Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File:                     xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier:          CBh7ccNijfjceQSB2naHc/k5jr1x8VRfaPf9NTXZwNw=
Subject key identifier:   B3:95:CE:45:56:34:18:0E:C0:23:29:AE:C8:5C:70:5C:72:4A:0F:39
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer:       /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial:       01962E98C21514F3ACC7D2E5546B3BDF657A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: wjapWnoOXlAwjC3MCOdiO9VBpjT/8w5Ti8RpgKERK38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:15:14:f3:ac:c7:d2:e5:54:6b:3b:df:65:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=b395ce455634180ec02329aec85c705c724a0f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:54:1e:bb:ec:77:2e:ba:4b:c4:92:20:28:
                    4f:5c:18:79:eb:19:52:26:4e:75:24:19:f5:84:f1:
                    4c:d6:ef:65:1a:f9:b9:4f:5e:62:7d:5f:59:19:1e:
                    a5:aa:a8:c4:12:b3:ae:c8:64:4f:9e:6b:37:a4:86:
                    8c:e9:02:f0:be:24:c2:d3:ae:ca:0c:3c:d6:2d:57:
                    38:64:f3:dd:fb:86:eb:df:3d:c0:d0:31:09:6d:5a:
                    82:05:d8:51:50:06:b4:67:c9:12:47:f6:28:55:cd:
                    6b:84:c6:ba:cb:ed:91:90:1d:b2:44:7f:fd:e8:90:
                    0d:55:81:4b:9c:d9:50:37:1d:72:a7:34:b4:e1:77:
                    0a:e1:cd:df:39:a9:3d:e6:83:2b:6c:86:3a:ee:dc:
                    4f:77:19:5f:a9:cc:2c:eb:63:23:9e:6e:60:f7:7e:
                    19:93:90:54:e9:bb:e6:d0:16:e1:d8:70:59:97:e6:
                    88:1b:2d:09:30:fc:2b:0a:f4:2d:7f:69:f5:ca:0e:
                    5f:fb:16:9c:ea:ef:d3:ed:eb:c2:1a:c1:f3:c2:c4:
                    dc:39:0c:ba:6f:aa:7a:fc:4d:fd:20:83:ce:fd:f8:
                    18:f5:92:50:58:c8:c3:d5:5e:b1:c3:2c:c3:ad:3d:
                    61:e5:f9:13:49:e4:03:37:90:0a:07:38:c3:1e:65:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:CE:45:56:34:18:0E:C0:23:29:AE:C8:5C:70:5C:72:4A:0F:39
            X509v3 Authority Key Identifier:
                keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:0a:a3:d9:1b:57:ee:4d:d1:d7:db:51:81:88:b2:e9:2f:
         7c:f7:03:80:65:7e:9b:e4:d0:50:60:ab:01:a7:40:c3:96:0e:
         fd:55:d9:ae:34:5f:c9:b6:ea:df:36:09:9a:50:81:55:e6:8f:
         9c:3f:96:1d:a5:53:55:1a:51:88:d1:fa:bb:65:99:57:0f:fd:
         8e:dd:fb:9c:07:fd:4b:c6:4b:9b:95:55:8b:8a:eb:be:58:74:
         2d:fd:ef:f7:9e:67:bc:25:2f:14:1b:3d:89:6e:6c:ed:30:c9:
         ee:ac:07:5c:43:27:39:65:38:7a:c7:2f:7c:73:54:18:c5:78:
         a0:1f:c5:3a:a7:85:8c:64:d4:24:f8:56:10:aa:58:bd:41:94:
         58:98:3a:03:48:b7:bc:8f:80:26:62:31:79:b1:b8:31:28:cc:
         99:dc:dc:02:ef:03:df:68:f5:0f:aa:ff:54:c8:45:70:c1:83:
         77:59:0b:ce:17:81:8b:86:d9:e4:46:24:f0:2c:97:5a:69:8a:
         6b:f1:3d:18:2c:f6:62:82:df:f0:b4:df:78:b0:87:d9:a7:42:
         5c:2c:05:c7:51:fd:44:02:f2:20:3d:9b:e9:04:c1:29:5b:8c:
         c7:8b:39:9f:cd:bf:91:85:1f:78:7a:35:11:66:c3:c0:b1:28:
         1b:d6:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----