Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File:                     X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier:          rzDpbtReYbxa0oEwpKuHI0v+BCneRcbl5abQh05Pub4=
Subject key identifier:   84:2D:77:B3:C2:A1:DB:B6:A8:6F:7A:6C:75:01:AB:28:41:62:66:2B
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer:       /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial:       01962E993FD7115D36427A4F0E6D06E14A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: q7Yp6mXKZ2u89lucXPMxUMMnqY/h6apDC7yMIM3aEok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:d7:11:5d:36:42:7a:4f:0e:6d:06:e1:4a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=842d77b3c2a1dbb6a86f7a6c7501ab284162662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:49:72:74:a8:2f:89:8a:01:5a:5e:dd:51:
                    2c:6a:cf:b3:20:b8:de:49:29:43:12:ba:7c:98:99:
                    23:d3:e7:16:4f:9c:5b:a5:a8:99:53:e4:16:53:eb:
                    5b:4c:94:2b:1a:fd:fc:09:71:69:90:fd:79:23:0d:
                    5e:24:8e:92:cf:de:9e:80:d3:63:3c:2e:da:fb:96:
                    c3:c8:2b:9c:8b:1c:93:1c:bf:fb:ed:00:88:9e:71:
                    9e:00:28:e3:b0:c1:ca:9f:b0:16:a1:f0:1e:99:e6:
                    e8:eb:89:e9:38:b9:d2:61:27:3b:59:6f:23:54:20:
                    d2:fc:27:0d:a6:c0:c2:ae:05:86:fc:a5:71:22:e1:
                    4c:14:17:92:a1:bc:78:cb:fe:c9:58:17:25:0a:b7:
                    bc:ab:02:cb:eb:17:24:fc:b5:db:75:ab:d3:36:2e:
                    fe:3a:70:e5:46:e0:57:3f:45:0b:81:09:80:d6:46:
                    a8:a6:06:e6:ee:dd:6f:dd:a8:bb:ee:ae:28:41:80:
                    78:46:38:b4:17:5f:d5:10:4c:68:fe:42:70:76:97:
                    2e:cb:e9:45:1d:ed:2b:d0:7f:9a:65:d0:8d:de:8d:
                    cf:89:d7:89:7a:32:69:64:aa:8f:4c:55:19:a6:a8:
                    c2:18:54:b8:9f:f9:69:a8:db:c1:df:23:39:32:c1:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2D:77:B3:C2:A1:DB:B6:A8:6F:7A:6C:75:01:AB:28:41:62:66:2B
            X509v3 Authority Key Identifier:
                keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:ae:64:a0:70:4c:7d:12:92:7e:cb:40:6c:41:a0:ad:9b:
         34:cd:da:09:40:3b:87:2c:ee:18:f0:67:ec:40:26:7b:c3:b3:
         8e:4f:3d:f6:04:02:92:e2:2e:f1:49:7d:35:08:85:c1:cb:08:
         2e:38:a1:69:0f:6a:bb:3d:64:6c:38:17:44:ca:b8:c4:8e:ea:
         66:3c:86:ce:a2:7d:25:c5:36:b1:d4:07:03:d6:16:b8:95:99:
         0e:c1:36:0e:01:08:cf:cf:22:1c:4a:25:e2:73:14:f5:1d:cf:
         a7:0a:e4:de:72:88:83:da:f8:e9:fb:07:da:ad:4f:60:11:5a:
         bd:92:6e:31:6c:16:2f:b0:f5:f7:38:88:76:fc:36:91:fa:c5:
         13:e6:97:9a:25:3e:48:d3:19:1f:ef:98:a7:91:16:07:2b:93:
         d1:03:63:fc:14:b4:d7:db:e3:f2:15:70:76:93:06:90:03:74:
         5b:2d:74:e3:96:47:8c:3b:7f:a2:e9:0e:44:49:eb:b6:35:aa:
         9e:3c:14:09:df:5a:2b:0e:6c:6f:02:9b:23:09:81:97:44:71:
         7d:0e:26:d2:fe:c3:86:57:59:46:c7:c9:5e:c0:f0:ff:69:e2:
         60:ad:e3:d4:f8:a7:aa:c1:de:6a:8b:27:ef:f7:ea:14:21:5e:
         31:59:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----