Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File:                     8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier:          ngcUKLyUUTPEIAHsSzVSI5Ve2h+cBzQNE24Sll4JaHE=
Subject key identifier:   A6:21:57:B3:79:B6:FB:52:0B:15:69:2F:F8:E5:48:88:6F:B5:AD:14
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer:       /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial:       01962F06E2D62DF681F4DA789362ABBA1ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number:          0484
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: Ady9JnZMASKS2JNaSUI5fwdaKw84X3RQa0d+yL8mbsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:d6:2d:f6:81:f4:da:78:93:62:ab:ba:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=a62157b379b6fb520b15692ff8e548886fb5ad14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:dd:d5:9a:98:6a:8d:69:6e:ae:9e:6e:4e:
                    86:63:6f:66:fb:a3:28:86:63:b9:7a:26:48:e6:c3:
                    16:f0:20:46:a2:bf:e3:bc:cd:45:57:9c:78:b0:32:
                    f6:e5:0e:26:12:19:31:64:0c:fd:45:c0:00:92:ec:
                    f9:4c:d7:55:37:f5:13:bf:e6:e2:df:2e:b8:36:a0:
                    f3:c1:d9:e8:0f:21:29:ce:f0:b8:07:5c:81:3c:02:
                    37:b6:43:41:26:7c:fc:35:75:c3:fb:94:78:fd:27:
                    d0:23:7f:d1:6d:10:fe:32:ce:4f:5a:43:e6:28:a3:
                    81:4f:b1:93:07:51:8b:6e:7e:c6:d9:e5:82:d2:4f:
                    37:c5:c0:62:59:8c:b9:c0:aa:29:4a:70:79:99:6f:
                    d8:9d:40:3a:03:a7:77:8f:3e:d7:57:5c:bd:bf:64:
                    f6:32:72:bb:a9:78:9b:5d:43:ec:00:1d:7d:2b:d8:
                    28:34:54:1a:91:6b:44:06:55:da:48:6e:40:63:7b:
                    6f:a7:e4:5a:b8:13:83:d3:d3:f7:10:f2:75:48:2e:
                    e2:df:f9:10:b1:48:c4:de:a5:83:0f:38:75:0f:0f:
                    29:02:9f:74:93:eb:59:59:ff:a9:2f:13:e0:8f:87:
                    ef:6a:ba:4f:a9:cf:20:9a:ee:74:aa:46:03:24:80:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:57:B3:79:B6:FB:52:0B:15:69:2F:F8:E5:48:88:6F:B5:AD:14
            X509v3 Authority Key Identifier:
                keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f9:70:40:0e:3f:5a:9f:21:ff:b6:ae:64:ef:22:a7:ab:77:
         25:9f:c5:88:e1:91:93:fd:ee:41:a7:ee:94:a1:8c:8f:89:1f:
         03:84:ec:83:c2:fb:03:28:86:f5:cb:39:b0:ec:b9:95:ad:85:
         75:7b:4f:89:ea:b9:95:bf:e5:cb:03:c4:a7:c3:84:37:8b:37:
         ed:fd:7d:92:5a:b4:4c:29:c3:9e:69:9d:8b:54:14:64:91:1e:
         8f:fd:dd:3e:ac:c1:51:74:ab:a8:1e:0a:1c:85:c3:60:23:53:
         a1:2d:2a:a7:6f:7f:3c:11:3c:9b:3c:bc:78:13:52:f6:b5:18:
         c1:01:89:9b:64:4a:f0:50:ba:5b:0d:f8:bd:51:9f:c9:2a:13:
         88:27:d6:94:3b:e1:ae:f3:5e:ed:1a:cf:71:9c:5a:c9:0a:cb:
         8a:f9:01:49:c5:1f:a6:c5:a5:63:78:50:99:ce:86:13:32:cb:
         56:6e:cb:70:01:7f:1f:00:1e:47:ac:55:d6:54:de:12:42:a3:
         8d:cf:64:cb:5d:3d:49:b8:7c:1f:6f:62:7e:18:ea:d4:08:74:
         61:60:00:32:60:cc:9f:80:1b:04:48:cf:41:69:76:8f:1c:53:
         d0:75:10:eb:87:eb:bb:5e:5a:5c:c3:b6:1c:6d:a2:a5:c8:96:
         69:70:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----