Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File:                     8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier:          D6tXkWenRHxC7Z0RebtGFnAOFCwNmQPgr0RAcavny9g=
Subject key identifier:   CC:07:8D:EC:0C:17:A3:71:36:92:B9:7B:2D:CD:D8:A8:A4:4E:B8:F0
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       01962F06BC19FD5FC459EF29AEE5CC6683AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number:          0341
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: Cecn6YaOMui7/XWBtudRYnJ6tcnpa7Je7q5UkwA8Vzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:19:fd:5f:c4:59:ef:29:ae:e5:cc:66:83:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=cc078dec0c17a3713692b97b2dcdd8a8a44eb8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:9f:44:74:ae:e4:6d:1f:14:22:65:f7:1d:
                    af:f4:f0:b4:ec:6f:79:f5:5e:c8:c1:3b:89:22:41:
                    bc:9e:b1:b0:59:ee:0c:4f:86:df:6c:74:8b:47:59:
                    f7:bc:26:f0:63:f1:d5:fd:d3:4e:ca:2b:24:58:7f:
                    91:f4:57:65:46:29:6d:78:6b:49:5c:8f:a1:f0:11:
                    64:9a:39:e6:e4:a7:68:12:0f:54:3c:d3:0a:14:3c:
                    77:e4:22:54:65:d4:51:bc:2b:ae:7e:c5:a4:ef:da:
                    62:49:64:ee:9a:bb:a3:aa:14:ab:b7:85:c0:c0:22:
                    07:5b:f7:84:c1:f1:1c:5f:34:74:ab:65:55:54:d6:
                    fd:6a:5f:0c:5b:65:35:5a:98:2e:2f:c2:6a:ce:bf:
                    3c:0b:5f:be:a7:97:69:99:93:80:32:72:bc:fb:04:
                    93:46:bf:4e:8c:dd:e7:02:15:9f:0f:4a:28:84:d4:
                    fd:35:54:7b:5a:e6:80:59:ea:12:92:74:90:1b:95:
                    59:f9:7c:cf:51:5c:08:85:76:34:16:89:08:23:3e:
                    45:21:f7:36:23:ee:a4:83:3c:1d:a1:e1:eb:b5:08:
                    3f:46:5b:c4:c1:2e:55:09:e5:7e:b2:64:d5:77:44:
                    84:37:d3:8b:be:1d:92:05:70:21:54:e6:8b:a5:c4:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:8D:EC:0C:17:A3:71:36:92:B9:7B:2D:CD:D8:A8:A4:4E:B8:F0
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:63:2c:b6:1e:e7:86:c4:5b:4e:7e:89:6a:f2:64:db:39:
         09:5f:ef:a9:18:57:80:11:4e:f1:b0:fe:12:0c:1a:09:ba:e9:
         bd:e7:38:ea:bc:dd:0f:80:75:d8:f8:09:30:27:4a:9c:35:52:
         33:0a:89:47:d3:55:77:e4:97:7b:3b:a4:99:bd:29:6a:ec:d1:
         06:e2:04:d6:d7:6f:88:95:e3:de:67:91:3f:64:1e:cd:fc:b9:
         6e:95:a1:ef:e8:9a:bf:2c:1d:1e:f5:a8:d7:1f:ab:70:e3:10:
         e5:69:5c:6a:49:eb:9c:b5:37:83:25:43:32:7d:b8:7d:b9:10:
         df:24:e9:55:a0:6d:92:8a:25:c0:09:e5:93:ba:20:37:67:56:
         f8:e4:26:7d:b1:db:3c:0e:17:7a:18:78:16:25:ea:d8:41:27:
         de:17:e2:9d:4b:6e:3a:b5:bb:fb:ba:20:e2:f0:62:7b:b2:09:
         d6:93:e6:7d:6b:e3:76:fc:15:10:f0:63:66:99:cb:92:0d:f8:
         d2:14:b7:36:41:5b:e1:2c:0b:a4:a4:83:6c:af:c4:90:f1:04:
         66:6b:3d:fc:f2:94:13:50:64:38:ff:31:1f:76:7d:4b:d4:a3:
         4e:0e:f9:b6:13:62:5e:79:9e:b7:5f:5a:de:0f:bb:89:db:87:
         11:58:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----