Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File:                     I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier:          VqyCNi1jTL9FTpZCG4r2n0vNWzD7FyIsEnLPGGni0BM=
Subject key identifier:   68:54:42:D9:DC:93:27:1B:1A:FA:6A:CA:31:5B:DB:79:73:DC:C2:0E
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer:       /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial:       01962ECF88CB0DAC900EECD7FA6059D1A762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: hGcQOKf2xhWT1jHP4sFDpH9qKcro1pzV+PRR7vDMzD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:cb:0d:ac:90:0e:ec:d7:fa:60:59:d1:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=685442d9dc93271b1afa6aca315bdb7973dcc20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:d8:6c:01:7c:c7:c6:cb:9c:b1:a9:74:e5:
                    4a:d3:d9:60:43:4d:55:31:40:73:80:7a:41:11:af:
                    a0:5f:40:46:b7:32:f6:d6:25:b3:5d:dd:76:55:69:
                    d1:bb:db:dd:a8:f2:2e:f7:74:7b:c7:4c:8a:07:9b:
                    a1:ba:41:78:20:b6:09:13:b2:b6:20:80:10:70:b3:
                    3c:0b:2d:c0:09:c0:a2:69:f0:e8:e5:5d:dc:60:f9:
                    d5:89:12:b6:c6:ae:c6:3a:8f:ca:f2:48:04:5f:11:
                    6c:8a:ef:5c:09:cf:fa:7a:b2:74:eb:91:3a:e8:47:
                    e3:51:b8:06:ec:73:ec:13:82:38:8e:b3:ad:f3:1c:
                    b6:c0:1c:1f:53:a0:dd:8a:3e:65:b7:d1:35:dc:0f:
                    6c:d8:69:b9:4a:99:24:8b:55:cc:b4:9c:6f:4f:ea:
                    be:28:4f:78:2c:b8:3a:4c:1e:5f:dd:0e:c2:68:61:
                    ac:48:99:0b:32:99:e3:8f:5f:b1:75:c5:97:b2:6c:
                    43:c2:48:8e:49:75:8a:ae:ed:35:b1:97:27:77:02:
                    57:cb:f5:2f:82:2b:b4:9d:66:6e:55:53:01:cc:47:
                    df:d3:8f:00:4b:b1:c5:1e:63:7f:e1:0f:63:c1:38:
                    c0:e2:f9:de:04:06:a8:b4:63:5d:e1:6f:04:c4:9b:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:42:D9:DC:93:27:1B:1A:FA:6A:CA:31:5B:DB:79:73:DC:C2:0E
            X509v3 Authority Key Identifier:
                keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:39:c6:4f:0f:b9:d8:4f:df:90:f7:15:0e:d0:02:ce:f8:
         0d:5a:5c:b3:f0:11:ad:80:73:06:22:d3:ff:78:39:02:e4:9e:
         2f:b4:cb:35:2a:1d:50:7e:21:ac:5f:a4:56:6d:9e:65:5b:fa:
         0e:e0:b3:e3:5c:3d:61:3c:50:dd:28:1e:e2:f7:71:78:4d:5a:
         98:ec:33:8f:42:9d:f2:6d:1c:39:fc:d3:a5:2c:63:40:fa:c3:
         51:87:d4:05:4f:d3:2f:75:13:3c:aa:63:2a:e4:5d:8c:99:90:
         94:b7:51:b3:dc:8d:8c:e6:ed:73:d1:62:4c:5a:eb:c0:ac:c6:
         53:35:82:d3:18:e6:f5:55:85:7c:a6:66:27:59:60:f5:c5:fa:
         5e:33:e0:b6:3b:55:d4:30:75:25:7d:62:8e:19:b6:e3:52:ac:
         5e:50:35:5f:a4:63:ba:73:db:a0:c6:d9:a0:1e:b2:35:c0:31:
         b5:1a:ee:ee:63:0c:69:26:07:85:a9:99:a1:8f:5e:73:d6:6d:
         7f:fe:22:0b:59:0a:a7:32:6b:97:4a:50:c5:41:8c:3d:89:42:
         60:c3:49:ee:55:0e:d0:ff:84:98:a3:9f:f8:75:ff:db:01:ef:
         a0:da:a7:7c:de:cb:bb:5b:cc:01:9b:f6:45:56:19:a1:ff:ce:
         8e:d4:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----