Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File:                     IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier:          INqHGnCJfLoyNDHKOxUNzrFWVg765nPOcV2SyYPXHDo=
Subject key identifier:   3D:B3:CE:C2:C5:6C:7A:9C:1E:59:96:27:1D:7C:DD:B5:39:E2:BE:26
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer:       /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial:       01962F06908AEEC9BEDD7F8E8BC99FC1C517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number:          0456
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: BNzZujMEwhMUp0y5NrQ1ojRYiFrNiprwLy5llaax3Wk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:8a:ee:c9:be:dd:7f:8e:8b:c9:9f:c1:c5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=3db3cec2c56c7a9c1e5996271d7cddb539e2be26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:90:44:cb:30:49:cd:46:b8:e9:18:3d:f7:
                    ef:ca:69:ae:62:f3:b6:41:2a:68:9a:be:27:d4:4d:
                    81:d4:00:86:d4:16:59:46:a2:89:54:ab:32:40:19:
                    f4:6e:ae:e5:18:b0:d4:07:59:0a:fa:f5:69:09:17:
                    ca:41:72:bb:df:89:b9:7e:88:9c:1c:3a:ad:1a:26:
                    93:98:90:28:7e:c7:66:9a:02:fc:b0:3f:8d:a9:f2:
                    29:97:d0:f8:82:b1:ac:1f:90:cb:b7:1e:dc:e7:63:
                    88:0e:ba:3a:a4:c8:86:8e:a0:7d:dd:4a:40:e6:9b:
                    8e:aa:9e:cb:4e:82:1f:ff:7d:94:e1:0f:c6:16:fd:
                    a4:ae:55:c1:e9:ee:70:58:39:93:7e:05:8c:c3:34:
                    b7:f6:52:18:63:ea:4f:12:55:c9:2e:a8:a8:1f:bd:
                    08:93:c2:b0:7c:f3:60:0d:59:df:66:fa:ef:7f:2a:
                    cd:42:5d:a7:07:3a:76:3e:09:ae:2c:85:5f:48:51:
                    f3:aa:2c:c6:37:df:cc:b1:26:da:65:dd:3a:91:56:
                    0e:0b:21:72:33:7e:8f:ae:d9:37:ff:df:b7:0e:75:
                    92:21:fa:21:18:18:1b:68:5d:19:20:91:3c:89:71:
                    94:df:c2:ac:e0:d8:f2:3b:88:77:f2:91:63:50:02:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:CE:C2:C5:6C:7A:9C:1E:59:96:27:1D:7C:DD:B5:39:E2:BE:26
            X509v3 Authority Key Identifier:
                keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:03:f8:32:5d:ca:2f:f3:03:38:d4:d5:87:06:56:ac:8e:
         03:78:3a:2e:b1:18:b8:93:31:51:ad:9e:70:0a:de:6c:74:ad:
         6a:a3:22:ae:a2:0f:13:ae:e6:e0:21:87:45:23:46:ac:cb:0a:
         fc:c0:a9:2f:bf:82:d5:2f:46:06:b2:6d:ea:d0:82:fa:e6:4c:
         e1:54:ab:b0:65:fd:50:52:8b:63:f0:da:27:5a:11:5a:cf:4a:
         1b:8e:bf:56:e1:4f:d4:ce:75:83:f4:d0:07:ef:99:ef:97:50:
         62:37:f1:42:c0:a1:76:3d:d2:f5:3c:3c:63:c5:06:cd:d4:08:
         e4:53:c5:ac:59:52:16:98:e8:94:95:09:9b:e9:e9:fd:c5:b0:
         e9:ed:78:c2:32:a2:22:25:29:eb:b2:d0:cb:9a:82:3b:5b:f3:
         c5:ce:6c:60:9f:db:38:31:df:f3:b2:37:11:1e:f0:f8:63:06:
         6f:73:c2:6c:39:c1:2c:9e:3d:14:c6:86:49:db:a7:11:5f:a3:
         e3:ba:1f:ff:5e:c0:8d:29:38:d4:53:85:9e:57:29:08:f0:a5:
         96:b7:6a:06:df:62:03:00:30:fa:b3:cf:bd:b3:3d:7d:8c:c0:
         c7:0e:24:36:d1:61:e4:9c:d9:af:01:68:82:c9:fb:a1:cf:0d:
         7c:6d:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----