Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File:                     inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier:          G4hhyhY2e49CjPU/Ew3oLI+1PWG6wAC2Uk3U8/WMuRk=
Subject key identifier:   23:5B:F0:E7:DB:AD:EA:04:A5:52:EF:6A:BF:5E:56:88:67:3A:B5:F7
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer:       /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial:       01962F74E9BE659A5951B0E59E3C81C14EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: z/xr7RQLTOU4UZTgxO3xpAKKS9GJem6j09zyMiFKPCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e9:be:65:9a:59:51:b0:e5:9e:3c:81:c1:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=235bf0e7dbadea04a552ef6abf5e5688673ab5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:0e:34:3e:2e:af:76:d7:29:46:b6:eb:53:
                    f8:68:39:38:f0:2d:04:25:cb:14:7e:c8:5f:7d:5c:
                    16:7b:72:54:67:c1:93:ba:28:68:4c:ea:10:e1:41:
                    8e:2f:c4:ff:70:ae:a7:d1:8f:c7:fc:79:26:a2:c1:
                    e6:08:e7:e8:d0:d7:ae:df:8c:64:66:73:57:d6:ca:
                    45:69:64:64:d6:e0:ea:46:17:f9:59:44:c7:ec:da:
                    04:b7:fe:fa:32:60:28:08:f6:03:2a:45:4b:16:44:
                    a8:d7:b2:a4:d8:03:76:8b:43:b5:21:b1:fd:be:59:
                    9a:53:32:7a:8c:42:df:65:2c:82:2d:7c:52:c1:38:
                    b5:50:37:8c:07:8a:94:7c:ec:ba:b3:94:ec:9c:d3:
                    70:02:cc:4f:61:0c:69:7e:31:6f:23:04:54:ec:d2:
                    d9:51:00:6f:b2:11:7e:2a:0a:1a:04:2d:d4:aa:4e:
                    f6:7b:e0:6d:ca:03:9f:33:14:2a:9f:d6:8a:38:bb:
                    13:2d:6e:04:9c:eb:9b:c9:8b:76:e0:55:1e:8f:91:
                    b1:44:01:be:64:4c:31:40:94:7c:f3:97:ee:1b:a8:
                    3a:f8:e0:0d:96:be:50:53:7c:d4:8a:b7:3b:80:83:
                    c1:64:a4:0d:49:bc:cb:15:15:7d:b4:99:3d:c8:fc:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:F0:E7:DB:AD:EA:04:A5:52:EF:6A:BF:5E:56:88:67:3A:B5:F7
            X509v3 Authority Key Identifier:
                keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a6:70:db:ef:2b:09:5c:73:d1:76:47:dd:75:b7:3d:56:67:
         c7:b6:38:95:ef:40:77:13:c3:dc:1f:9e:ab:ea:07:60:c8:06:
         7b:61:03:db:ec:3d:2b:eb:97:34:e5:50:7c:38:d0:79:d7:4b:
         24:f2:73:84:53:13:18:ef:d0:86:f7:bf:49:3e:87:ac:5d:2b:
         b0:98:8a:9d:32:c2:bd:67:08:15:c5:83:37:1a:2b:b2:6c:af:
         df:29:8c:2f:ce:2e:de:1c:e1:54:8f:fc:a2:17:18:05:d5:03:
         77:b4:9e:ec:03:2d:f3:0a:e6:05:06:f4:dd:d5:17:83:dd:ed:
         ee:2c:26:9f:ff:23:f5:11:6a:40:7b:4d:e5:36:17:bb:b2:4f:
         c4:f9:fe:9c:3f:38:d2:26:13:25:8e:01:cc:24:5a:6e:90:0c:
         24:44:97:78:8e:1e:6d:d1:b0:1e:54:76:82:a2:4f:98:83:1e:
         05:7d:3c:a0:25:fd:df:99:b3:7d:65:27:3b:95:f3:92:b1:ad:
         dc:8a:30:2e:ff:3d:c0:86:9a:05:d1:ba:fa:b4:4f:71:0e:2b:
         82:d9:e4:aa:3c:93:9f:51:1e:42:dd:41:79:0b:4f:ba:29:f2:
         2a:fb:6e:b7:3c:65:cd:c8:e3:90:26:a9:13:bd:f2:38:f7:4a:
         2a:f6:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----