Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File:                     j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier:          Xmd6w3ZEhbYLdkqUuHmhhBPDD+frpoAw1XBCZV0PJ7U=
Subject key identifier:   08:8F:CC:A1:40:90:43:49:B8:AB:A4:DA:3A:75:89:00:7A:46:FB:D0
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer:       /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial:       01962E991D49F8B2AF9117677F7BE0B34D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number:          0736
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: V1HxkvneFYPkIj/hPGfwnqpFhtc+mDjQcOztSC94iPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:49:f8:b2:af:91:17:67:7f:7b:e0:b3:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=088fcca140904349b8aba4da3a7589007a46fbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:44:f1:e1:eb:59:71:86:b6:e3:be:fa:32:
                    e8:04:56:0e:c1:2a:3c:0c:68:f7:65:89:7a:89:39:
                    14:62:53:c8:b7:8a:98:a2:5b:3c:8f:08:90:ad:2c:
                    f0:40:e7:2e:44:40:51:84:d9:97:dc:8c:94:19:ec:
                    cb:3d:ce:e4:f4:b6:46:62:e5:ba:6c:cd:24:9e:f0:
                    9e:90:98:f8:3e:41:6d:03:9e:80:5c:a9:41:4e:38:
                    e6:13:23:69:16:cf:c4:c2:c2:93:ee:6d:99:e2:55:
                    70:ba:fe:d9:d7:ef:b8:9c:39:e1:22:9a:a8:08:90:
                    e5:56:bf:c4:b6:fb:65:8d:70:1d:0f:b0:ef:71:91:
                    d0:bc:42:02:0d:96:cc:ae:75:3f:3e:f4:99:dd:4a:
                    5d:f1:da:5f:6f:12:8b:47:bb:ab:d8:83:30:0e:1d:
                    c6:a0:e5:56:8c:1c:8e:27:fd:3e:6b:16:75:5c:f0:
                    bd:0b:7f:69:69:93:53:bf:96:70:cc:95:e6:b0:d8:
                    6a:5d:ac:79:7f:7e:fe:00:1b:9d:92:96:d2:9c:d9:
                    5f:6e:4b:5d:5d:b6:b8:82:c1:f6:2e:c7:12:d5:eb:
                    50:e7:f6:d5:e2:ce:c7:00:46:c1:f2:15:ce:72:db:
                    78:96:1d:32:1d:89:83:f5:17:c6:89:ca:53:c6:10:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:CC:A1:40:90:43:49:B8:AB:A4:DA:3A:75:89:00:7A:46:FB:D0
            X509v3 Authority Key Identifier:
                keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:6c:bd:ce:c0:7d:cd:23:cd:14:62:2e:1d:e0:15:13:c0:
         55:e5:bb:df:74:9e:c8:57:b1:be:f0:68:b2:c5:d3:90:dd:76:
         d0:3d:5e:8f:9f:96:e0:78:09:25:25:29:0e:a3:d6:53:ad:f1:
         9c:2f:97:9b:cc:2b:df:bd:9e:a9:b7:16:4c:c2:f0:bf:3b:a5:
         70:7e:2d:f0:b9:51:60:2e:87:c8:12:9f:b2:ef:9c:f1:f3:0f:
         cd:d2:bc:20:bc:61:10:db:e0:ca:06:11:dd:ba:ab:fa:72:10:
         6a:9e:73:66:be:ca:47:d3:76:19:e6:68:dd:ba:67:0d:fd:f0:
         1d:6a:b8:63:b5:e5:08:90:aa:d7:63:45:e0:4a:52:f2:87:01:
         4d:53:2c:fb:56:a7:fd:76:57:a5:6d:6e:c3:71:41:72:de:de:
         c2:54:26:c9:0b:b1:42:4c:df:88:ce:92:b2:31:61:78:d3:66:
         85:ad:e3:89:ae:b7:9c:15:2e:bd:c6:d1:d0:c7:b5:13:7a:42:
         70:f2:41:65:57:e4:b9:f1:c4:65:0b:4d:d8:06:24:36:fb:6c:
         f0:3c:75:1e:09:02:05:56:57:05:8a:b7:81:27:1f:ff:7c:bd:
         01:53:30:fd:03:ed:0f:71:1e:ed:8d:e1:a8:ef:f4:59:a8:0c:
         19:fa:64:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----