Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File:                     mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier:          hTjubnlYqx9ynyyf6EHuNWtg4i5pVLBZ1R8SFI1miIE=
Subject key identifier:   59:F2:73:B4:59:65:F9:3D:2C:8A:88:F3:11:17:D9:E7:6C:19:37:73
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer:       /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial:       01962E99579AADCE013713A513217D0A1F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number:          08B2
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: DPCLD6aG5SzvBgctjFlVtL4oxrAOs7H3+KjHrdKMsMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:9a:ad:ce:01:37:13:a5:13:21:7d:0a:1f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983ea291971990dc486f93812783fadd87ade863
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=59f273b45965f93d2c8a88f31117d9e76c193773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:39:33:00:d4:5d:e1:fa:a7:ee:ea:dd:56:
                    90:4e:31:fa:5c:34:ff:dc:ea:78:70:dd:a1:1b:90:
                    5d:94:70:26:c2:fd:73:4f:a9:c2:d8:fe:e4:5e:83:
                    8c:00:24:39:98:de:c1:5b:61:b3:32:e9:ad:df:ad:
                    a5:c9:d1:4a:f3:6f:bb:eb:e9:48:40:10:b1:a9:a3:
                    61:1f:8f:04:c8:e8:66:28:7c:0e:6d:7d:2a:ad:f2:
                    70:5f:5e:35:1d:ee:5d:87:ae:73:67:44:80:bc:20:
                    dc:4d:da:ad:54:1b:f2:01:45:72:89:9a:2f:1d:f7:
                    3a:f8:fc:37:33:1d:cc:6a:e0:af:27:1a:ae:0d:2b:
                    ca:1e:b2:90:03:e4:99:86:c8:32:67:00:db:a6:38:
                    01:70:a1:9b:f6:79:a0:52:8d:ca:5e:c2:62:47:28:
                    f7:08:0b:19:41:2d:ed:1e:2e:92:da:48:e6:c1:56:
                    db:b1:98:56:fc:2d:af:02:7f:3e:ec:19:16:9b:4a:
                    d1:83:24:c5:75:76:9f:18:1c:b4:42:c4:80:71:f1:
                    d0:7d:09:05:06:6f:c3:ca:4a:d8:1c:ec:5a:e6:64:
                    36:e9:ef:28:72:3b:a5:dd:00:e2:00:b4:74:1b:b2:
                    c1:a6:87:2d:72:d4:e0:19:99:5f:91:2f:0b:9a:0d:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:73:B4:59:65:F9:3D:2C:8A:88:F3:11:17:D9:E7:6C:19:37:73
            X509v3 Authority Key Identifier:
                keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:0e:36:8e:43:fc:54:9e:79:f7:9f:77:f6:aa:fb:af:60:
         62:e0:bf:eb:a5:11:ef:ba:f5:7f:47:ca:5b:e8:68:21:d8:e6:
         c0:77:01:a7:fc:9f:3c:23:ba:7f:3d:d7:7c:51:5f:63:a0:45:
         15:4f:d9:4e:b7:1c:33:f5:ec:a1:e9:ce:8c:e1:c7:10:94:6c:
         05:cc:f5:ea:be:1e:6e:7f:55:06:3d:84:72:17:d4:80:83:92:
         2a:37:8d:c1:22:a0:1d:79:4a:e9:f3:c5:44:78:41:66:b4:2c:
         1d:a7:80:8a:6e:6c:3e:c0:10:fd:6b:9e:f0:fe:21:9b:e9:c5:
         b1:56:64:72:d3:06:bb:03:ec:3a:88:57:6e:e6:32:d4:65:c2:
         1c:8b:35:c7:9f:cf:0f:40:5f:cc:cc:ff:e0:03:37:1c:47:7d:
         09:34:01:40:c6:ca:35:5d:db:41:87:2c:6c:d8:54:50:7f:92:
         6c:71:27:28:68:a1:ac:89:cb:5d:28:62:9f:2f:fe:f7:a9:c5:
         53:9a:26:58:82:19:cc:49:c8:cd:11:f7:13:02:62:06:5e:8a:
         ef:40:f6:f2:bd:11:2f:46:8e:da:2f:20:27:61:17:d6:22:fa:
         0e:a4:a4:93:77:56:f7:4b:04:91:29:78:c9:fc:e2:c0:9f:86:
         01:df:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----