Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File:                     P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier:          KWJDzdRXbLdf0y1HBB0Z3/HUX73LU/zLvKdCWzgnGQI=
Subject key identifier:   C3:E1:D7:CD:C1:03:31:B5:B8:1F:82:4C:CD:50:BE:22:BF:6A:45:73
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer:       /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial:       01962DF44B5435BC98264E5AB443E177A6DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number:          08D5
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: Df9T1M9/3N88ac9lWEHMsnoS0TmA+rf5DIT8zt2vD/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:54:35:bc:98:26:4e:5a:b4:43:e1:77:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=c3e1d7cdc10331b5b81f824ccd50be22bf6a4573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:9c:9a:51:c8:9d:de:86:68:ab:94:aa:1e:
                    0e:6c:f4:08:93:d2:f4:6b:36:3b:13:09:ae:89:a6:
                    1a:e3:5c:e4:d0:fb:dd:69:83:55:5c:05:de:e7:be:
                    3b:eb:4d:db:86:62:c0:31:67:0d:23:e3:21:bb:f4:
                    8a:8f:4c:e7:7e:a0:0c:3e:79:6f:c9:ce:b4:1b:bb:
                    59:d0:ee:d1:08:bd:41:d1:f0:e4:25:ce:d2:d1:55:
                    5d:e1:58:46:ce:61:cd:7b:9f:38:73:b0:99:d7:1a:
                    cb:97:96:79:ad:81:89:40:cb:0b:3a:63:9c:9c:35:
                    56:33:03:50:ad:3c:95:8a:fa:92:b6:ce:3d:20:d5:
                    27:17:02:f4:f8:b0:91:14:85:70:03:44:94:4a:1c:
                    09:96:d3:d9:22:7f:ee:95:5b:77:d1:f2:af:d8:a6:
                    77:a4:04:93:6c:97:43:1e:4a:3b:cf:b1:c8:7c:59:
                    b7:97:ae:f4:35:9f:25:57:84:57:5f:a7:09:87:23:
                    c1:27:29:a9:a6:42:7d:86:60:65:2f:d7:d3:81:59:
                    13:8e:e3:89:52:58:12:b2:a0:32:58:77:4c:50:b9:
                    bb:2c:b7:27:75:7d:24:10:08:d0:a2:00:d4:1c:ec:
                    94:df:e4:31:28:aa:e5:a4:1f:c0:75:1d:c4:36:c1:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:D7:CD:C1:03:31:B5:B8:1F:82:4C:CD:50:BE:22:BF:6A:45:73
            X509v3 Authority Key Identifier:
                keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:10:6e:ce:3f:ee:97:c2:67:8f:b2:96:ec:a4:83:4b:c1:94:
         be:a0:ed:7c:c1:d8:c0:67:e1:f3:c1:c8:a6:f9:fa:d2:13:f7:
         38:c2:4f:57:3e:0e:4a:39:54:ee:fb:53:cc:cf:e8:8d:28:54:
         82:15:a3:42:16:e1:b2:36:76:d3:3c:d5:17:c5:0b:71:12:fa:
         d8:e5:4f:f8:2f:9b:fb:36:43:70:61:00:97:91:0d:34:cc:e9:
         78:4f:99:09:50:a5:34:12:64:4f:e6:a3:47:c7:2b:12:57:9a:
         ba:a8:94:fa:8a:97:11:92:5d:7b:fd:15:90:55:ed:a2:18:bd:
         e8:6f:47:0c:9b:e2:55:f4:36:2d:c9:bc:c4:c6:1c:ea:08:ad:
         2d:18:30:bb:0c:8e:4b:c5:95:7e:6d:a5:bf:6a:32:5b:00:ce:
         89:1b:05:82:9c:35:15:34:db:c8:74:71:fe:ba:1c:42:0f:1c:
         bb:ea:7e:6c:f9:68:6b:00:8b:c5:15:3d:54:8d:f2:5f:61:b3:
         1d:cb:c3:e4:7e:9f:ff:97:cf:c6:d3:31:5e:d7:76:6b:34:01:
         09:9c:45:8d:2f:9a:dc:f9:f6:be:a5:a8:24:ff:7c:14:ec:6f:
         11:7e:ca:af:81:f6:5f:39:64:95:98:1d:90:b9:73:dd:50:32:
         7d:09:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----