Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File:                     0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier:          ler96qnlimLIaFCH25le7Vsu/BW3yPrKILpnxyPJ3eA=
Subject key identifier:   A0:01:01:F2:B4:D5:C2:43:EE:EA:64:08:7F:4D:B1:DD:DF:9E:F8:27
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer:       /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial:       01962F7460ABA8AC992733531D9E6D78072D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: /RPBZKeFGlGggKsBYZxzhF2XpT2ttnMFo9PwOawNFrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:ab:a8:ac:99:27:33:53:1d:9e:6d:78:07:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=a00101f2b4d5c243eeea64087f4db1dddf9ef827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:8e:05:82:a1:0e:00:5c:20:c1:3b:1a:4e:
                    9a:c4:81:cb:f3:99:9d:31:32:4e:10:d8:22:d7:94:
                    af:08:c1:fe:46:4b:27:4f:43:cb:6b:b8:35:97:c2:
                    2e:1a:0c:2e:17:14:63:04:12:b3:c8:7e:5a:67:6a:
                    16:5a:1b:82:3f:b0:f7:08:37:f6:eb:b5:e8:24:84:
                    64:ee:2e:e7:ca:2e:e0:07:d4:49:81:8c:dd:82:ac:
                    7b:c0:ac:aa:f1:b4:27:a3:e2:9f:46:c7:93:52:f2:
                    b4:63:c7:62:53:b2:d7:d8:06:44:97:e9:77:f6:39:
                    b2:7d:b6:7c:e7:72:dc:b3:bf:cd:cf:c5:34:8f:95:
                    50:ab:75:b5:80:cf:97:7c:6f:73:d7:5c:e7:40:c4:
                    b8:c0:09:bf:97:96:c9:f7:94:98:d5:6d:54:6f:b8:
                    65:95:da:c6:79:42:9c:88:29:b0:eb:a1:22:4f:61:
                    82:49:d4:9f:6b:56:9b:3a:1a:02:c1:19:94:7a:67:
                    7a:65:38:3f:61:64:3c:ce:4f:de:75:25:3f:5c:cc:
                    5b:b3:81:77:db:46:f9:ec:9d:7d:5f:af:d6:95:85:
                    3e:4b:f3:a1:2f:af:de:41:34:7e:af:d9:22:b8:35:
                    00:0b:ca:75:7b:88:16:f6:94:0f:72:49:ca:67:08:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:01:F2:B4:D5:C2:43:EE:EA:64:08:7F:4D:B1:DD:DF:9E:F8:27
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:d0:9b:66:48:be:36:ab:48:93:95:7a:7e:b0:3a:a6:5e:
         ec:fa:cd:70:1a:8b:37:88:0a:0e:b8:b9:53:9e:b6:5c:b7:90:
         3f:ed:aa:46:c3:85:a3:41:e7:a2:c7:4c:15:fe:1b:3c:ba:ab:
         bf:b2:d8:76:43:67:36:0d:5e:f4:8f:65:67:c5:1e:b9:f6:9a:
         93:8f:11:35:99:fd:f5:8e:d8:85:79:e7:50:fe:8c:ed:6f:8c:
         a1:46:7c:55:82:4c:27:49:52:53:18:38:76:73:2b:95:0a:5e:
         3b:bb:44:a4:0a:a6:2e:e4:5d:e8:ba:bc:0f:0a:08:c1:d9:e5:
         63:c3:0a:38:b9:e9:90:a7:e7:e6:15:4e:e9:bb:98:f8:b0:a5:
         49:7a:e1:57:c9:4c:86:7f:e5:be:df:bd:24:40:eb:19:4a:09:
         d7:87:c5:b6:67:dc:33:01:bd:3b:96:50:73:16:08:9a:d1:b5:
         9f:14:4e:2e:15:0d:7d:f4:1d:37:b1:18:84:0d:bd:d9:2f:05:
         1e:c9:fa:06:af:8e:20:87:43:aa:78:09:99:1a:40:68:64:2f:
         1d:87:cb:88:e8:23:5f:49:2c:dc:98:9e:fc:36:3e:08:9f:2b:
         3b:84:a2:3c:2e:70:55:b0:02:dc:95:ac:77:b1:83:57:16:67:
         6e:07:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----