Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier:          9bpLWJ/xJ0EmFeQgzr/LJC3QuMGnpBJkdRRrcSWiVZc=
Subject key identifier:   13:AD:28:7F:2F:AC:B6:B6:A7:FC:C0:93:7C:0C:63:C9:DB:DF:89:B6
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer:       /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial:       01962F0692548C76DAB382E3950CD6C9FE8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number:          0467
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: bpf68zdsZjSH8WVAkqs2w3kHr7P29V17u8tluYBzzEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:54:8c:76:da:b3:82:e3:95:0c:d6:c9:fe:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=13ad287f2facb6b6a7fcc0937c0c63c9dbdf89b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:cc:f8:90:ad:a8:75:c5:4c:b0:93:70:91:
                    46:57:bc:5b:d8:55:b9:8d:28:68:09:90:7d:5b:d2:
                    48:d4:ca:45:c1:90:9e:26:4b:0f:5d:08:d9:35:0f:
                    aa:04:52:30:57:e9:63:bb:fb:83:8f:b1:b6:6c:e9:
                    c6:db:cf:af:47:19:30:25:1b:c9:0e:22:3a:1e:c0:
                    28:27:76:1e:73:82:b8:13:fc:56:4d:82:64:6d:45:
                    e3:7f:77:ee:9e:f6:80:1d:dc:c5:bd:8a:a6:d0:10:
                    e1:cc:16:c7:4d:37:22:68:63:c1:3d:d3:70:3a:35:
                    d5:16:14:3d:96:02:79:cf:cf:42:1e:c6:44:60:5e:
                    f4:7d:80:39:60:ac:67:1b:0a:60:8e:6b:dd:af:a8:
                    2b:5f:2b:d2:6f:ac:4d:48:9a:87:56:d5:cb:33:53:
                    db:e2:d7:a0:f8:56:e3:d9:fe:7e:12:39:cb:78:24:
                    c0:16:20:45:7d:2c:56:10:f2:6d:b5:a0:a4:2b:90:
                    70:a2:bf:e6:4c:af:88:56:03:80:83:a9:e9:bf:65:
                    3f:7f:94:b3:48:6a:8d:7c:97:7e:87:85:8d:eb:b6:
                    c7:ce:8a:d7:ad:c7:52:38:3a:9e:85:d1:d2:78:67:
                    ad:6c:3c:39:14:e2:e0:a0:14:14:8e:ef:f1:d0:75:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:28:7F:2F:AC:B6:B6:A7:FC:C0:93:7C:0C:63:C9:DB:DF:89:B6
            X509v3 Authority Key Identifier:
                keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:8b:10:03:30:b3:7f:f1:28:3a:99:3c:a8:f4:b9:8e:5a:7b:
         5a:ee:9a:04:00:1d:7b:36:99:cb:14:6d:9e:f1:ad:13:02:66:
         68:32:56:74:7a:40:14:b5:fb:b0:9d:1f:bd:97:d8:69:4d:8e:
         f0:39:ac:c9:1a:ce:4c:9c:22:4d:ea:d1:3b:1b:b9:3b:98:39:
         23:d9:5c:cb:37:38:37:5f:6c:ca:6c:93:89:18:8f:7f:0c:e0:
         d7:db:b8:07:b8:0e:12:5f:c7:38:c4:b6:e7:d0:80:33:31:d5:
         b7:14:8f:b0:c0:33:67:6a:5c:29:df:b4:d0:8f:20:18:a9:80:
         de:78:d4:63:7c:2e:e8:5e:92:b5:01:ac:3f:ae:74:d4:c4:80:
         ac:47:df:ae:68:16:ff:fd:93:9c:32:9c:2c:a9:0e:b9:fd:f1:
         03:9c:6b:cd:05:97:b2:46:8d:3e:5c:10:0f:4a:23:0c:18:a5:
         c2:89:bf:db:b1:d8:a1:7f:13:16:4a:89:9d:87:7c:98:cf:3f:
         f1:f6:8e:38:74:cf:8d:ce:0b:54:ff:67:b9:ff:9d:99:8b:72:
         21:39:7f:be:2e:b2:ff:06:3b:09:7a:c8:94:7b:66:ad:c8:e4:
         1e:20:64:17:34:9b:59:51:4e:4e:22:bf:03:3d:ac:9d:45:f0:
         77:e0:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----