Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File:                     U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier:          9HC0HCckxslfsPbqpDQMgx6+mXiY5SvMwuVT+KJrvTY=
Subject key identifier:   AD:8A:54:B4:96:BD:45:02:B7:7E:1E:0A:D7:3F:0A:37:DC:74:89:C9
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer:       /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial:       01962E6177A29C40129D012A2A05E81FB356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number:          0B68
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: UwvB1XlLuQSqlb+3gt5yCZmvOPNdYScD5Td0WgBXOjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:a2:9c:40:12:9d:01:2a:2a:05:e8:1f:b3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=ad8a54b496bd4502b77e1e0ad73f0a37dc7489c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:0c:c5:69:d1:c4:7c:e7:6d:db:00:35:a8:
                    8c:f6:7e:fe:bc:93:cf:77:13:c9:4f:98:d7:aa:6f:
                    61:eb:d7:e6:16:fd:c6:fc:cd:d2:ea:c5:b7:03:a3:
                    af:36:71:44:ce:90:7a:fd:4a:57:36:af:24:1a:2b:
                    d8:26:a7:30:7e:1a:02:c6:e0:64:90:f1:49:a1:8f:
                    1c:f9:97:eb:56:60:e9:82:97:91:f8:04:5e:c0:b3:
                    1e:10:10:52:31:d4:b4:18:dc:79:71:c5:e9:02:6e:
                    9b:0e:f1:a4:1b:32:b8:f3:57:03:0a:22:d5:35:f2:
                    04:8e:6b:3e:8f:17:d7:49:ed:f8:ba:a6:81:81:02:
                    e2:bf:01:d7:64:b0:ab:83:ae:20:96:53:f0:d5:1d:
                    92:76:2b:35:45:0f:88:a6:8d:68:21:20:2d:38:d9:
                    84:fc:1e:ed:2d:a1:f8:14:3d:36:6e:97:4a:87:e1:
                    96:9e:17:3f:36:6f:65:04:6e:5e:06:66:c8:70:b3:
                    ce:7f:51:88:ea:04:1b:6c:76:c8:9e:e7:cf:be:6e:
                    fc:f9:40:4c:7a:49:f2:2a:22:1e:4c:70:b4:8d:6e:
                    73:2d:00:b0:17:11:f6:0a:84:ec:cd:21:01:6a:28:
                    f6:48:a3:09:ea:72:5d:43:84:79:67:be:97:37:d6:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8A:54:B4:96:BD:45:02:B7:7E:1E:0A:D7:3F:0A:37:DC:74:89:C9
            X509v3 Authority Key Identifier:
                keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:d8:27:06:a2:93:5e:52:50:c4:70:ce:be:c4:c6:fe:c0:
         d3:7a:56:b2:7a:c9:e7:be:31:5d:35:9e:67:d3:5c:76:b9:0d:
         a1:3b:15:ab:a2:61:67:e3:d2:c6:1e:03:8e:aa:22:12:a7:62:
         58:03:1e:c6:8e:c8:ac:1e:10:70:fe:fa:34:9b:ac:0e:46:39:
         d4:e1:e7:58:50:36:49:aa:1d:8b:69:d3:6d:f1:de:0f:27:d1:
         ec:bc:fd:39:3b:b4:cd:e9:69:35:66:44:49:56:98:0f:d8:f6:
         d5:a5:e6:b7:15:0a:40:1a:9e:c7:11:ab:76:56:a7:68:7d:72:
         a8:20:0e:5c:b8:33:e6:7b:af:f1:f9:2f:15:b7:a4:e2:2b:1f:
         63:cf:06:66:fb:dc:90:bd:01:0d:c1:6e:2f:3d:f8:c9:2c:26:
         54:38:8d:3e:48:64:b3:c8:a6:90:e9:66:f0:4a:68:c1:0d:99:
         bc:34:5a:8a:bb:ba:e4:c3:f3:06:ac:24:e9:66:f0:0a:78:18:
         de:ab:bf:03:b6:de:3e:0d:96:1b:9e:df:06:7e:85:94:f5:2c:
         5b:1f:89:eb:21:d3:68:c1:70:6b:3c:b5:40:f1:89:a9:a2:03:
         83:11:3d:4b:22:48:0e:92:35:5e:39:d8:83:cf:cc:07:67:65:
         70:97:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----