Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File:                     iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier:          sRWjzTZr1gj2Gv8csfekq3Nb5wxqdPn15cxZs1lxpYo=
Subject key identifier:   16:CD:57:8B:65:63:95:AD:99:29:D3:4F:50:58:C5:42:68:0A:1E:DF
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer:       /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial:       01962F3DDFED64FDEE57D8ACA10EA59B5F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: oaBQUuC4uNwTm3HASH7qi7672BaocUTmOr0RnkoSMzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:df:ed:64:fd:ee:57:d8:ac:a1:0e:a5:9b:5f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=16cd578b656395ad9929d34f5058c542680a1edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:f5:ce:9c:64:97:83:f6:ca:12:f1:c1:0f:
                    0b:f4:04:77:65:fd:59:cb:4a:33:e9:87:b4:4e:ec:
                    9d:27:46:70:14:77:51:18:b0:fc:69:e0:38:4e:3d:
                    10:1c:16:2a:3d:12:b7:1d:97:cd:38:60:da:db:0f:
                    46:ee:12:9e:7d:79:9d:9c:6d:3f:a5:16:c7:3e:de:
                    54:78:a5:c4:f8:ea:8c:0b:cd:c2:50:ac:2d:83:1d:
                    c0:be:30:95:f5:47:af:5a:13:71:0c:d2:c0:ff:56:
                    99:9f:2a:c5:49:01:99:fe:40:0d:27:db:d3:3e:e9:
                    c0:a2:2d:3c:f2:9c:a5:08:4f:76:16:a1:1c:36:24:
                    8f:3c:2b:de:09:8c:ae:a1:92:0d:73:4f:0e:e2:6c:
                    52:e8:77:5a:ed:6d:15:d0:fa:aa:7c:0c:f8:e8:87:
                    c8:42:7a:0e:23:bb:ef:d5:77:db:66:04:99:96:ac:
                    b1:1d:9e:e0:5b:83:15:ae:51:77:15:01:28:c6:78:
                    ed:a3:36:d5:4c:1f:6e:15:07:42:44:22:21:fb:0e:
                    63:5b:bb:cf:4b:ac:d1:33:77:ee:f8:c5:05:94:a7:
                    93:97:2c:05:1a:30:21:3c:e7:cb:13:a8:58:a0:76:
                    67:7c:58:64:02:76:01:b2:f1:c0:c6:60:1a:4e:db:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:57:8B:65:63:95:AD:99:29:D3:4F:50:58:C5:42:68:0A:1E:DF
            X509v3 Authority Key Identifier:
                keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:3f:13:4c:d6:6d:0a:49:37:b9:af:a6:ec:82:53:3f:ed:
         22:b3:9f:3c:35:d6:6c:b3:20:15:98:33:b8:66:a9:97:ae:41:
         45:95:43:71:36:91:32:49:56:89:1b:8f:4a:42:aa:07:b4:88:
         6a:f4:44:57:07:7c:77:e5:38:86:3e:45:e1:62:d6:e8:d7:33:
         e4:b6:1e:26:0f:ba:9f:23:32:ff:33:b4:9c:1f:3b:29:e4:aa:
         79:cb:1f:79:56:11:bd:54:b5:93:7b:30:5f:72:a6:62:c0:9f:
         ad:58:35:0a:1e:b0:e8:b9:86:13:b1:af:9f:97:62:81:0a:76:
         47:b2:89:16:ef:83:52:dc:50:5e:e6:a4:23:e7:21:39:15:23:
         96:1d:a4:3f:da:fc:94:cd:ce:0e:43:ff:5d:32:09:85:f1:1a:
         1e:36:42:a9:62:0f:cd:c1:41:dc:45:65:26:2e:6a:40:d2:d2:
         71:0c:37:5f:5c:be:fc:52:5f:5e:b3:9c:85:63:ce:b9:fb:69:
         97:8a:8d:b6:75:94:01:10:23:cb:59:17:0a:56:fd:16:48:fc:
         a6:7e:43:06:a3:e8:ff:25:e7:db:c1:21:0c:71:71:6d:73:4b:
         4d:2d:db:31:42:e7:69:27:2e:ed:51:ce:bc:21:ff:30:79:23:
         cb:e6:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----