Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File:                     AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier:          2vLDilWUCNaQi/2Jy1yjjVPcmNE8t/LxB1WeVEHlwL4=
Subject key identifier:   F3:B0:B6:A1:55:95:5C:C0:49:51:71:96:2F:D6:C6:EA:D7:09:BC:E9
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer:       /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial:       01962E99835D774EB36C354B14F831E479B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: azJVDeINoZ3aDvPQnAnzabeTOYp3eZQxr1zIOv5EQco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:83:5d:77:4e:b3:6c:35:4b:14:f8:31:e4:79:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=f3b0b6a155955cc0495171962fd6c6ead709bce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:13:3d:f4:7f:61:1e:40:8c:d3:1f:2d:6a:
                    3f:d4:f8:eb:86:e6:99:57:9d:46:35:38:31:d3:76:
                    c1:e1:f5:c5:c9:d3:11:90:13:9d:95:c2:c1:85:5a:
                    ec:ef:d5:f1:d6:65:46:cb:fb:2c:e9:29:27:e4:b1:
                    64:8d:7e:c8:b7:4e:c6:31:8c:e4:b1:6d:92:db:65:
                    72:66:75:bc:f5:5d:b9:f6:fe:3a:2e:09:56:dd:80:
                    82:37:9f:ef:f3:bd:62:bd:a6:7d:92:4f:43:d7:66:
                    ff:cc:be:fe:06:0a:ae:8e:5f:10:bc:6f:4f:70:c4:
                    07:46:d4:33:d7:1c:38:70:bf:48:2b:47:2c:18:f5:
                    f6:9a:88:ce:5e:ea:80:cb:e4:28:16:70:1b:0a:1c:
                    3d:bf:79:d7:bc:92:ff:5a:a0:71:af:ef:70:87:c3:
                    82:65:cc:43:c9:37:12:02:5a:9c:00:87:45:0d:5c:
                    e8:e2:57:8f:cf:66:40:a5:ed:3f:52:81:20:03:9e:
                    02:4f:e7:a8:7c:53:87:68:74:31:15:3c:b3:d2:d4:
                    36:8a:c4:ac:b7:07:ca:ef:6d:fa:33:cb:ba:7b:77:
                    f1:5b:de:8c:02:68:9c:be:93:0a:80:c5:08:2a:dd:
                    e9:e9:d2:f7:29:d7:2f:d5:10:34:a0:37:c4:68:47:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B0:B6:A1:55:95:5C:C0:49:51:71:96:2F:D6:C6:EA:D7:09:BC:E9
            X509v3 Authority Key Identifier:
                keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:05:f1:d3:49:69:1f:f8:cd:7a:fe:d5:44:de:b9:3b:3e:
         ff:04:ff:35:d3:4b:a6:9c:b8:60:8d:2b:28:b6:c5:8d:d6:ec:
         98:99:ff:4a:26:20:98:1a:ff:fd:39:09:48:a9:c3:45:6e:35:
         e5:05:60:6c:74:8b:58:ea:cb:de:96:60:4f:b0:73:b6:5c:6e:
         6f:11:d8:23:b8:d9:bd:c0:8a:f6:e5:f0:96:98:aa:e6:54:73:
         37:06:44:75:d2:6e:bb:77:3d:7f:d6:49:51:6e:10:07:77:be:
         02:4a:f0:5a:2d:2e:4d:cc:d2:52:9e:72:f3:a2:1a:94:94:03:
         d2:a3:54:c9:0e:5e:6c:65:b0:53:4d:be:ca:f7:b8:fd:e4:1b:
         88:4e:2a:f1:95:6a:d0:32:e2:bf:dc:f1:3c:4d:88:d9:c9:8c:
         9d:6f:e0:09:6e:68:2e:3b:c0:bc:7f:cc:3f:b1:7f:25:9c:90:
         89:48:0d:db:04:38:94:09:67:51:c2:55:c4:67:28:e4:80:1d:
         c1:8f:c7:43:c1:d9:33:fb:e1:a8:0f:e1:ac:c0:b2:12:1c:6e:
         40:55:84:ab:32:f5:33:e6:e8:2a:d6:59:bf:85:ec:24:59:a5:
         51:5c:30:ec:70:aa:da:ab:21:73:ff:08:ee:64:e3:a2:71:0e:
         38:6c:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----