Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
File:                     Mh6FAflfcDdNRXa5sM1VW68fNas.mft (raw, json)
Hash identifier:          osTP8LyNUPyzOTzDuL7pO0cuDRSTay9S6A7FJ+RHmRQ=
Subject key identifier:   AE:96:AC:AD:13:F1:99:07:D6:96:F1:5E:19:09:14:BF:A6:0D:71:20
Authority key identifier: 32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
Certificate issuer:       /CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
Certificate serial:       01962F74882976810627FB065F059E98B059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: Mh6FAflfcDdNRXa5sM1VW68fNas.crl (hash: nhcCUo7waaAsjzaaCKV184oTnZl/LZoEjWzJkl+xVG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:29:76:81:06:27:fb:06:5f:05:9e:98:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=ae96acad13f19907d696f15e190914bfa60d7120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:39:6c:3d:0e:ff:4f:c4:2a:a1:7a:e1:b3:
                    9f:75:51:a3:33:a6:0e:88:4e:67:76:bd:f1:0e:21:
                    61:b9:24:43:e5:40:b2:c6:fd:dd:48:be:ae:7f:f6:
                    1b:3c:37:16:c5:4d:13:ce:55:87:46:aa:d5:12:a9:
                    28:96:d9:73:51:0d:e7:bf:39:4d:6d:33:c5:19:3e:
                    62:ea:ca:54:43:f3:16:8b:a5:97:e8:4f:1b:17:b0:
                    54:7e:b5:7a:05:5c:09:a6:15:d8:da:3e:4a:2b:44:
                    7d:14:f4:1a:99:1a:78:19:60:f5:37:16:9f:ec:58:
                    53:59:dd:c9:60:0b:3a:4d:f0:d5:7c:e4:75:ac:b2:
                    d3:47:35:c0:47:3e:da:3b:0f:fb:8a:94:a0:30:88:
                    2b:7c:37:6b:dd:65:aa:84:cd:07:c7:a5:75:07:c2:
                    f1:8c:60:fa:bd:23:59:c6:8d:58:5f:a9:87:6b:bc:
                    4c:df:66:45:bd:ce:81:83:5a:92:6a:cd:98:15:ef:
                    22:d5:df:5b:82:51:25:06:cd:82:80:db:93:b2:03:
                    7e:5a:3a:d7:0b:68:84:fd:dd:19:ef:a6:b0:70:80:
                    75:a7:2d:e7:67:1c:87:0e:76:6d:83:ca:2c:29:93:
                    d2:64:fc:65:e2:52:1b:6a:7b:3d:2b:62:cf:06:f6:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:96:AC:AD:13:F1:99:07:D6:96:F1:5E:19:09:14:BF:A6:0D:71:20
            X509v3 Authority Key Identifier:
                keyid:32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6b:4b:8e:a6:de:0c:66:9b:cf:13:87:a8:cd:34:f8:ad:87:
         67:3e:f7:e0:45:52:b4:5b:08:59:a2:d7:05:88:1c:35:9c:e9:
         3b:85:ac:3e:ba:dd:1c:ef:67:06:a3:43:29:88:e5:e7:ca:89:
         cf:3f:6e:c7:85:2d:ef:66:96:66:08:3d:ba:2f:55:d8:79:54:
         c0:10:b6:78:9c:0a:7c:1f:38:1f:c9:1f:6c:9b:88:fd:20:0f:
         80:64:03:43:2d:77:74:c8:6d:fe:8b:15:0f:62:6b:28:35:d0:
         3d:9a:20:b8:80:c5:4a:07:c4:f0:c2:ee:a1:44:f8:57:cf:a4:
         90:2c:4a:ba:96:5c:60:c0:fe:bb:04:c1:b2:76:c7:53:0c:1a:
         1e:9f:e0:76:c5:a2:4f:dd:8b:e7:f5:a4:e8:31:ab:7f:4c:f6:
         ab:13:14:eb:93:3a:82:b0:85:2d:d9:09:13:78:cd:c3:1e:17:
         a9:8a:ae:fd:7e:32:7e:91:46:73:91:1a:c8:7c:01:c8:68:25:
         3a:d5:c8:64:53:5c:43:c8:6c:e3:1d:54:c8:25:b9:ac:5d:bc:
         74:d9:d2:9f:b4:03:ba:fc:5d:bf:55:e8:dd:fe:3a:3c:d6:82:
         3c:cd:97:ea:b1:bc:56:a3:b3:60:73:f6:e8:d2:09:6b:92:4e:
         5f:44:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----