Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File:                     2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier:          kvxh3YxrEEou3jZiAyiR6k+Go+MI/hWhnVifE+pWMB8=
Subject key identifier:   38:A8:4C:D3:3A:BF:E7:CA:88:BF:0C:2E:F9:D2:F9:CA:D1:B6:39:86
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer:       /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial:       01962F3D43C65FB0BEE1F1868F28C914DC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number:          1502
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: /3+6dJCXsEn3mj6x2uuHCwFA+Ji6V6pjtXIuGPCNN5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:c6:5f:b0:be:e1:f1:86:8f:28:c9:14:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=38a84cd33abfe7ca88bf0c2ef9d2f9cad1b63986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:d5:df:24:07:ed:7f:3d:a8:13:34:f8:d4:
                    74:35:17:64:a8:2f:1e:e0:3d:76:c4:53:0f:d9:63:
                    c7:37:f6:9d:8c:c6:14:2f:06:8e:91:a9:38:63:2b:
                    b1:6a:ac:ee:57:1b:ee:cb:60:69:78:c8:ad:64:74:
                    91:cf:79:9d:f5:07:04:26:20:fd:76:53:ae:9a:2c:
                    62:7f:e1:a3:fd:13:74:db:13:5d:99:7e:de:fe:17:
                    96:ee:77:d1:7f:55:a6:4d:ff:c3:67:c3:99:c2:d9:
                    2d:c7:8a:a3:d5:0e:5d:f1:8e:db:e7:0c:e6:7a:b5:
                    c3:4f:70:42:65:7a:04:17:89:93:7c:e3:a2:11:b7:
                    d1:a5:7b:6c:58:17:4e:32:56:9d:de:f5:8e:7c:c7:
                    e1:8f:d6:36:69:1f:66:1b:e4:f8:55:50:ca:5f:f6:
                    14:97:0e:b3:3d:b5:14:5d:5e:38:c6:42:d5:d2:cf:
                    4b:7a:c9:97:1b:34:6f:d3:f3:36:77:a4:69:fd:66:
                    d8:86:78:99:67:51:8e:eb:80:26:d1:bf:b6:70:c6:
                    51:37:a7:a3:5a:12:89:39:10:c2:1a:1c:f0:1c:a8:
                    9d:09:9d:98:c1:8a:2f:58:0d:02:c0:0d:37:dd:7e:
                    9b:9a:b8:95:8e:b6:77:0f:c0:8f:37:3a:0c:aa:1e:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:4C:D3:3A:BF:E7:CA:88:BF:0C:2E:F9:D2:F9:CA:D1:B6:39:86
            X509v3 Authority Key Identifier:
                keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:22:74:1b:2f:c6:d6:99:7a:d3:9d:24:dc:a5:79:47:bd:d5:
         bb:49:9b:74:0f:7b:91:9b:14:fd:6f:3a:ad:e0:9e:1a:04:31:
         a6:db:99:8c:9e:f5:61:6c:4f:8a:8c:a7:26:27:f8:f1:59:7e:
         7e:25:db:04:04:02:d5:d1:ad:22:c0:2d:d1:ac:32:ac:ea:92:
         dd:3d:6b:34:23:83:ca:fc:be:1b:a3:e0:47:82:18:2c:38:55:
         53:1a:8f:b5:03:0a:84:1a:a3:c6:56:e3:71:a7:61:c5:fa:00:
         ea:5a:7c:79:2b:88:df:a1:eb:9b:09:d1:bc:f0:84:51:74:10:
         a9:bd:b4:77:ed:29:60:cf:9c:96:63:96:00:89:9a:89:61:c6:
         bf:4f:fe:ce:fc:05:66:a9:bd:99:e4:92:0b:a6:41:91:c0:a3:
         60:14:6d:99:19:7a:36:d8:86:e8:08:ca:13:20:02:3d:a2:62:
         2a:86:5a:77:8a:b9:37:81:2a:55:c1:7d:6a:b6:b2:fd:83:db:
         87:ff:de:e3:03:9a:24:b5:1e:9d:10:bf:7b:d4:9c:cb:92:3c:
         f7:fd:62:09:e1:87:16:5c:ee:45:b6:9b:2f:7c:fb:ba:20:12:
         09:fd:fa:bb:ed:da:8a:3c:6a:a1:7a:84:9e:c8:a1:2e:3f:e3:
         42:80:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----