Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File:                     i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier:          x56X/IntJsWf62lZoXCy9S4DbNQd41wWNL6ckTrwDH8=
Subject key identifier:   43:F4:08:09:2E:B8:FE:76:9D:D8:D6:F3:8A:6A:37:84:F4:69:56:59
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer:       /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial:       01962E98D86EEAC125C5285D1F49E38AEDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number:          0C20
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: W/vPBuMO34SOj/pkJEccFfaCWL0Ava8oT/wnBPcoPa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:6e:ea:c1:25:c5:28:5d:1f:49:e3:8a:ed:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=43f408092eb8fe769dd8d6f38a6a3784f4695659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:13:a6:c9:7f:6b:17:4a:d3:3d:ed:0b:12:
                    bd:3e:12:6c:f9:42:95:10:86:eb:87:64:39:bd:69:
                    27:0c:85:00:a4:87:07:b4:81:49:63:15:6e:5a:63:
                    18:c0:67:39:3d:0b:72:d8:f2:52:c2:78:01:fe:4c:
                    7a:39:79:50:a5:b4:1a:92:c3:5f:7d:ea:97:47:b9:
                    28:ed:01:5f:29:55:6e:16:14:87:bb:55:e9:fd:d7:
                    4f:94:97:2c:b4:2a:93:18:1b:12:e9:3a:24:4d:4d:
                    7a:6e:0d:73:aa:07:cd:37:e0:a0:36:17:05:e9:0f:
                    2b:46:bd:b3:7d:13:74:86:a8:d8:8c:0b:ae:1f:af:
                    a5:80:48:d5:72:d4:e6:36:d4:ef:bc:c0:4c:52:cb:
                    02:34:32:7b:4d:1b:88:64:95:a5:e6:e2:24:ea:5b:
                    c0:f7:6a:71:ce:d6:dd:95:31:6b:05:02:86:40:ab:
                    9f:a0:06:2f:bd:a7:63:0d:6b:82:3d:b8:ee:32:10:
                    ea:c4:6b:71:da:e9:64:32:f1:4b:1b:f3:40:41:4b:
                    f3:0f:dc:b4:40:61:78:68:28:dd:25:42:98:a0:2c:
                    08:f1:ab:2d:a0:5c:f8:87:be:50:13:ca:7f:fc:5a:
                    ac:28:3c:e6:cf:3b:90:8e:3f:76:7c:42:9b:4d:2e:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F4:08:09:2E:B8:FE:76:9D:D8:D6:F3:8A:6A:37:84:F4:69:56:59
            X509v3 Authority Key Identifier:
                keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5e:30:13:95:bc:d1:56:45:32:d7:43:0b:60:51:42:49:6f:
         5e:3e:5f:b6:40:1e:82:91:ea:3c:c1:f1:fd:47:95:f2:2e:53:
         33:4c:e1:18:1c:d0:8e:93:3f:bb:7f:fb:eb:2b:cf:2a:8d:0a:
         9a:f9:70:0c:55:59:69:78:09:77:8c:7f:8d:2a:6d:7b:2a:ce:
         af:1d:09:21:d3:fa:88:8a:08:fd:5e:54:e5:f4:d8:bb:9d:74:
         de:21:3e:57:2a:04:a8:e6:32:56:3a:79:15:bc:fb:05:84:ca:
         7d:ee:5a:0a:e2:9a:0c:53:d7:ba:db:a5:d6:10:6f:91:7a:91:
         21:2f:20:41:b2:99:cb:85:a0:0d:75:52:d2:3a:4e:cf:22:57:
         c1:c1:ec:7f:aa:59:79:f4:79:40:6b:4f:0d:ac:4b:51:6b:1a:
         b2:75:db:00:62:59:04:f7:b4:60:4e:6d:24:8b:c9:4a:db:41:
         18:2a:97:8e:f0:71:c0:05:ca:5c:ca:b3:a2:22:75:04:b2:e7:
         e7:f6:01:ac:b5:26:81:f3:09:af:2f:16:ba:fd:0b:67:92:36:
         62:92:b7:4d:e6:52:99:68:3a:f7:e1:27:34:92:eb:12:ab:01:
         d2:19:98:19:bd:d7:d9:e5:d9:3b:e9:0d:c6:8f:cb:1a:45:c8:
         2f:84:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----