a0:6d:ba:ad:2f:21:b5:
         28:6e:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----