Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          ptV1t+XGVhbBi5cqxV3Zbx+QgnxHAbEK3MaTNhN7AJI=
Subject key identifier:   C9:12:55:2D:AC:5F:6E:1B:D8:AD:A0:2C:1F:09:94:69:96:5A:74:1B
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       01962F067345F03B3C7B2E14F2E3CAB6171E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          030F
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: zg/yhXtfyQdc2Ohr8AIqi4Cp5vC7MCq8u3alnm7PpB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:73:45:f0:3b:3c:7b:2e:14:f2:e3:ca:b6:17:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=c912552dac5f6e1bd8ada02c1f099469965a741b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:e3:85:07:08:9c:a9:88:1e:f2:2d:87:bb:
                    79:a3:9b:de:63:81:88:ec:b0:30:46:79:03:e4:ed:
                    43:e2:e3:68:3a:cd:91:14:8a:a2:57:64:22:2d:ea:
                    1d:bc:5e:6a:b4:9e:73:b8:e8:56:fa:96:71:06:5b:
                    7c:3f:e3:4e:78:57:b1:00:17:b9:67:63:73:32:f1:
                    b5:ba:d5:0f:b7:35:87:d8:7d:bd:9a:95:0b:04:b1:
                    bf:46:ed:4a:aa:b7:f6:b6:56:93:50:84:de:36:38:
                    13:7e:81:14:91:da:10:5e:ff:82:bf:2e:b0:13:b7:
                    22:d3:9a:42:e7:a0:37:ef:34:a2:be:cf:65:4e:0f:
                    3b:f9:af:0a:02:24:f3:8d:af:a5:25:5e:e5:02:0a:
                    35:92:63:60:78:92:65:44:cc:90:7b:8b:1b:76:72:
                    51:de:f2:71:f7:33:52:01:2a:9c:7f:3f:19:5d:d5:
                    80:1f:80:01:06:b2:68:4e:f1:ac:37:00:51:70:fb:
                    10:14:42:a0:7b:df:2a:68:d0:6f:42:3e:cd:a5:0d:
                    45:7a:a5:d7:fb:76:74:8b:4f:55:30:34:a4:07:74:
                    1f:5d:c1:c5:41:ee:ba:a0:9d:ae:51:a1:c5:7b:b0:
                    5c:51:55:6d:6e:3d:f3:cd:16:da:d1:48:a5:96:42:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:55:2D:AC:5F:6E:1B:D8:AD:A0:2C:1F:09:94:69:96:5A:74:1B
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:be:e8:a7:09:c4:9b:f7:d0:5f:2d:dc:df:49:c7:17:2b:
         69:36:74:b4:7d:da:b5:55:49:05:e1:4b:84:0b:7c:48:4a:7d:
         fc:b9:ad:21:65:b9:c4:3b:a0:34:27:fc:8b:d9:59:85:16:ed:
         ac:37:75:4c:d4:1d:da:b5:06:0f:03:4f:8b:06:7b:03:41:f0:
         fc:bd:76:49:da:37:2f:f8:b7:d3:ae:ff:96:3d:c3:89:95:59:
         cd:19:3e:c6:ac:ac:ae:b0:05:65:80:c0:05:3a:e5:1b:66:f3:
         c5:e2:72:98:72:b2:29:68:8f:0d:14:13:f1:3b:86:54:11:5c:
         23:91:74:5f:53:18:0b:82:d3:f0:c9:32:22:e9:cc:28:8d:99:
         5f:c1:56:10:19:05:df:f8:33:4d:02:39:12:72:37:86:d2:59:
         6c:20:a2:a0:09:f6:79:9b:e3:e9:ea:ad:7e:ba:a7:2f:70:4f:
         30:c9:6d:12:46:fe:fa:87:29:30:b5:0b:5f:e5:4b:24:d5:df:
         91:48:1f:15:c0:90:5c:85:84:8d:a5:8c:e2:3f:a8:b0:a5:b8:
         85:f9:ec:a5:16:1e:ba:b4:7d:96:ab:90:b0:2e:1e:4f:52:f4:
         3b:1d:5e:41:6f:11:e4:ed:07:da:30:34:34:49:2a:b5:15:52:
         9f:40:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----