Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
File:                     PtWjaKny40iTSpFIiEVZQ2I_lus.mft (raw, json)
Hash identifier:          2jOYGWx7Kps/3fGcaCBfi7WCKO5ay05DF6TYtQfMJqQ=
Subject key identifier:   ED:EB:1E:87:B3:11:68:B3:BA:56:A7:49:66:AC:80:5E:E5:A1:F9:A5
Authority key identifier: 3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
Certificate issuer:       /CN=3ed5a368a9f2e348934a914888455943623f96eb
Certificate serial:       01962E994A712A280D22DD730F7DCA094FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
Manifest number:          10CD
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: PtWjaKny40iTSpFIiEVZQ2I_lus.crl (hash: 5nP0DHUVtQwpSS2oRsUSHPOJORVoe+MFX70xANM3PXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4a:71:2a:28:0d:22:dd:73:0f:7d:ca:09:4f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5a368a9f2e348934a914888455943623f96eb
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=edeb1e87b31168b3ba56a74966ac805ee5a1f9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:5b:a3:a4:f2:42:03:b8:5b:fb:19:85:3a:
                    54:d7:fd:4d:2e:29:77:37:19:ff:83:ea:39:1d:0c:
                    78:49:11:1a:bb:a9:b6:fa:d3:cf:2c:c5:25:c6:0f:
                    fe:72:f3:21:7c:aa:22:b0:16:aa:fc:29:c6:3a:55:
                    c1:cf:c7:b7:b9:7f:a7:ac:97:35:09:98:15:6e:9c:
                    56:da:c8:b3:06:63:08:0d:00:a7:dc:ff:5b:e1:d9:
                    ff:b9:78:fe:92:9e:f0:47:38:11:10:83:03:08:18:
                    b3:38:fb:10:79:1e:0e:e5:7e:14:fa:96:24:56:80:
                    65:2e:e8:ab:ce:68:69:20:38:b1:0b:89:38:35:20:
                    91:29:db:f4:1d:e8:e5:24:b6:55:d1:6a:68:d1:e6:
                    11:85:82:f3:6c:ee:0c:89:18:64:c6:48:f4:1d:d4:
                    1f:68:92:72:05:44:f8:1e:b2:12:4b:58:19:cf:7a:
                    b2:95:2b:0a:84:1a:80:cf:21:7e:87:37:be:02:d0:
                    1e:1a:95:48:ce:e5:30:23:1a:db:4d:6b:f4:3c:01:
                    9d:44:47:7b:37:db:9c:5c:6a:81:63:f1:fb:89:b9:
                    51:47:c2:3f:39:96:a1:4b:83:42:a1:df:ed:25:62:
                    93:5b:11:61:63:a0:35:2a:c2:9c:2b:1d:de:d4:d3:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:1E:87:B3:11:68:B3:BA:56:A7:49:66:AC:80:5E:E5:A1:F9:A5
            X509v3 Authority Key Identifier:
                keyid:3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:4b:de:49:e6:c5:da:3d:55:c3:76:fd:e9:31:40:fa:23:
         ea:a0:35:c8:62:2a:a6:f7:d2:16:a6:a3:b9:8a:04:9f:53:86:
         87:8f:15:92:23:2a:be:46:10:6e:48:05:df:b1:a0:33:07:28:
         0e:49:eb:3b:a5:f8:1b:27:a0:fd:44:fd:7c:2d:12:11:1c:43:
         8a:1b:f4:ce:50:3f:34:2d:8a:df:82:2e:49:07:c6:5e:0c:d8:
         c0:08:60:04:84:9a:18:6a:62:59:b7:ed:b4:9a:c6:36:eb:63:
         92:0c:03:d9:37:69:cb:9e:b2:8a:c6:82:ce:61:9d:e9:41:ce:
         c5:0a:7c:bc:28:44:2c:1e:66:b5:df:0b:50:71:03:ce:f5:d7:
         25:77:ea:d0:c6:f9:0a:d2:58:a8:f0:72:a3:21:24:70:fb:92:
         16:65:4e:65:1e:53:af:6f:e3:a4:e5:73:66:4c:8d:05:a9:6b:
         aa:4c:ee:48:16:94:f0:73:6c:f7:0f:9a:27:e9:dd:de:1b:c4:
         2f:1f:b8:ca:37:39:36:a8:7f:27:fc:2b:c9:b2:0b:5b:28:1a:
         57:7d:25:7f:d6:17:c8:93:84:5d:c9:83:5c:79:2e:80:55:10:
         18:d2:75:60:ff:23:48:e5:92:d8:10:36:8a:8d:11:a7:8d:c3:
         ff:cb:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----