Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File:                     iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier:          Ri30bBhqEkB1hpkd5Zl2iZeW8DEQ5aeqOYiBs7Q7g1g=
Subject key identifier:   2B:67:9A:6D:17:01:E4:97:FB:13:F5:7B:F2:09:1C:5C:06:D1:A3:CB
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer:       /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial:       01962DF41363088E827A9C2E6EB9729B543D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number:          0511
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: DskqGz5RyTNPqjbj6AW2GS77PzmlliuQGx66qPzolHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:63:08:8e:82:7a:9c:2e:6e:b9:72:9b:54:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=2b679a6d1701e497fb13f57bf2091c5c06d1a3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:58:44:37:a9:6d:23:70:60:a3:b2:7f:fb:
                    b0:29:eb:22:e6:8a:9b:f5:0c:e7:8f:10:6d:52:d3:
                    f0:3b:58:53:e2:af:66:1f:1b:39:bc:52:9b:2a:58:
                    a3:60:20:56:9b:db:3b:1a:f6:5a:45:de:b7:32:fb:
                    b9:84:69:91:69:88:c4:44:63:81:bf:98:1a:15:0c:
                    52:09:65:47:26:8e:f5:2d:6d:35:b3:9d:86:07:6a:
                    25:f4:07:ef:f4:30:cd:a8:97:1c:86:03:2e:62:11:
                    29:85:2b:53:d1:7c:f7:e6:c8:64:e3:41:a1:e2:4c:
                    67:52:f0:bf:13:92:a5:c0:de:03:19:b5:7b:88:92:
                    6a:d4:1e:cf:b0:05:1a:e3:66:2c:0e:c0:af:56:84:
                    0b:54:ac:6f:98:e5:2d:ad:de:7e:71:24:42:4d:47:
                    10:99:7f:6e:35:cc:15:33:8e:66:84:15:fb:1a:95:
                    24:a0:b8:73:c0:af:83:95:51:23:f1:38:9f:6e:7f:
                    70:7e:00:4d:c5:3b:a9:46:38:ff:32:5a:42:06:23:
                    9c:ca:ff:88:e0:0e:b0:5f:d2:87:f1:9b:ae:40:6d:
                    66:b7:0a:de:a9:70:1f:10:14:5d:bd:4a:0f:cf:77:
                    b6:ef:a1:30:4c:c7:cb:68:3f:01:70:2b:6f:27:bd:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:9A:6D:17:01:E4:97:FB:13:F5:7B:F2:09:1C:5C:06:D1:A3:CB
            X509v3 Authority Key Identifier:
                keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:b0:09:f1:56:96:e5:ed:4f:6c:b4:fa:b9:34:10:01:51:
         9d:f2:9c:bd:f1:81:25:9b:7c:91:46:32:ff:8c:1b:f5:25:d7:
         78:7b:50:ae:6f:2a:3f:55:f2:51:6f:fc:d7:37:5f:fd:8d:20:
         39:47:23:0d:6e:f3:77:5c:61:cf:92:89:08:39:cd:3f:9a:84:
         51:95:e3:80:41:86:81:1a:0c:c0:ee:76:2d:ba:73:b6:fb:95:
         67:51:0b:a5:65:53:da:81:7e:ff:c9:d8:c8:57:5e:fd:bc:12:
         41:36:8f:2f:a7:0e:57:61:be:99:d5:4d:95:3e:1e:ed:a3:9c:
         3f:1a:cf:49:1b:50:a7:24:dd:bd:af:2e:1d:e8:40:44:1f:a6:
         9f:62:2c:11:ad:75:ea:2e:28:81:74:77:fe:83:0a:55:0b:4b:
         77:67:a4:ba:c3:a2:2e:10:4c:5f:d1:db:6a:95:62:b9:4a:46:
         de:3f:9b:94:8b:cf:79:86:fe:6e:09:a4:fd:6d:66:ec:0a:91:
         39:37:6f:3a:93:47:2e:e3:f9:c0:d4:a8:ce:59:b1:9a:9a:05:
         89:25:ac:31:a9:4a:6d:45:af:7b:e0:d0:a1:98:59:09:0b:d2:
         e4:d6:08:6b:78:da:4b:c9:28:fa:9e:79:39:23:a3:6e:d8:1f:
         d0:a8:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----