Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
File:                     U3XfISulmO4KW_aAsh9QxPx9aOE.mft (raw, json)
Hash identifier:          GTde7gjLtJ9WQLIrSMP/lnamJpIN++wwS0NFBH/vgto=
Subject key identifier:   8A:BA:82:7E:DC:19:87:7E:A7:8C:FC:91:0E:30:8E:D6:17:CF:03:F8
Authority key identifier: 53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
Certificate issuer:       /CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Certificate serial:       01962F06430D80E22B10EF3EE5B8FDE867BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
Manifest number:          0C84
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: U3XfISulmO4KW_aAsh9QxPx9aOE.crl (hash: Y6qjlLe3wfqiqL6nVQy5xQg+HuMU0oiCuP7GG1hwYqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:43:0d:80:e2:2b:10:ef:3e:e5:b8:fd:e8:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=8aba827edc19877ea78cfc910e308ed617cf03f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:70:de:ff:8c:8d:9e:8a:80:05:0e:93:ff:
                    5a:2c:57:ab:b2:ed:b6:08:d8:4c:1b:fa:09:13:fe:
                    2a:d2:cc:8a:dc:dc:c7:08:f9:d7:29:26:20:a4:9c:
                    8a:ed:ab:7c:66:d3:85:53:d3:c1:22:6c:e2:2d:d0:
                    b6:df:5a:88:ca:83:d0:16:7e:b2:c3:e3:71:01:e0:
                    23:3b:3a:0b:40:04:6f:19:d0:47:61:c1:d4:2f:4a:
                    f0:d3:8c:da:b2:c9:72:da:13:88:ce:85:37:14:5e:
                    7a:78:50:39:64:b8:85:e8:fc:fd:fc:0f:82:03:74:
                    0a:5f:a3:8f:3c:c0:1e:ad:33:54:5f:6e:ca:73:0d:
                    fd:fd:ae:19:00:7f:4a:89:d4:4b:56:b4:d4:41:35:
                    3a:d7:87:4c:8a:e1:93:e0:18:cd:01:93:7d:7a:ac:
                    e7:f7:58:dd:32:c9:81:a0:27:7c:1c:a3:c0:6d:bf:
                    21:c1:ca:8a:f8:c3:b5:06:f9:1d:56:df:59:42:77:
                    1e:02:4d:1c:ae:85:2c:bb:0b:d2:8f:17:28:98:b8:
                    06:2c:08:03:44:61:05:47:97:74:c8:d3:05:3a:a2:
                    eb:2b:8f:92:98:16:2c:4e:96:12:4d:c9:19:cf:25:
                    2b:d7:ee:a5:e3:44:d2:85:e4:a3:47:2a:80:34:15:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BA:82:7E:DC:19:87:7E:A7:8C:FC:91:0E:30:8E:D6:17:CF:03:F8
            X509v3 Authority Key Identifier:
                keyid:53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:61:1e:38:cb:37:97:ea:5b:25:de:69:53:4b:0f:53:46:7b:
         c5:3e:76:f2:35:c4:12:0e:6f:31:9b:c6:be:41:07:8d:11:54:
         67:01:d0:7b:cc:92:3f:31:b3:71:20:19:56:af:56:a5:da:84:
         ca:fb:2c:33:65:5a:7d:b3:04:98:fb:76:c9:5d:3b:98:8c:e1:
         2a:9c:65:cb:16:53:22:f4:e5:eb:bb:af:30:2d:2f:89:2c:ee:
         f9:80:8b:e8:53:b9:c5:26:fd:43:7b:d8:6c:7e:51:84:dc:a9:
         73:25:66:26:88:f6:bc:d8:7e:2a:e3:de:76:58:e2:61:59:39:
         c5:a2:fc:61:27:ae:2e:df:60:aa:27:0e:43:06:d2:28:51:24:
         59:73:36:1f:dc:3e:c4:bf:ac:df:48:f0:b8:26:dd:c0:98:76:
         c0:ab:19:cc:85:d6:b2:07:36:8d:72:17:db:2e:83:97:f6:bd:
         55:ce:e8:0e:2d:fe:cf:df:27:42:c6:91:34:42:f6:0c:76:dc:
         49:33:a5:33:aa:d9:c1:99:ab:50:37:84:5e:5e:59:d3:f4:ec:
         94:26:2d:1a:52:b5:b1:61:ca:72:53:c4:9b:dc:ac:f5:2b:84:
         c3:fc:49:c3:36:bb:a7:80:3d:a5:60:8d:78:c1:43:e6:bb:46:
         5c:7f:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----