Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File:                     TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier:          6IsUWLkyxzp+n3BgQWyhOECwD+3yUcgd3nxZjoPmfz8=
Subject key identifier:   88:C7:03:24:58:C9:92:06:26:D1:38:51:BB:6C:F1:58:95:BB:43:18
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer:       /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial:       01962F3D4845BCF862A30DC688EC3CC5BB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number:          05DB
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: U7Ll1Fe27zusqDO5Ma2VAym2djyNbx34WuJdo9Cz1MI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:48:45:bc:f8:62:a3:0d:c6:88:ec:3c:c5:bb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=88c7032458c9920626d13851bb6cf15895bb4318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:c8:6c:ac:4b:dd:2c:bf:87:b4:d4:ff:2a:
                    d0:04:a8:47:a4:fe:80:7a:be:23:10:62:3c:04:48:
                    b6:83:bf:d1:f4:68:5c:cd:af:0e:d1:aa:33:71:aa:
                    d6:15:17:91:1b:a3:65:79:da:63:a4:a6:d9:90:ab:
                    4c:d4:c2:a8:db:c9:05:77:9c:ba:aa:f7:c9:b6:db:
                    af:ec:4c:0e:ab:79:55:86:de:e9:33:c9:50:d7:43:
                    e3:ff:c6:d6:7d:15:63:5c:4c:b0:6b:d5:8b:e5:24:
                    ec:52:a8:3b:d1:9d:04:27:9b:ab:5a:18:d6:8f:bb:
                    32:7b:ef:21:05:b3:7e:9a:73:c1:42:9f:5f:21:73:
                    40:92:63:36:19:96:0b:29:61:59:fa:3f:12:2e:93:
                    16:4a:e2:02:38:ff:d9:8c:49:40:65:02:39:1b:8e:
                    3e:6d:de:de:46:2f:b4:90:77:8b:18:13:2f:c1:2b:
                    c0:d3:0d:d2:a7:2b:53:c2:12:14:1f:fa:b8:f4:7c:
                    87:72:2f:b7:11:6b:68:18:ec:db:c7:d2:c0:8f:be:
                    34:2c:bc:aa:a2:fa:2d:72:49:8a:de:8f:ee:3a:40:
                    46:04:1c:6f:f9:48:6a:c3:76:e9:31:ea:31:65:f2:
                    bb:20:55:41:fb:fe:45:eb:52:98:3a:fa:e6:25:cd:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:03:24:58:C9:92:06:26:D1:38:51:BB:6C:F1:58:95:BB:43:18
            X509v3 Authority Key Identifier:
                keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:19:17:57:62:95:3f:0d:34:64:26:4d:51:89:7e:e4:c2:
         3a:0f:45:e6:0c:74:4f:a2:1d:cf:be:a2:e6:9d:9c:ab:1a:b2:
         b4:db:7a:49:12:20:f2:69:3b:3b:f6:d1:a9:dc:e1:73:fe:86:
         a2:4d:fe:5c:1d:60:df:8b:11:e3:20:c7:17:11:9e:5b:1c:3d:
         30:7c:5a:af:cb:ce:26:2b:e2:34:32:16:44:df:f1:48:46:c9:
         e9:bc:83:99:19:9e:44:e4:ac:c7:e3:7a:81:0e:09:c2:97:fd:
         02:a3:54:31:c2:12:c2:b5:3e:9c:55:dc:f8:b9:a7:cb:87:58:
         b0:b3:e0:ef:17:2b:22:39:03:ad:35:ef:11:2e:4e:f1:07:3e:
         1c:2d:42:5d:27:22:9e:14:ee:d8:f6:27:5f:b8:6c:4a:14:f6:
         9d:62:0e:34:85:03:07:01:ec:55:64:1c:f0:b3:ca:37:fe:0b:
         cc:e8:f7:c9:ed:40:e1:61:02:ef:91:52:6a:e6:99:76:84:73:
         81:ee:b8:11:4e:50:48:eb:11:2a:46:bb:cd:4b:8b:f9:7d:2d:
         71:59:22:7c:3a:ea:c2:3a:99:35:8f:57:f2:2e:ac:9d:4c:a2:
         ae:5f:d5:1c:99:f7:7d:65:bc:bc:d9:ce:8f:13:0b:d3:4a:f3:
         42:7c:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----