Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
File:                     iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json)
Hash identifier:          MOUtOMfYA+T8xiw5ChyGxLSEEzSYa31R8UZ0UfG/UJo=
Subject key identifier:   98:7E:40:69:A1:33:4A:19:4D:71:84:96:92:68:0B:11:AF:BD:E3:09
Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
Certificate issuer:       /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Certificate serial:       01962DF41439A279FC4AFBBF3F4DFE04BE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
Manifest number:          0280
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: YILz5JCnbeFIciln5Nk+IC2l/DDxV8uGQM3bGsi2u60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:14:39:a2:79:fc:4a:fb:bf:3f:4d:fe:04:be:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=987e4069a1334a194d71849692680b11afbde309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:6c:4c:63:a1:3d:be:54:6a:86:f5:5a:1b:
                    85:86:a6:7e:6d:cc:86:51:db:92:1d:d8:9b:9a:75:
                    8f:27:52:e9:d3:05:19:fc:43:c7:2d:02:d6:4b:29:
                    15:51:f7:cf:a3:93:a4:d8:e2:1c:60:42:65:5f:03:
                    55:ec:87:84:c2:91:13:0d:09:b4:62:b6:76:5b:a0:
                    01:bb:76:c9:e2:9b:cf:e5:7b:42:23:bd:80:e3:b0:
                    b9:bf:c3:f6:7f:d8:7b:2e:79:a4:94:dc:01:e4:62:
                    c2:b4:87:d1:6f:31:16:15:4d:89:06:d4:ad:7d:64:
                    54:8b:b0:60:8f:34:38:fd:36:72:05:d6:64:bc:2c:
                    db:2a:52:88:d4:2c:7b:04:3a:4e:f3:bc:42:d2:a4:
                    d1:00:18:63:89:bf:eb:f9:ea:ba:e3:39:fb:30:d2:
                    d9:14:84:51:32:2e:9e:26:b3:b4:73:c6:86:01:e6:
                    de:73:76:09:85:9b:d3:8e:92:c8:00:ea:7a:ee:ca:
                    d8:6a:2e:db:b1:b1:06:6f:4c:28:0f:ad:a4:9e:07:
                    c0:e4:60:bd:7a:7b:e5:77:44:3d:91:2b:11:07:73:
                    aa:63:44:b9:7d:96:a5:8e:d2:d1:6c:35:ec:db:54:
                    9e:7a:bc:89:f4:6d:e0:f6:a5:56:ec:a0:08:82:49:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:40:69:A1:33:4A:19:4D:71:84:96:92:68:0B:11:AF:BD:E3:09
            X509v3 Authority Key Identifier:
                keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:d8:73:62:29:2a:95:20:72:ad:33:91:0a:b7:ea:32:9f:
         d1:4c:a8:21:84:18:66:dc:b7:fc:4b:22:6c:4e:05:0a:99:4b:
         73:0b:d2:74:af:4d:33:ab:7b:82:9d:b9:28:92:d5:ae:ad:95:
         cc:8e:6f:d1:73:0a:fb:98:e4:75:56:2b:bf:fa:41:9b:bd:4b:
         34:e0:b5:61:c9:a0:2f:ec:c4:44:5d:2f:44:f4:d2:d3:14:e6:
         ec:bc:fa:6d:c2:48:2c:b0:9f:c0:c2:f5:42:cf:59:bd:92:cc:
         b8:b7:3a:cd:4e:44:c7:4a:7f:c9:10:3e:8e:51:2d:70:f4:14:
         73:96:c7:d2:9d:e5:b0:d2:fa:d1:93:9e:ad:72:1f:a5:dd:ff:
         75:d6:cf:b5:d2:98:2c:1d:22:14:b3:03:fa:31:f6:9a:60:37:
         15:38:20:b4:48:d0:c6:6d:e4:ca:cc:b9:d3:e1:94:07:08:7b:
         f0:83:92:31:81:8b:ec:b6:a2:bf:02:eb:0b:e8:58:67:dd:02:
         53:56:3d:8c:34:23:4c:7b:c7:1f:d5:88:47:ca:d3:94:25:35:
         a0:8f:04:9f:ae:48:a7:59:0d:aa:3d:dc:fc:e1:30:0f:de:e6:
         f4:61:15:18:b5:d8:1a:c5:94:d6:e1:3c:e3:0a:45:d4:6c:e1:
         d7:6a:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----