Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File:                     tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier:          nqXO4pPg5zeJoTmM3VLmF23kP9Ymt0nAZXHURlCOCnU=
Subject key identifier:   A9:F8:25:91:EA:74:AE:39:66:51:AE:08:9D:57:3D:47:91:7C:C5:71
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer:       /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial:       01962E99AF0713D83836555279026A9A3C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number:          07B0
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: DgG3KpAttPhkF/IpwmryUOiYBGCxdETi/0vN35uqjng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:af:07:13:d8:38:36:55:52:79:02:6a:9a:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=a9f82591ea74ae396651ae089d573d47917cc571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:1c:c7:03:37:e8:59:e4:b5:2c:40:33:f9:
                    7d:e7:91:e4:36:cb:e3:c9:73:eb:ce:aa:02:a3:33:
                    75:66:d2:d2:67:ec:86:e6:e7:a0:a2:e0:93:5f:ff:
                    dd:2d:72:62:db:c9:61:7a:76:47:91:b8:3d:e3:d2:
                    25:bd:29:35:a1:aa:40:72:e1:7d:eb:81:e9:b6:80:
                    2d:7a:f7:be:ca:3b:6e:d3:fa:a5:58:41:b3:06:ca:
                    66:9e:88:4f:80:ec:ff:2b:4f:4e:f6:0d:47:2a:74:
                    4d:54:94:de:0c:f9:95:92:7f:f4:c8:11:6f:ba:03:
                    c7:fe:b0:4b:84:9f:6c:6f:ff:9f:7c:cb:4a:7a:83:
                    cf:68:2d:11:ee:9b:73:05:3f:9a:f9:e0:94:24:e3:
                    1b:92:55:6b:f6:56:d3:ab:58:6a:b4:31:88:bb:c2:
                    9b:04:98:a4:be:76:a4:67:f9:60:d3:69:ce:63:74:
                    5f:83:7e:a2:47:3a:1d:47:20:34:87:83:47:cc:18:
                    a3:1a:7a:46:58:8b:bb:66:cd:0b:ce:4c:82:aa:a9:
                    2b:9b:a4:31:78:9c:ba:3f:5e:58:29:db:b4:d3:e7:
                    b9:f3:5c:b1:dc:f9:f6:5e:2e:31:0d:d5:83:18:e7:
                    05:2a:6a:b3:48:c4:69:72:9b:9b:9f:a9:ef:e3:ed:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:25:91:EA:74:AE:39:66:51:AE:08:9D:57:3D:47:91:7C:C5:71
            X509v3 Authority Key Identifier:
                keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:04:8c:a2:77:95:5a:f6:0f:d1:87:d1:1d:38:bf:ae:e8:ce:
         50:55:f0:58:0e:17:c2:00:f1:0d:9f:1b:86:ae:19:30:19:81:
         3a:e3:0b:82:56:ec:c6:b4:68:d6:d3:27:61:49:ac:cc:12:ca:
         9f:b0:ec:28:e0:0a:5e:c0:7b:a5:2a:6e:7e:2d:34:22:d0:2c:
         de:fa:2f:73:66:bc:9a:dd:f0:3b:89:cd:2c:fc:98:50:6e:ac:
         5f:18:91:ac:19:e0:47:04:91:92:03:b8:f9:91:d6:af:0b:04:
         92:e7:4c:21:7f:3b:64:04:8d:e1:df:d9:4c:da:96:04:e9:b1:
         d9:a0:98:de:da:91:12:59:39:77:b2:6d:83:cd:1e:8f:ed:c1:
         68:33:a0:34:79:0c:18:ff:18:24:66:74:eb:84:13:8c:af:62:
         ac:2e:db:0f:00:d3:dd:1d:57:12:ef:0f:7f:06:6a:fd:d0:d9:
         27:67:78:f1:fb:9c:cd:5e:b3:1d:6d:ca:6b:3c:9b:e0:b4:fb:
         d6:04:1e:f0:9d:bb:cc:78:0b:a7:ad:d3:56:25:c9:77:79:3a:
         0f:c3:80:a0:9c:ad:38:73:40:22:8a:69:2d:74:5b:30:14:2b:
         57:66:47:91:88:dc:2a:d6:40:07:23:4b:e9:62:c0:d6:1d:ee:
         66:b4:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----