Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File:                     lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier:          P8Qa2Jik5MUAkmEKAiCsSa9Svwb4glKFxpO42ldiBO4=
Subject key identifier:   AA:FA:F6:FC:1F:9A:2B:5F:6C:D6:03:C8:9B:23:5F:02:0D:42:9A:CA
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer:       /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial:       01962ECFBF766B5D67C8D09FDC780E68B47B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number:          0317
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: ASSW/7LG6BVLEZ7IH37DkOv/kUwa+FdWugrWHtcXQOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bf:76:6b:5d:67:c8:d0:9f:dc:78:0e:68:b4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=aafaf6fc1f9a2b5f6cd603c89b235f020d429aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:b0:25:b5:d4:d6:e3:e0:b5:c4:c3:33:01:
                    6e:78:2f:02:3b:14:3f:c5:9c:f3:50:fb:7b:c4:25:
                    90:2b:b9:72:ce:6a:1f:45:63:c0:f7:73:e1:35:e1:
                    6f:7c:c9:15:67:e9:2e:31:06:26:87:32:91:71:17:
                    c9:60:b0:22:a2:65:41:25:51:8e:79:cd:ed:98:9b:
                    c9:a5:02:a5:c9:6d:e4:61:02:35:ea:94:0f:23:53:
                    83:ef:82:73:da:44:d9:b9:71:51:05:ff:68:1e:6a:
                    68:36:6f:3e:e0:d0:c0:18:2a:21:8f:bb:dc:c5:64:
                    3d:44:eb:83:7e:12:e5:30:37:13:50:7a:4e:0d:54:
                    a0:27:49:0a:9e:b1:8f:c8:31:7b:8b:dd:25:65:d1:
                    8c:5b:1b:d5:dd:68:9a:4a:22:30:38:17:23:7e:5f:
                    90:8b:84:10:9e:6f:fb:54:28:6b:0d:9d:72:24:07:
                    8e:5d:97:9e:f1:a8:16:fa:6d:96:3a:1d:5e:a4:03:
                    ab:95:1e:d2:9b:cc:e8:54:ea:33:07:26:a7:84:b9:
                    50:1d:aa:44:a1:7d:68:1d:fa:df:90:39:57:58:77:
                    48:f9:04:2f:ff:16:36:d4:60:39:cd:33:09:58:a9:
                    8a:e0:a2:23:55:87:b7:79:ed:3f:32:fe:8c:a8:25:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:F6:FC:1F:9A:2B:5F:6C:D6:03:C8:9B:23:5F:02:0D:42:9A:CA
            X509v3 Authority Key Identifier:
                keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:4a:55:2c:e7:75:3b:7d:a1:ab:89:27:58:d2:7f:e5:ad:
         56:19:63:1f:ae:90:62:7f:02:da:fb:bb:17:7e:a3:ba:10:a1:
         63:d6:5e:26:b9:53:a8:b5:c3:88:8e:47:9d:ea:10:b1:8f:d8:
         14:0c:bb:77:c5:87:27:c0:a2:17:c9:23:1e:20:14:87:34:e6:
         72:d7:a6:c7:8d:97:90:9a:97:ec:8e:52:f1:66:1a:a8:0b:e0:
         e9:7c:59:1c:23:8f:58:e1:54:2b:16:18:cc:0b:8f:ff:22:d4:
         dd:ce:81:bb:69:5d:7c:58:3b:3d:cf:79:be:f1:fd:ec:16:80:
         2e:c7:97:2f:86:b4:22:12:de:75:12:0d:f9:75:af:9f:90:16:
         0e:24:4b:82:8d:13:cd:56:f2:21:1a:73:97:52:a0:c9:87:a8:
         79:ac:ff:e0:06:87:52:7c:ea:71:d3:82:c3:6a:2e:3d:12:0f:
         f5:b4:23:f0:79:03:d0:de:9a:e3:5c:0a:86:6d:d6:ee:87:35:
         8e:c0:ff:07:03:ea:f7:6b:83:13:3a:b1:0f:58:6d:c8:f1:cf:
         5f:18:3c:c1:29:ab:0f:c9:af:b7:24:12:7f:5b:5e:d7:0a:c0:
         26:5f:ee:b3:8e:65:6a:fe:df:5d:dd:52:9a:0b:ab:b3:8b:ad:
         f0:2d:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----