Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File:                     MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier:          MQxnx+fqrYWlkYfpLoEthucinORSyvxg7hBwGXxomJM=
Subject key identifier:   00:25:13:E3:8E:70:89:A9:23:E9:D7:10:D9:F7:ED:A8:2F:5B:C1:8A
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer:       /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial:       01962ECF8E13CD4650310D466C93C02E1FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: gO5nUpYiHUtyPzBzeA7j0lXTdoS/mrz+WVvGauWKOUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:13:cd:46:50:31:0d:46:6c:93:c0:2e:1f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=002513e38e7089a923e9d710d9f7eda82f5bc18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:66:0a:e6:87:4c:4c:e5:a4:ec:bc:81:e6:
                    59:bb:f5:6b:9a:cc:9a:ef:a3:2a:8e:f3:72:69:7d:
                    10:ea:56:b8:1b:86:24:31:fa:4e:d0:e3:02:8d:4f:
                    b1:9b:92:e6:cf:1e:9d:fc:38:ce:36:4f:83:90:fd:
                    59:d3:da:27:f8:1f:ce:55:3c:43:99:4e:46:da:6a:
                    9f:b4:7b:0a:53:dd:64:08:d8:49:4c:10:5f:04:4b:
                    bd:05:9a:f7:e4:03:10:ac:2d:51:0c:82:0b:d7:43:
                    09:d2:1a:8f:a2:8f:b3:c9:45:8b:dc:d4:a0:2e:cd:
                    93:4e:a1:7f:3e:29:9d:7a:b2:ff:36:1c:23:0f:59:
                    dd:b5:95:17:f2:02:de:d3:2d:0d:41:06:ff:5b:71:
                    f4:a7:e8:6e:55:31:d1:71:1f:1e:c5:44:ae:1f:17:
                    42:f1:dc:51:ff:2e:0b:cf:80:51:d3:78:f1:1e:fd:
                    1a:3e:7b:f7:63:8c:4b:6e:ea:c1:bf:ca:0c:57:50:
                    a1:c9:6c:47:6d:e7:0f:c1:dc:e3:ce:59:03:a8:a9:
                    d8:8e:71:5e:4f:37:ae:aa:17:1c:40:a6:2a:ce:e8:
                    3f:c4:cb:2a:f4:45:93:6b:84:bc:0b:ff:07:4d:e8:
                    1c:c6:6b:b0:56:c5:0e:fc:47:ae:4f:d9:e5:87:20:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:13:E3:8E:70:89:A9:23:E9:D7:10:D9:F7:ED:A8:2F:5B:C1:8A
            X509v3 Authority Key Identifier:
                keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:4f:99:49:b6:49:25:d8:f7:80:1e:8f:6d:46:ff:d9:b7:
         83:69:65:ab:fe:30:74:46:b3:23:ca:1d:05:fe:e4:4f:9d:15:
         30:b6:f7:c7:b4:54:48:c2:e1:d4:0a:db:45:37:84:c9:25:62:
         8f:84:73:60:97:7b:51:73:02:3f:09:bc:77:d5:4c:4f:6f:62:
         a1:cf:c3:6d:d3:2e:8d:cc:6c:7c:0a:82:bc:f2:b6:01:c2:8d:
         55:eb:fc:c3:04:59:1b:a3:17:32:ff:41:c0:57:84:39:f4:77:
         c9:40:2e:25:1e:77:0b:10:73:89:30:fb:a9:89:b1:0f:c9:8c:
         8b:36:59:ee:64:e6:47:94:cc:d0:7a:cf:a8:83:e9:ca:c8:a6:
         49:32:35:0f:66:65:09:d7:42:53:5e:d3:f6:d2:d3:5f:30:17:
         4d:4a:db:2b:7d:e8:7a:88:67:b6:f6:bf:06:30:66:2f:69:a8:
         21:5e:d4:87:01:20:97:94:51:b2:ec:b6:50:ac:c0:69:81:91:
         2a:7b:51:a4:58:75:70:28:87:4e:4b:d1:d5:9a:14:b9:b5:09:
         3d:30:01:e6:ed:08:e5:70:97:24:0a:f4:f4:59:a5:a1:c8:bb:
         83:f9:20:0d:80:b4:da:58:6b:4e:c6:2d:3b:19:0e:11:9b:c4:
         a2:19:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----