Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File:                     1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier:          XwHqU7F1O42pO5fXXaD0oDjelvlFZa0cx0fRxFuxz+0=
Subject key identifier:   33:5F:72:78:E7:44:23:68:8C:D2:7C:5F:E3:16:8F:3D:37:F5:F8:5D
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer:       /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial:       01962DF41A8EA6D4C90DCC9CFCB056FADCDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number:          10CE
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: ihNHMvh8NSaeVYdTnBz1CFRb4vuC9gcDGMOigv446Yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:8e:a6:d4:c9:0d:cc:9c:fc:b0:56:fa:dc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=335f7278e74423688cd27c5fe3168f3d37f5f85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:03:8a:29:97:15:ce:90:84:2c:4a:d9:40:
                    1f:84:25:97:05:d8:02:e5:d7:6f:d3:42:56:c6:ae:
                    f7:61:32:84:f1:38:ec:38:19:94:ea:ce:57:70:7e:
                    af:3d:a1:a9:37:77:c1:a8:a9:30:dc:60:fe:36:52:
                    b2:c0:61:24:68:dc:5a:66:89:7a:ea:81:d8:14:24:
                    8e:1e:34:bc:35:30:1c:b0:51:58:7f:79:e4:63:26:
                    89:99:5e:8c:c5:ec:39:79:c3:de:4d:89:78:02:7d:
                    32:25:ab:37:d6:5e:af:ee:45:72:2d:de:98:ba:2a:
                    d2:43:10:44:a7:55:4f:8e:94:8f:e4:ca:d1:28:74:
                    ed:3a:06:52:cf:8c:75:c4:bc:bd:05:a6:2a:f6:1e:
                    b4:3c:a0:3c:48:fe:a1:06:e6:34:7d:48:6c:34:10:
                    9d:2e:e1:a5:46:28:40:d4:76:82:9d:3f:41:3a:9f:
                    8b:0d:5c:98:c3:b2:ae:de:42:29:f0:8c:f5:28:a3:
                    b5:41:20:d0:c1:83:a1:5e:c6:45:85:9c:07:1c:b8:
                    28:c2:be:94:db:b2:50:39:38:09:23:7a:c3:b0:5a:
                    5e:65:ad:1e:03:b8:5b:4e:fa:0c:74:4b:62:8a:ff:
                    48:a7:41:8a:69:ed:e9:2b:c1:35:1a:f8:a8:9e:26:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:72:78:E7:44:23:68:8C:D2:7C:5F:E3:16:8F:3D:37:F5:F8:5D
            X509v3 Authority Key Identifier:
                keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:47:ac:da:ad:73:44:ce:e5:50:f8:8c:a5:02:52:28:2a:
         76:76:45:56:1e:2e:df:e2:6e:f9:ff:e5:7d:f8:7d:a2:b4:e2:
         b1:7b:3d:5c:ac:65:aa:0c:75:67:c0:46:18:73:c6:46:f5:e5:
         9d:9e:71:41:6e:e7:5b:64:69:ee:e3:dc:15:49:de:0d:a0:d2:
         9d:d7:7c:d2:f9:a3:df:9f:75:a6:7c:88:dd:b8:a7:8b:d8:cb:
         e8:ea:7f:a8:a6:91:e6:b6:ea:69:8b:8b:0f:52:95:08:0d:4c:
         01:6f:a9:f2:4d:f0:78:9d:6d:c7:42:ba:dc:d6:5a:c4:90:5b:
         99:09:df:a6:d4:2c:81:31:7b:8e:e6:28:8e:00:ae:7d:09:c5:
         ca:2c:fb:d7:cc:1e:89:65:89:5d:66:61:ff:b5:9d:14:88:c1:
         6c:c6:29:d2:16:36:bf:83:fb:66:77:ad:9e:a2:b9:33:ad:76:
         77:6f:ad:04:20:63:a7:c1:cd:a9:29:ac:b9:8c:a5:1f:d4:a5:
         57:9f:c0:1e:34:99:6a:b6:ba:b9:2c:b2:b2:b1:9e:e9:8d:63:
         d0:8c:3a:d2:e7:f2:0d:17:be:9b:63:bc:96:10:15:02:fc:f8:
         50:ef:39:b8:6f:ac:9c:de:33:a3:2c:73:e5:2e:49:93:24:84:
         93:e2:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----