Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File:                     v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier:          jCU0sBDHOTZ04oIxFyEX/pq8tQdHDFjYMCqxXt6S9DA=
Subject key identifier:   D3:CE:3F:86:94:0C:E0:C9:79:4A:DC:C2:63:01:B0:73:F6:38:4D:E3
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer:       /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial:       01962F06C4043D52F9FCD633ACBF17FB77FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number:          0A1F
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: NVwvQtyeLoSQDTVdEt+0xBymKkfC+ss4bPLpMks53VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:04:3d:52:f9:fc:d6:33:ac:bf:17:fb:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=d3ce3f86940ce0c9794adcc26301b073f6384de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:80:cc:08:7e:22:7d:fe:4a:c4:82:32:db:
                    f8:02:3b:ff:2c:1f:cc:97:05:46:c8:c3:a1:16:98:
                    03:a8:0a:ce:14:03:3a:3c:84:06:24:7c:f7:7e:15:
                    1b:95:1a:ae:14:f0:cc:62:76:96:a5:f4:25:5e:bf:
                    48:a4:0c:8e:bc:cd:7c:6c:e0:17:b5:68:2b:c5:a0:
                    21:9f:f3:1a:38:a7:19:f5:0c:6b:6b:f4:1e:28:22:
                    1c:b9:54:e2:4c:9d:a1:56:9c:31:c1:ec:77:e5:ee:
                    ad:e7:ad:f8:50:4e:63:0e:ec:db:70:76:ce:20:ef:
                    b0:02:48:11:f1:a8:7e:0f:b4:5f:30:95:bb:e7:83:
                    85:9d:72:ef:0a:7e:0a:9b:9f:15:cc:0c:06:b2:5e:
                    08:c5:d6:85:a8:c6:c9:bf:13:28:7d:fa:2f:84:a4:
                    e9:bc:14:3c:86:6d:cd:c1:83:41:b2:13:8c:e6:74:
                    08:db:8c:95:bd:1e:38:66:b0:cc:c6:61:77:6b:3b:
                    b8:90:06:99:04:76:5e:54:c6:e8:96:40:6e:b9:88:
                    8b:f8:b0:07:1e:2b:66:ab:d2:85:16:bb:e1:b3:c8:
                    ab:49:62:99:cc:4c:74:a1:17:3f:06:96:9e:45:85:
                    d2:77:53:e2:2a:cb:45:ce:56:0a:e7:0e:57:25:4d:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:3F:86:94:0C:E0:C9:79:4A:DC:C2:63:01:B0:73:F6:38:4D:E3
            X509v3 Authority Key Identifier:
                keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:76:a2:f5:01:17:d6:29:d7:34:9f:a7:3c:bb:cf:5d:0e:
         0a:55:8d:2a:0b:79:46:89:cc:21:42:99:b1:1d:03:1c:fc:5e:
         d6:a6:9a:82:6d:bc:06:e5:bc:77:0a:85:d5:16:96:ad:a2:84:
         c9:09:9a:af:fa:a0:e9:ba:78:51:08:c8:1f:15:41:7a:98:16:
         30:36:ff:cd:25:b4:81:53:35:48:2a:c2:13:b3:34:41:28:d9:
         c5:5c:1c:5d:32:d9:b5:4e:80:43:14:65:7d:c3:5f:50:c1:97:
         84:51:6b:cb:8a:53:9b:d6:29:15:26:24:2f:a9:ce:f3:60:8a:
         7c:c6:c6:9a:93:f9:e7:45:e1:6a:9d:09:4e:46:fb:1c:96:4b:
         a4:7d:ab:f8:d3:37:0a:7d:2e:04:37:c0:ae:20:f2:b2:06:bb:
         d1:35:98:cd:51:9c:0d:31:a3:dd:ee:90:e9:aa:25:3e:bd:cc:
         b5:75:7d:24:7e:05:33:f7:2e:13:f5:51:3b:3f:29:87:27:97:
         8e:32:49:0c:b1:6c:0b:a5:e1:b7:22:bd:df:50:34:6d:ec:01:
         62:c9:9b:6c:b2:b5:78:cf:0b:91:f5:4f:f4:fc:85:91:95:38:
         4a:f2:66:a4:70:34:17:15:ad:4e:d7:e7:7f:66:1d:14:3c:b9:
         8e:d7:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----