Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File:                     2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier:          /UXQ1KGa4GtzMcXTuPlrKgjOMy/58zkthG0uSVlbWDU=
Subject key identifier:   EC:48:96:E7:55:10:AE:CF:1B:E7:4E:8D:A0:07:F3:64:83:66:B1:DA
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer:       /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial:       01962E618B247FE14C0CE18ADD3A48890028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: +688w8tW5ZB5bUuP+cL4dgGNoX9p1oWZT2cE8R85I1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:24:7f:e1:4c:0c:e1:8a:dd:3a:48:89:00:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=ec4896e75510aecf1be74e8da007f3648366b1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:f7:b1:15:70:1a:42:f4:aa:5b:85:63:ba:
                    47:7c:37:80:e1:20:8f:c9:54:60:d8:9f:1a:40:31:
                    24:2f:af:b9:8c:80:48:ee:e9:d7:e4:ff:44:c0:91:
                    1c:73:32:a2:e2:2e:1d:03:0d:4d:7c:6a:7d:84:e9:
                    43:08:a1:e1:29:3c:17:86:ba:62:98:6f:72:a4:44:
                    0d:e6:b2:9f:88:a6:c4:4a:97:50:ff:23:af:b0:39:
                    f6:52:14:b7:51:98:0d:d9:dd:4f:65:b6:28:0a:2f:
                    c3:23:69:17:69:8e:a0:3f:83:14:75:d6:fc:9d:83:
                    27:10:9b:0b:b1:29:3a:20:5c:a6:b1:92:5a:a4:13:
                    3d:f5:44:ac:4f:55:ec:78:a5:41:56:51:03:40:bd:
                    6c:5a:bd:49:d2:b7:07:93:30:e8:89:dc:e0:8b:e8:
                    a4:37:1e:37:63:3e:a4:0f:db:eb:31:b1:7d:fe:fa:
                    00:ce:77:29:f6:d4:19:e8:da:ab:79:0a:ea:af:a5:
                    a1:c3:94:69:eb:61:37:b6:0a:ab:e3:ff:cb:b4:7e:
                    bc:40:b4:a1:e9:71:89:f8:e8:db:ed:02:78:47:a2:
                    a5:cd:0d:34:23:26:e4:11:fc:57:93:0f:e7:d3:36:
                    76:35:47:25:55:b4:b1:f0:0d:9a:13:59:9a:c7:6a:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:96:E7:55:10:AE:CF:1B:E7:4E:8D:A0:07:F3:64:83:66:B1:DA
            X509v3 Authority Key Identifier:
                keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:fc:fd:6c:60:1b:ff:bc:44:ba:60:f9:f6:13:95:7f:13:
         01:f9:b1:15:7e:48:bf:c8:18:90:85:f5:79:5e:bc:62:7f:22:
         20:2e:cd:95:93:3f:35:da:63:4b:90:2d:2d:38:af:02:66:2b:
         e7:df:ea:6d:c9:5e:ef:ca:98:cf:1c:63:a0:12:53:0b:4f:b9:
         25:8a:be:6e:66:ab:c7:99:be:7e:62:5c:41:74:80:6d:6d:6d:
         c8:40:ad:99:79:e1:d3:8e:24:73:1d:5d:6d:74:d0:f0:62:93:
         65:8c:7f:77:4a:53:d7:20:d5:e0:6c:86:32:0f:b3:45:df:48:
         f3:9f:bd:11:8d:aa:cd:98:9a:01:87:d7:3c:c0:14:4a:9f:f3:
         d8:e2:e6:97:af:c6:3a:cc:c5:1f:43:d0:24:a3:f4:72:f2:58:
         45:67:40:b8:36:82:6f:1a:3a:15:82:7f:6d:86:a5:eb:3d:b6:
         89:c1:0b:c3:e9:0d:8a:de:28:cf:d5:04:bf:5d:de:6d:12:0d:
         4f:97:bb:8a:c1:23:c6:d6:1e:4e:37:93:de:dd:4e:57:17:22:
         ab:a8:38:c0:53:99:b8:65:46:6b:9a:16:c3:a1:93:61:e0:d2:
         cc:0c:7b:e9:a1:77:28:c0:8f:c2:63:ec:2d:2d:70:af:dc:b4:
         3c:4c:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----