Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
File:                     soehvthfaZtS-gaqGeUc8liPFLk.mft (raw, json)
Hash identifier:          KK/4AujICKNhmdKIThcJzW5Tncc/M+7WLBQkSktHO48=
Subject key identifier:   09:F6:29:AC:E4:FF:3E:21:8B:56:5D:AA:32:1A:80:C7:72:73:1A:77
Authority key identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
Certificate issuer:       /CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
Certificate serial:       01962E9984B41B19B3F947F3E59BF355BF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
Manifest number:          0F8C
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: soehvthfaZtS-gaqGeUc8liPFLk.crl (hash: nGIl4G2Pr4leQMJ3hKzEkZhRQ6jibObaMPUSQ6FlWeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:84:b4:1b:19:b3:f9:47:f3:e5:9b:f3:55:bf:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=09f629ace4ff3e218b565daa321a80c772731a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:df:d6:b1:fe:7f:03:83:f8:99:60:51:5e:
                    6c:0c:e4:e2:50:4b:35:04:28:02:d6:d1:14:6a:16:
                    c1:24:5f:a8:fb:88:fc:69:43:10:76:7e:5a:1e:9c:
                    bf:19:c1:64:97:3e:55:52:fd:ca:5c:d8:51:8f:5d:
                    27:c2:f6:f5:b6:25:0a:62:2e:2d:86:4b:33:8b:c7:
                    bd:9c:e2:67:39:f5:88:0c:03:65:4b:1f:e5:e1:39:
                    42:66:86:75:a4:ca:c0:41:95:c4:67:81:1d:45:25:
                    10:18:ef:5f:b8:6f:4b:64:68:53:5c:22:2b:cd:a9:
                    51:17:5c:77:97:27:29:2a:78:62:f5:d4:21:c0:3a:
                    38:7d:fa:20:cb:0d:30:a5:83:36:6d:a4:01:21:3e:
                    01:89:89:f4:c8:1f:ed:f8:04:9b:5d:47:39:3f:f2:
                    c1:9d:13:24:bf:85:b1:ae:58:a0:b8:18:e4:ec:e9:
                    9b:74:20:a6:ad:fd:59:11:f6:04:ad:d2:91:2e:a3:
                    39:ca:18:59:76:be:03:44:9b:ef:c6:3d:90:94:2f:
                    4e:43:dd:27:85:44:ca:7e:de:0f:43:d7:53:e6:e0:
                    a0:ec:5a:f2:0b:3d:7d:30:cf:c1:7d:5e:57:8b:68:
                    1b:33:29:70:b2:2b:c3:c1:80:bf:16:47:68:2b:50:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:29:AC:E4:FF:3E:21:8B:56:5D:AA:32:1A:80:C7:72:73:1A:77
            X509v3 Authority Key Identifier:
                keyid:B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:f4:0b:15:00:d9:40:76:65:68:20:74:e6:f5:3e:ea:d9:
         9f:76:1d:70:5b:bf:2b:44:87:9e:86:62:2d:fe:ad:ed:6c:2a:
         35:54:5f:07:8c:e1:0b:d8:67:90:a2:1a:b1:f3:0d:05:d7:53:
         05:f8:5f:e3:ee:27:58:f6:62:a6:f0:ba:c3:78:79:a9:cd:13:
         bc:e2:69:f1:c4:88:58:1a:ee:61:f5:e4:e3:25:7d:7b:b5:d3:
         07:72:d0:42:c8:4f:e5:e4:82:7c:5d:2d:29:ea:7b:d2:d3:04:
         7d:f7:b7:1b:61:d3:c1:15:30:1a:35:27:19:8c:22:d6:d5:8b:
         da:c2:34:2c:d9:b1:ea:4f:68:42:0d:9b:15:f4:ed:ea:6f:11:
         e6:4e:e3:b2:cb:43:44:e4:5b:19:46:14:d7:4c:54:95:3c:26:
         6c:09:94:22:0d:d2:2a:9a:29:d3:4d:1d:85:74:e7:ae:72:da:
         17:2b:44:fd:f4:c2:ca:54:f8:6b:b2:30:0a:24:e9:0d:06:c7:
         e3:4f:d7:8e:59:88:50:f3:4a:c6:cb:7a:20:08:5c:bb:3f:36:
         47:cb:61:0a:84:d9:68:2d:66:04:97:5a:23:c4:30:19:e5:de:
         ea:e9:69:46:17:6f:05:fc:90:a8:a3:11:c5:39:6f:a1:3d:dc:
         28:5f:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----