Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File:                     8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier:          0GYmvvW670x8IBWd/RMN2KGY9N/oRKl3Uo+BvsiwMEk=
Subject key identifier:   39:E1:0C:AA:01:EB:23:F8:04:35:2E:E7:13:90:80:A3:E9:C3:6B:56
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer:       /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial:       01962E99BB44E3EBA606E32149C7ECF71DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: 9O/7D8GWRp17VvryczJ8mcxMEz0/CD/awIzdW1oRRKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bb:44:e3:eb:a6:06:e3:21:49:c7:ec:f7:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=39e10caa01eb23f804352ee7139080a3e9c36b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:5c:5d:67:34:eb:4a:40:d3:65:aa:7f:76:
                    4e:46:11:80:a2:36:aa:bc:cc:53:b0:5a:fa:98:9e:
                    f2:bd:c4:7f:39:a3:8b:d2:e1:e3:59:12:99:47:4f:
                    b2:47:aa:b9:12:ff:11:29:74:dd:7e:a2:b6:c0:31:
                    c5:9f:4c:cf:64:8c:5e:2c:72:cf:af:0e:29:f2:d2:
                    30:d5:41:8d:a3:e1:c4:ad:e7:6d:64:32:aa:c4:64:
                    af:0d:b3:29:f9:3c:f7:e1:e9:48:6b:96:f3:19:c5:
                    38:88:e0:57:15:bf:75:6d:41:c6:17:fa:96:7d:6f:
                    4d:7b:02:16:b9:76:fd:fe:d9:38:e5:02:87:59:82:
                    ba:2b:9a:9c:bb:e6:a5:db:75:0a:78:79:e7:ca:ad:
                    59:fc:e8:be:b4:4c:61:ed:a4:31:27:9e:27:34:52:
                    79:23:5e:e5:45:b4:01:4a:1f:1d:09:a4:73:1b:6c:
                    0f:64:68:d9:4e:0a:fd:0b:5a:41:d1:19:0e:e0:8c:
                    81:7d:2d:c4:c3:7c:b3:06:37:e2:e6:f9:31:22:38:
                    91:eb:a5:16:74:ef:08:cb:cd:fc:60:99:37:69:ff:
                    98:fa:87:80:f8:0b:54:4b:e5:cf:d9:95:52:d5:2f:
                    86:1b:e9:ac:14:5a:ab:fa:ef:7d:2a:e5:a9:9f:cb:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:0C:AA:01:EB:23:F8:04:35:2E:E7:13:90:80:A3:E9:C3:6B:56
            X509v3 Authority Key Identifier:
                keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:4d:2e:19:dc:e2:f0:61:3f:1c:f9:49:c7:5e:ca:1c:d9:
         2e:09:9c:4d:ce:d2:bf:af:c3:f5:48:f8:ee:8b:86:5c:db:b5:
         0d:c2:ce:c6:8b:a6:d4:02:70:e7:c3:df:d9:b0:0c:77:78:a9:
         bf:72:74:2a:36:89:90:a1:07:1b:45:90:61:24:a7:53:5b:84:
         26:11:66:6a:99:dd:cd:20:ad:34:c7:78:58:d8:eb:ed:17:28:
         7b:05:a0:dd:ae:bf:15:7a:93:3c:1f:42:87:46:1d:37:e8:50:
         2b:e8:74:7d:78:a5:66:32:8b:18:dc:0d:63:93:18:aa:99:7e:
         95:66:c7:1c:a2:10:66:54:ab:ad:af:41:83:0a:6d:87:c2:9b:
         8c:ec:d0:ce:07:e1:cd:16:e0:82:5f:4e:63:09:fe:a7:40:ec:
         87:84:05:2f:7f:71:81:7a:d3:aa:bb:41:04:ba:82:3a:70:ed:
         be:ba:f7:19:75:d0:52:03:f4:68:78:a3:27:d3:ab:e2:ee:96:
         e5:96:ef:46:dc:b3:8a:96:74:9a:e6:ac:c6:e9:93:12:cd:a6:
         27:c6:7b:f0:fc:44:1b:99:01:09:cb:cb:c4:06:c3:a9:ba:48:
         27:bb:14:db:91:e4:40:20:f9:94:df:77:38:3d:b9:b3:e2:11:
         dd:77:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----