Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File:                     k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier:          /wX31DYkwImt9MnJBsK1YdvIYxpy3VV2dN6Moe/Lezs=
Subject key identifier:   E1:67:74:23:D6:27:84:FC:56:05:91:59:9B:78:D6:9A:25:36:9A:08
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer:       /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial:       01962DF4224E230E030BF675328B541D06DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number:          0FE8
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: 9bPMPQdpo0sZ3ddBBbKuZpsawyftvLe48gUj/srPtdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:22:4e:23:0e:03:0b:f6:75:32:8b:54:1d:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=e1677423d62784fc560591599b78d69a25369a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:68:08:bb:99:d9:bf:31:b4:cb:f3:f4:0e:
                    25:26:d9:6f:d0:ce:e8:76:7a:b1:b6:10:22:a2:99:
                    df:ed:bd:ae:76:a2:f3:a3:83:16:fb:2f:b2:31:36:
                    d2:5b:e6:10:17:24:ad:bc:8c:55:c4:60:a0:a4:e8:
                    33:50:2c:bc:7f:24:64:3d:54:0a:a1:21:f4:72:f6:
                    8a:dc:44:a0:dd:84:d9:b0:12:54:2a:d5:a9:18:fd:
                    e5:4b:d3:b5:25:be:40:97:9a:0e:5d:6a:17:13:04:
                    47:0c:88:4f:5a:ee:0b:36:ef:6b:c4:80:43:ba:2c:
                    62:3f:b2:9e:f0:ab:7a:04:80:04:6c:05:12:dd:58:
                    dd:e8:da:a2:8b:86:99:26:1d:c3:ac:9d:9c:25:ae:
                    c1:e1:5a:6d:86:c6:4e:bf:ed:d5:b9:49:6f:25:23:
                    c4:6d:fc:96:2c:23:49:cd:3e:07:7b:0a:51:8a:d8:
                    24:b5:90:d2:9b:ee:17:1d:b2:76:66:c9:8d:d1:08:
                    88:08:ac:b6:23:72:9e:d2:b2:a3:c4:8a:44:5e:8a:
                    6e:cc:8b:bb:7e:25:10:6a:d6:4f:2d:c2:6e:54:d3:
                    42:8f:ae:72:a8:9b:9d:b2:bd:49:94:58:68:69:dc:
                    0f:cc:92:d6:34:03:20:28:0f:a5:1f:31:83:66:2a:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:74:23:D6:27:84:FC:56:05:91:59:9B:78:D6:9A:25:36:9A:08
            X509v3 Authority Key Identifier:
                keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:14:72:5c:2f:c9:59:64:e1:88:8a:be:a0:86:fd:cc:a9:e5:
         d3:80:25:90:33:44:56:bf:cd:82:32:64:65:0a:f5:b4:fe:4d:
         ae:6b:2c:23:e8:78:8e:14:91:28:e4:b3:2e:6d:f7:f4:89:b3:
         e7:e4:e4:4a:49:91:44:5c:b2:df:58:52:eb:9b:4f:20:e5:f7:
         5e:94:12:af:f0:74:3f:5b:54:c8:9e:c2:b8:da:61:0a:af:db:
         3f:e1:e4:be:f1:08:bc:5a:8c:3c:da:76:a7:b8:e4:d8:99:e5:
         bf:b8:f9:c7:ed:c8:72:73:29:12:f9:57:34:0a:f8:5b:d2:24:
         c4:46:b5:77:20:a6:17:13:5b:65:4f:45:54:69:87:e6:38:cc:
         02:04:bb:1a:32:aa:e7:3f:fe:5c:56:94:ca:33:ee:ab:1c:e3:
         2b:2a:76:f6:16:10:58:99:ca:77:c3:9f:d3:c1:9f:c5:a9:d9:
         df:e6:1a:71:f9:82:21:80:11:95:7f:9b:38:16:2a:51:84:68:
         57:af:06:13:54:57:3e:36:48:9b:ba:bd:fd:7f:9a:86:e9:69:
         be:0c:15:c5:68:0a:e9:0d:74:1e:18:36:6e:0d:d6:7a:2b:b6:
         76:d9:52:06:60:86:f1:27:61:eb:c6:32:74:9d:6e:a4:9c:24:
         31:bc:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----