Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File:                     r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier:          p54yPoHpMo8BBd42Gvc5h5Aag9zyrv97lfi2Q9Un5hg=
Subject key identifier:   28:EF:99:BE:DE:D6:8A:FC:5E:8D:CC:DD:DF:D2:89:F8:8D:EB:0B:A2
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer:       /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial:       01962E99BD8EDB0AABD95E3D9F4535450111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number:          0B0F
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: UM3tf8W+yYNBIPEMm82arESumE6SAN80gN65fjlEslE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bd:8e:db:0a:ab:d9:5e:3d:9f:45:35:45:01:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=28ef99beded68afc5e8dccdddfd289f88deb0ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:42:cd:af:b1:68:62:95:5b:9c:8e:ef:42:
                    b3:19:af:ce:fb:04:06:01:ee:b8:60:97:fb:c3:ce:
                    3c:80:85:8f:75:63:7b:a7:5b:6d:1e:0d:aa:24:b0:
                    bd:05:73:cb:5e:18:4b:f4:e8:17:4b:7a:fd:2d:06:
                    5f:18:c5:a3:bb:56:f0:18:2d:7f:ff:4d:9e:2c:9e:
                    8a:8a:07:f7:ae:49:0d:b4:4a:14:5d:70:e5:af:ce:
                    aa:5a:0e:38:dd:1a:46:a6:0e:30:a0:67:51:bd:0d:
                    54:9b:4c:b1:a4:f4:d0:c4:4b:70:9f:0d:06:a2:ee:
                    9f:2e:1a:b8:d1:79:36:bd:f5:b1:d2:c9:a9:5b:95:
                    72:81:1e:92:a9:49:b7:a4:e4:a3:c7:dc:7d:6e:c1:
                    8b:8e:8c:b2:91:3d:8a:8b:f8:d8:cd:a3:36:f0:5c:
                    f7:94:47:22:ba:d0:d5:f5:73:06:07:3e:cf:21:f7:
                    67:28:a8:72:9a:96:a1:e2:27:28:88:59:2f:47:e7:
                    e3:f4:16:c6:92:d9:4d:02:a4:1e:82:98:2e:ca:24:
                    23:a0:c9:aa:4f:4e:4f:64:b8:60:ec:bb:b0:09:76:
                    89:fd:93:c4:7d:52:e5:75:2e:0b:8e:cc:7a:8c:ac:
                    d4:25:e2:aa:57:86:71:a0:ea:b4:19:3b:ad:ad:90:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:99:BE:DE:D6:8A:FC:5E:8D:CC:DD:DF:D2:89:F8:8D:EB:0B:A2
            X509v3 Authority Key Identifier:
                keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:0f:9b:88:10:a5:56:99:64:6b:6e:97:89:4e:ab:89:10:
         d1:61:c7:dd:ec:0f:65:f4:88:9f:90:22:c7:21:46:b2:95:57:
         3b:ad:b7:48:5a:f7:03:16:8e:bf:7b:1c:cc:79:9b:aa:67:bc:
         fd:4a:b6:37:75:da:f0:23:1b:b9:97:19:e8:17:14:89:c0:2b:
         c5:95:30:c1:99:0b:8e:6a:2c:59:a4:4f:04:d9:93:83:97:85:
         5f:e9:0c:f6:ff:51:67:7c:32:21:fb:ec:5a:94:17:1b:23:ea:
         b8:88:37:3a:73:30:fe:c3:89:9e:23:ec:d6:6b:3b:cb:31:42:
         83:2a:0e:71:59:14:08:fe:0a:5b:ad:6e:fe:68:eb:09:ac:e3:
         f4:48:22:ae:36:56:8b:19:9c:f4:cf:34:c3:71:60:1c:22:16:
         db:cf:62:5e:f2:bc:a8:e8:6a:8f:78:61:14:83:5f:c3:ed:75:
         e3:8e:da:aa:0c:c3:e1:b0:a2:ae:9c:e2:5e:96:ad:70:cb:18:
         e0:d8:b2:fa:09:66:0b:cd:d0:1e:88:7f:d6:fd:a4:8e:df:14:
         76:f7:51:05:b6:d5:1a:2e:ef:96:7a:16:ad:b7:7b:47:7a:f9:
         3b:7b:71:a1:c8:d7:42:dd:9b:35:8b:0d:6f:d1:4b:57:de:89:
         37:7c:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----