Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File:                     iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier:          4ZLiP0P5xgm6Ta7E1Fl0/7e4r0++C8VwgcX5f3e3xk4=
Subject key identifier:   8A:52:B0:9E:E1:77:C6:34:AD:DE:F3:7F:27:05:DA:69:8D:08:89:AB
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer:       /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial:       01962E98A31230044C71A7CD9B79E32348C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: HNyTjTmDhx4sM9xjM4HH6JqhlrmjzPcrcotMgeieFvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:12:30:04:4c:71:a7:cd:9b:79:e3:23:48:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=8a52b09ee177c634addef37f2705da698d0889ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:1c:76:71:47:7c:35:cf:54:c7:a3:a7:fa:
                    9f:87:a0:07:8d:1d:a6:f6:92:9f:cb:36:3c:66:3d:
                    dc:9a:de:a5:fb:c3:76:bc:16:8e:14:d2:2e:2f:90:
                    6f:62:0c:51:90:75:5d:08:1e:2b:2a:a3:6d:06:88:
                    82:b7:58:08:58:6a:9d:ed:cc:32:ff:a3:04:89:ae:
                    24:03:8f:d7:49:65:b0:28:41:50:c4:7d:9c:7e:e8:
                    64:15:35:6c:10:58:ba:ea:b0:56:74:39:de:1c:44:
                    e9:a2:51:e1:f9:9b:e2:8b:d7:77:d8:d8:61:31:3a:
                    4e:02:9a:08:53:2e:73:ab:17:eb:92:5b:f4:9f:51:
                    b3:19:e5:84:57:1e:a0:16:e6:03:14:4a:86:37:b7:
                    f9:7e:95:1e:d6:ee:e2:23:1c:06:31:5b:9b:33:b7:
                    e7:bf:0d:e9:a0:b1:43:fd:24:66:7b:e6:df:12:0b:
                    cd:a1:bf:42:42:86:a5:76:33:3f:88:16:08:e6:23:
                    8c:1d:e8:ec:58:e7:3a:ec:16:a6:33:34:ec:eb:0a:
                    6f:dd:fc:5f:bf:07:c1:c2:63:bc:ce:f0:a3:c0:36:
                    6f:83:89:b7:d3:1d:92:0a:29:a8:1a:8f:13:b1:5f:
                    8a:37:3e:55:b5:53:48:6c:f5:06:95:2e:74:e4:b2:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:52:B0:9E:E1:77:C6:34:AD:DE:F3:7F:27:05:DA:69:8D:08:89:AB
            X509v3 Authority Key Identifier:
                keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:d6:0c:e0:45:fc:15:ef:52:1b:8d:b1:84:db:b6:c8:1a:
         a7:67:38:c6:46:1b:ac:6b:e5:2f:59:15:96:b9:d9:85:5f:2d:
         24:a4:d3:41:d8:47:f6:1e:be:87:6c:02:0e:99:c2:8d:70:a6:
         05:41:50:03:6f:65:47:74:84:7f:2a:2c:d5:ff:01:8b:6c:94:
         6a:fb:bf:86:0b:9b:fd:aa:f1:db:3a:94:56:f2:7a:d1:86:4e:
         92:a7:26:0e:e4:34:fb:ef:2d:bc:e7:35:d9:01:0f:1a:92:20:
         e1:d6:2a:52:f9:95:1f:76:a3:fb:d0:21:46:90:1f:5a:b3:b8:
         3c:58:fb:57:68:44:4f:dd:46:63:df:14:67:c5:2a:9b:5c:ba:
         50:b7:52:bf:41:c2:82:8f:b5:c9:f6:91:9e:8b:9b:72:7d:25:
         10:d1:c5:76:2b:30:b6:3f:78:a0:1f:06:2b:a4:3c:b1:1b:01:
         ea:23:37:ee:ed:17:0f:13:56:40:f8:7e:8b:7d:5b:17:10:6d:
         7a:43:6a:da:50:1e:2f:a4:b4:f6:de:e7:c3:2a:00:b3:42:08:
         02:af:82:5e:1f:0c:45:3b:3c:b6:f1:05:55:43:a7:d5:7e:97:
         a2:96:88:2e:09:c4:b3:61:f1:cd:9c:1f:9b:73:1d:1e:d4:10:
         02:2c:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----