Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File:                     i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier:          E82lDtUKenVRYw0fiRlbE7C9B+2H7JWp/AE4wvQihzA=
Subject key identifier:   A2:47:A5:DC:DF:8B:89:EF:E0:D8:38:19:6A:08:92:72:8C:6C:3D:31
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer:       /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial:       01962E991883B851428C0A801CA4A62F9578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number:          0387
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: Nm3/47a0CN9ENyAGrvuytfA4ly0bOl3gaeBCdYdnnxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:83:b8:51:42:8c:0a:80:1c:a4:a6:2f:95:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=a247a5dcdf8b89efe0d838196a0892728c6c3d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:f2:6e:1b:48:3c:ea:c7:ef:50:60:76:8c:
                    9d:08:02:6f:40:fd:2d:e6:78:7d:1f:94:f5:eb:6b:
                    f6:08:1c:fc:e8:11:38:17:61:01:8e:30:ee:60:e1:
                    a7:68:a6:44:56:4a:c6:2a:d8:7d:f6:3f:98:25:af:
                    81:e0:92:ad:75:d0:32:51:f8:6c:ea:f7:bb:b6:44:
                    37:0c:35:cc:42:0f:ad:dd:73:0c:87:6b:a3:80:a5:
                    06:20:33:ba:04:6e:5c:06:fc:07:2b:90:62:d7:00:
                    b0:6d:c5:ea:83:eb:98:f0:46:01:6b:49:5c:f3:b6:
                    18:ce:42:c3:fa:50:b5:00:9a:cf:c6:ff:df:be:8f:
                    4d:55:6f:7e:5f:35:03:1a:25:ed:95:44:20:8b:c2:
                    d7:1e:db:a2:1b:4b:ad:76:e6:e8:db:28:f6:16:d8:
                    4a:d2:31:5e:ec:0a:d1:6c:9f:0e:e0:fd:bd:fc:6c:
                    20:50:ab:38:47:03:d8:44:2a:bc:23:44:15:d1:ca:
                    ac:17:f3:16:f4:0f:41:38:c7:9a:7c:0b:0f:05:2e:
                    f6:a8:66:27:0e:d0:5a:98:47:49:11:44:77:94:0c:
                    92:45:3c:a4:77:de:47:6d:1b:f6:6f:44:7d:15:3b:
                    08:61:36:dd:17:a9:a7:57:d6:07:c1:d5:89:36:3a:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:A5:DC:DF:8B:89:EF:E0:D8:38:19:6A:08:92:72:8C:6C:3D:31
            X509v3 Authority Key Identifier:
                keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:68:9f:fa:41:f0:c5:d2:7f:20:65:46:c2:7c:4a:0b:27:b4:
         f1:8f:43:a2:c2:b3:87:49:96:94:ab:54:d3:58:ea:f4:4c:c8:
         45:76:71:2b:78:87:c3:8e:e8:4a:e6:0d:e2:59:d7:ed:66:44:
         91:28:c6:14:e6:50:2a:c4:02:bd:72:63:75:f1:8d:f9:63:cb:
         6a:80:08:51:fa:6a:eb:85:47:c0:66:c9:f3:2e:ea:19:0f:72:
         31:91:1b:49:9e:93:3d:88:86:12:b0:58:94:3f:d8:d6:2c:3c:
         e5:9b:33:8e:26:c9:b7:d5:06:68:f8:90:7c:be:a4:e8:83:ea:
         c1:95:f1:f6:18:5f:e8:57:41:f8:53:8e:33:40:39:e4:ae:97:
         18:bf:ab:eb:ea:c0:0a:fa:57:53:a1:60:4f:6f:6e:bf:20:30:
         63:ac:4f:ef:db:fd:06:16:c1:d4:f1:cd:c9:0a:61:7d:7d:fa:
         33:fe:c7:29:bc:16:87:f5:c7:e0:88:d7:e7:76:14:d4:14:66:
         04:cf:13:a8:1a:50:be:f4:cd:3f:f8:8f:1b:0c:46:f9:ef:a8:
         24:53:07:80:23:bf:5b:9b:6a:b3:f8:57:d1:e5:88:99:56:66:
         7f:6a:92:34:f0:cc:70:d6:fa:2b:13:54:8f:40:ee:80:ba:b6:
         6e:0f:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----