Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File:                     IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier:          Arj/28G69nyTDpjOzXDrbI1Dsmv0IRwkXdloOpmAa20=
Subject key identifier:   63:6D:CE:2F:6A:6F:4D:12:B4:DB:12:09:9F:F5:12:A6:3D:F7:74:E4
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer:       /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial:       01962ECF9A992F4D44E3346DE367ACF12D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number:          9D
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: s8urCpNDd09mQ+8Zxk4itfeElBbOw/wsKzIHVEvzD6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:99:2f:4d:44:e3:34:6d:e3:67:ac:f1:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=636dce2f6a6f4d12b4db12099ff512a63df774e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:cb:0c:5e:b9:c0:6e:81:b9:35:86:15:d8:
                    2e:c1:dd:2c:07:94:0b:62:62:37:5d:1a:69:29:86:
                    43:27:f7:8a:13:89:6e:b5:b2:e6:82:b2:ed:65:bb:
                    01:dc:13:7d:30:2e:ca:0c:1a:b2:cb:3b:10:03:70:
                    02:48:56:be:cb:bc:e2:16:98:d1:af:20:ed:7f:1a:
                    be:46:87:e5:05:25:ca:f2:fd:99:9e:df:28:19:2b:
                    89:99:6f:48:14:e9:e4:48:93:a7:17:41:e1:24:ea:
                    cc:8b:0f:42:0d:a0:af:44:cd:fd:ac:d8:4a:ea:90:
                    c7:22:96:a9:fa:83:e1:ee:8d:71:9f:85:bf:d0:8a:
                    cf:6d:9f:b6:0a:f1:50:d0:9a:c6:bd:25:89:01:ca:
                    b6:41:7e:d6:6c:e8:eb:f7:86:16:5b:de:64:32:0b:
                    48:16:ef:19:9a:e0:77:43:6e:31:54:de:7a:e8:f6:
                    05:d5:33:df:e0:21:4e:90:9b:ac:9a:c6:13:86:97:
                    04:0b:b0:7e:a9:c6:be:d6:e9:79:81:e6:36:aa:59:
                    d7:40:5d:c9:ab:f5:fe:ba:24:2e:c9:2f:96:dc:8d:
                    d8:68:1a:2c:43:26:c6:4b:9b:ca:9f:ef:93:94:b0:
                    ba:73:5c:36:f6:d2:6c:fb:2f:45:70:d7:84:0d:7f:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:CE:2F:6A:6F:4D:12:B4:DB:12:09:9F:F5:12:A6:3D:F7:74:E4
            X509v3 Authority Key Identifier:
                keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:0f:d7:b3:53:1e:5b:2e:3b:67:3d:36:ec:87:7a:67:f9:
         10:ef:4c:63:70:10:6b:2d:90:d0:ff:71:92:78:34:2b:57:a3:
         77:00:d8:f9:8f:b6:67:f6:12:e9:04:5c:a0:cd:e6:c1:4e:eb:
         8c:44:ee:59:71:00:3e:5f:f0:60:92:33:3f:0c:45:6a:af:92:
         7d:ae:e8:7b:cf:4d:7a:75:af:1b:af:7f:e4:c3:80:67:49:f8:
         d2:80:bf:e0:20:31:98:32:f4:1a:0a:30:11:be:01:d3:a8:3e:
         a0:f2:1b:eb:b4:5a:ef:1d:d7:46:bc:7d:42:3d:5e:11:fb:10:
         99:9a:5c:9b:95:6e:36:65:0f:64:b9:4c:de:80:fa:03:48:50:
         96:47:be:5c:5c:97:c9:d6:4f:33:16:ec:89:35:b4:a3:5e:ca:
         74:1c:86:fe:b6:31:f1:96:83:d7:06:d7:20:be:ea:bd:bd:c8:
         cf:a0:81:f2:1f:23:52:be:82:4f:95:00:a6:49:79:33:de:c3:
         e8:ec:81:18:bd:ce:b1:43:8b:18:d5:f1:8f:ec:96:05:3e:20:
         e8:7e:0d:99:9c:ab:07:49:20:fe:ad:38:d3:af:68:69:69:d3:
         ea:78:5f:68:55:52:30:71:f9:d8:5a:63:d8:7d:77:07:ea:de:
         4d:9c:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----