Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File:                     pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier:          uvyY74AIxiE2BaGvEMWKH4UbmehweqEIiqZLOv31pBg=
Subject key identifier:   DE:F1:F3:9C:97:75:D4:75:11:08:51:36:27:6D:3E:3E:FC:7E:85:26
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer:       /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial:       01962E992CF60941DB295FECD6820F4A52C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: Z5eKuLHzi/ULC7Pe5tf1y1jR/GP1F+jMyegbSm0zfvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:f6:09:41:db:29:5f:ec:d6:82:0f:4a:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=def1f39c9775d47511085136276d3e3efc7e8526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:9f:65:07:06:d7:0b:43:97:19:20:95:ce:
                    bf:86:c6:27:19:13:6e:3d:e6:96:15:81:0c:67:07:
                    ed:b4:a0:66:f3:23:6f:4a:f9:2e:42:73:21:7d:25:
                    28:ff:b7:b0:ad:18:89:9c:b4:cc:16:bb:c8:c6:72:
                    4d:c6:4b:88:d6:5f:f3:6d:77:23:f6:19:33:61:48:
                    8f:f3:da:dc:45:b9:65:1a:f9:ff:d8:7f:51:c1:14:
                    6c:5f:33:f9:2a:0a:02:f9:a3:07:dc:10:0d:14:24:
                    d5:ce:86:72:f7:c0:d0:7e:da:4d:56:06:2f:11:ce:
                    80:e3:47:a1:84:3f:f3:35:c1:86:a0:9d:c8:c8:4f:
                    24:20:e7:18:40:8a:33:d0:78:7b:27:5f:0a:10:43:
                    ca:04:bb:68:cd:23:ff:31:96:5b:fc:58:db:2c:36:
                    b6:e6:79:33:14:c7:8b:eb:a5:a6:c1:82:d1:1c:c1:
                    66:22:80:fb:de:95:5d:ad:c5:95:a5:4a:dc:0a:c0:
                    e2:68:aa:d5:91:dc:73:cf:66:8f:73:87:47:d5:c9:
                    94:b3:30:11:69:91:6c:5e:07:56:43:4c:96:85:ea:
                    2d:89:c9:b0:fc:dc:74:91:15:e7:f4:6a:b4:e2:27:
                    d8:55:c8:25:76:fb:f9:62:7f:58:a1:42:ad:22:50:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F1:F3:9C:97:75:D4:75:11:08:51:36:27:6D:3E:3E:FC:7E:85:26
            X509v3 Authority Key Identifier:
                keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:06:f6:2e:5a:7b:32:bc:b7:1c:4e:56:b2:87:72:f3:cc:85:
         9f:2e:e4:b5:a0:ce:6e:4f:c7:fc:1e:25:80:ab:f1:fb:59:ca:
         24:46:b2:e0:8c:e9:64:dc:7c:7a:7e:ab:d1:d4:98:0f:8a:83:
         fc:cc:17:05:34:52:ea:1c:9b:78:ad:d1:e1:cc:3b:ca:10:d3:
         72:60:16:c4:01:9d:4a:95:65:0c:e3:77:df:0f:e9:5d:fa:67:
         29:b3:f4:ed:ca:5e:33:7c:5c:24:1e:02:f9:1b:f7:48:3b:90:
         08:81:6f:ac:d0:80:fc:26:42:97:12:23:6d:ee:f5:39:6d:dc:
         83:9d:4f:dd:be:35:4d:38:6f:62:47:2f:50:8c:54:4f:b0:33:
         ba:49:85:6f:fd:2b:8e:fd:7f:16:f9:8e:13:dd:3f:14:d5:ee:
         ba:34:52:b1:b0:ac:3a:b7:a1:40:a2:d7:94:32:74:51:a3:a7:
         f5:ea:51:a5:ef:c4:c8:81:3b:80:1e:40:37:6c:a3:25:77:99:
         07:d0:8e:23:99:43:9b:94:61:8e:72:cc:d9:40:96:a0:37:0a:
         ad:f5:16:35:8f:ea:3d:83:b3:7c:0e:99:de:d1:90:9c:72:e6:
         de:35:79:95:c2:28:fa:8f:01:de:f5:33:bc:ea:5b:c6:5a:a6:
         25:cc:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----