Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File:                     idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier:          Ikf5k79LfPOQZzKhiaQqOu7HgUn3mLTqcRvw9/9XLsY=
Subject key identifier:   F5:63:88:92:D3:EF:42:4B:D1:D4:0F:78:62:7A:B2:B5:04:9A:2A:41
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer:       /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial:       01962F06CDAA4E296C70533EEA998377A65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number:          0F3B
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: wb/kZacRl7aEJqbEkKekoebjJ4dqEunQ1BpLLkXrjoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:aa:4e:29:6c:70:53:3e:ea:99:83:77:a6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=f5638892d3ef424bd1d40f78627ab2b5049a2a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:f2:f1:50:55:13:46:8e:48:75:84:13:99:
                    1c:4f:38:e9:ec:98:7e:48:70:4c:ee:e3:81:d7:99:
                    cb:ed:cb:d6:9a:bf:72:5c:06:0f:b6:8b:5f:98:d6:
                    08:d7:63:7e:8c:d4:cc:8a:4b:d3:21:a4:de:85:97:
                    1d:05:52:65:00:9a:15:c3:c3:1c:e2:83:f6:9e:e3:
                    94:6e:53:ff:b9:b9:df:da:33:6e:e0:f5:5f:be:ec:
                    ab:7a:77:cd:2b:b0:24:fc:4b:12:b9:55:b8:ef:6f:
                    74:64:0e:10:18:50:02:3c:70:b3:74:ee:61:8e:6d:
                    ef:93:36:09:14:c7:87:5d:78:0a:9d:ac:b9:2e:44:
                    91:d7:05:8e:95:a5:fd:02:00:3d:dc:78:88:15:57:
                    ee:24:80:a8:2a:51:58:3f:04:fb:8c:25:6e:15:a8:
                    d2:0d:15:24:13:a8:3e:ab:73:35:47:3c:3e:fd:f6:
                    aa:20:1e:a9:51:a7:cc:ab:7f:a6:a3:85:ce:44:6c:
                    9b:3c:5a:cf:d5:fb:ad:9c:49:f9:ad:38:f8:fe:81:
                    da:06:a6:62:7d:50:25:39:33:76:08:78:d6:e3:f0:
                    6b:bd:b6:03:12:7a:9b:0b:7c:cb:09:c1:3e:8e:29:
                    33:9a:77:ad:c0:b8:14:a2:25:c5:79:6f:d4:de:bc:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:63:88:92:D3:EF:42:4B:D1:D4:0F:78:62:7A:B2:B5:04:9A:2A:41
            X509v3 Authority Key Identifier:
                keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:f6:b5:9e:2e:c1:cf:e2:b4:1c:a7:21:d8:35:73:27:d1:
         ee:28:61:20:43:5d:b3:b4:6a:6c:11:1e:e4:21:08:c0:13:5a:
         c0:db:98:c8:f3:71:9a:ca:ea:bf:4b:11:5d:50:57:de:25:8b:
         f6:ac:53:85:d7:11:f3:a3:6b:d5:09:5e:c0:5f:02:c2:67:ef:
         7f:64:4c:84:cf:c3:7f:b1:ea:73:cf:bb:c9:81:59:f8:52:3c:
         6d:1b:b1:12:67:98:a5:51:7b:cc:5a:49:0c:25:66:e2:9e:88:
         20:d2:02:30:05:9b:9e:d4:19:22:9b:62:cd:23:c7:cc:20:bc:
         79:96:e4:76:9a:31:4d:c9:00:3b:17:c9:2f:18:88:b0:61:9e:
         8c:65:5e:9a:28:40:02:97:4c:d2:01:5f:f7:61:09:40:92:80:
         d9:21:b3:40:23:f5:27:2b:ef:85:90:3b:ba:1f:41:1a:87:40:
         fd:39:3f:d9:97:2d:40:3c:d8:a0:7b:ca:a9:30:4c:93:02:ad:
         83:34:7f:f3:28:ac:e7:e1:e5:eb:06:4f:2b:9d:96:81:d1:d4:
         fa:48:34:67:b7:ff:8e:50:79:94:d9:4f:5d:30:f1:73:f0:4f:
         35:f5:f6:ec:c5:93:25:87:62:a6:f6:1e:57:59:06:16:a6:3c:
         b7:3a:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----