Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
File:                     1mgN10jNpt4SlOof13ZbMmxnEOI.mft (raw, json)
Hash identifier:          sHov5artr4WsFLmvoe2DE3yxPNZsyTdaBMqF4d6xuzU=
Subject key identifier:   C8:64:0E:C1:56:A6:57:09:68:F9:5D:4D:45:4B:14:8E:48:B2:A3:39
Authority key identifier: D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2
Certificate issuer:       /CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
Certificate serial:       01962E99ACEFC5B91E958612E20BD5C9F6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
Manifest number:          0B19
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: 1mgN10jNpt4SlOof13ZbMmxnEOI.crl (hash: G1PmZZdHkFPapwvBzVpYv7g4hxjGdDZRNAKG9jf9/b8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ac:ef:c5:b9:1e:95:86:12:e2:0b:d5:c9:f6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=c8640ec156a6570968f95d4d454b148e48b2a339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:00:30:24:f5:30:1b:cc:43:f7:3b:86:f7:
                    1e:5f:05:bb:6f:58:ec:83:8b:c1:65:a6:dd:86:c6:
                    e2:df:61:57:d4:56:08:a0:14:af:f3:c4:c7:44:e1:
                    b2:87:31:14:4a:a9:39:bb:c8:8b:98:b0:1c:f6:df:
                    c5:60:5a:b5:db:4c:26:54:4d:f9:7a:ad:b7:f1:0d:
                    9e:fc:d1:1b:a1:b0:9f:eb:18:da:f6:a7:78:76:e8:
                    a8:a4:d8:01:e1:b2:b3:68:ee:0c:2a:1c:77:47:30:
                    bc:6d:64:1e:69:a3:cc:07:f9:8a:8f:fe:6f:a5:02:
                    bf:e2:ad:e7:96:a1:6b:10:a2:cf:ef:bf:01:7f:4d:
                    00:75:a2:99:59:cb:45:2f:51:b5:65:8c:7e:27:82:
                    f1:dc:4a:63:5f:b3:f8:3f:be:95:2d:66:c0:72:ac:
                    57:b1:79:65:7b:f0:a7:63:27:c9:0b:16:2c:4e:bc:
                    a1:40:a7:64:6e:a3:c6:b7:05:74:3c:60:00:61:36:
                    3a:9c:df:27:f0:67:ee:9b:c1:7c:0d:5a:d7:93:53:
                    31:e5:d0:9d:90:ef:aa:de:1f:06:96:39:10:d4:6d:
                    1c:a1:88:b2:af:56:5e:0b:26:62:d0:58:7a:92:3d:
                    37:19:0f:21:de:a3:c4:e5:2c:6f:ac:62:8e:42:6c:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:64:0E:C1:56:A6:57:09:68:F9:5D:4D:45:4B:14:8E:48:B2:A3:39
            X509v3 Authority Key Identifier:
                keyid:D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:6d:65:88:36:00:23:f7:2f:8f:88:38:8a:f7:3b:33:0d:
         ac:00:e7:9b:cc:94:d5:f9:45:ff:76:f1:4b:95:ae:b4:2b:d4:
         d3:84:d4:43:d4:1f:0d:9c:9a:c5:22:37:71:70:69:a3:cb:e1:
         9a:e6:a8:5a:fa:5b:c9:24:7e:a7:fc:6d:f2:00:e1:3d:15:67:
         7f:d3:e6:d4:6d:b5:50:5f:48:74:28:a2:21:69:66:ac:60:f3:
         70:15:08:3a:c9:e6:c3:40:b5:c9:fe:47:30:be:bf:fd:b3:3b:
         46:9e:3e:c4:59:39:30:90:fc:e2:46:12:6f:2c:52:dd:8f:9c:
         a2:97:69:5a:80:dc:fb:78:43:17:0e:8e:ed:16:30:39:9d:ac:
         bd:e3:88:f4:e4:25:15:64:fd:67:a4:ff:b7:3b:6b:09:b8:1c:
         cf:00:bb:3e:e6:04:2c:3c:ec:c1:fe:d3:5d:f9:21:31:80:6a:
         55:3a:94:fd:71:38:5b:5b:36:8f:2c:3f:db:36:9d:2d:8a:64:
         25:49:99:e0:93:e5:b8:60:d0:f3:fd:1e:c8:4b:9c:22:90:14:
         42:80:68:af:e5:fb:a4:e2:5e:50:c2:79:b6:1e:77:7c:b9:7d:
         ca:5a:34:9a:64:9e:ad:32:ac:c8:66:38:9f:9c:0e:07:3d:3d:
         9f:4b:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----