Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File:                     1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier:          7g5Coim8UWXRKWpi3nCj0HbLXyYWsR4LxVrd32d83Tk=
Subject key identifier:   19:0B:01:99:07:04:E1:25:78:04:F3:47:3E:7E:65:45:C3:2D:38:27
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer:       /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial:       0195E0B46E3678888715AE714BF1310BB632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number:          14BD
Signing time:             Sat 29 Mar 2025 07:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:15 +0000
Files and hashes:         1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: DbyeMaX0YCZGfbk0OLMvjxs7s3XIN5ItZjhr9++QyOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:6e:36:78:88:87:15:ae:71:4b:f1:31:0b:b6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
        Validity
            Not Before: Mar 29 07:01:15 2025 GMT
            Not After : Mar 30 07:01:15 2025 GMT
        Subject: CN=190b01990704e1257804f3473e7e6545c32d3827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:9f:93:ae:4f:41:7d:97:22:bc:ca:44:64:
                    40:78:9d:7a:c2:47:6f:c0:84:f1:3e:1b:e7:36:e7:
                    fc:d2:c7:0e:13:3f:a4:0c:3d:d0:7a:84:d0:e7:79:
                    8f:9f:97:5f:bd:31:36:8e:ca:79:27:d6:19:75:0b:
                    8d:b3:be:fc:2e:c4:fd:0a:46:aa:45:23:bd:f3:f6:
                    0b:1d:73:80:e7:5c:a6:ad:32:c5:e8:7a:cb:07:3f:
                    b5:f0:95:35:62:e8:d9:e5:63:e0:21:63:d6:0d:74:
                    99:b4:52:18:fc:9a:0e:77:bb:28:b9:e6:d3:6f:e9:
                    5f:28:d1:ed:57:9d:33:a0:e6:67:0d:a4:bc:59:cb:
                    01:55:dd:2f:98:56:53:75:9f:b1:0c:fa:82:05:58:
                    a9:a2:64:f3:19:2b:a1:bc:29:02:7b:be:85:db:a4:
                    f4:7b:b1:57:dd:15:0c:84:82:7c:79:77:ee:9b:8c:
                    02:22:70:79:0e:ae:80:c8:cd:b4:22:40:82:7d:8b:
                    6b:7c:a0:af:c4:ba:38:fa:b6:fe:dd:72:f0:e0:96:
                    a0:3e:74:16:58:f0:67:ab:cf:a9:50:80:6f:53:31:
                    60:91:ca:f1:66:22:05:ca:4b:af:c5:38:84:d0:68:
                    6c:48:eb:1a:b1:aa:7f:da:5c:f1:8e:df:c0:1d:41:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:01:99:07:04:E1:25:78:04:F3:47:3E:7E:65:45:C3:2D:38:27
            X509v3 Authority Key Identifier:
                keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:4f:e3:95:1e:08:da:8c:7f:6e:97:35:1f:34:3e:ce:45:
         cb:05:81:38:ee:e6:1f:5f:08:65:81:1b:e5:4e:18:5b:3c:0e:
         32:22:93:fd:4f:fc:80:81:b4:ea:7c:4c:0a:2b:9f:43:bc:22:
         f8:dd:3b:49:3f:e8:9f:90:6a:21:fe:c1:d9:2f:b5:ba:82:87:
         95:d0:c5:22:93:db:f3:93:fb:15:d6:14:15:45:2c:e2:b0:ec:
         17:0f:e8:99:6e:e9:6d:f4:47:76:a0:d2:f9:6d:b1:23:3e:cc:
         1c:b9:00:98:62:2d:6b:e3:e0:a4:86:6f:26:50:77:4b:78:95:
         39:31:30:32:1f:d1:4c:fd:19:c5:de:0e:72:21:90:b6:69:a6:
         d5:91:29:56:8d:67:f8:5e:70:d2:e4:65:6b:e8:ee:4c:f4:c2:
         a3:af:cb:9f:54:00:a9:f7:48:4e:62:3f:8b:d0:2f:6f:ea:5d:
         cb:d5:c6:4d:27:5d:b5:81:82:71:ed:c7:21:ea:05:37:78:37:
         eb:41:58:99:a7:f5:9f:a3:6d:4d:d8:a9:ee:e8:5f:0b:b2:72:
         f7:b2:9e:4e:0b:22:21:c6:97:cf:ac:bf:b1:4c:a1:99:de:07:
         46:5b:b4:19:5c:73:21:06:56:28:f2:3c:c2:41:ad:4b:e2:9a:
         ef:93:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----