Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File:                     h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier:          lr+JHguEKqScQjKeEjP9t3Pmb96ovAYun21a6/Rl/4Y=
Subject key identifier:   37:5D:BC:A7:05:CE:72:B7:37:24:2C:DE:87:C6:B9:5D:F3:44:0F:C9
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer:       /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial:       01962E2B2BBD1A6E0F62BB2AF71A550AF68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number:          031D
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: w9hGTk8SkWmY3Tpimn/d9sj1tzYCeJfeubx+C1Iksw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:bd:1a:6e:0f:62:bb:2a:f7:1a:55:0a:f6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=375dbca705ce72b737242cde87c6b95df3440fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:c3:74:6e:26:0c:f4:4e:0c:d1:29:4f:54:
                    88:62:53:6d:c5:18:f5:9f:ea:af:dc:c2:89:1f:71:
                    e3:c4:1c:ef:2b:00:1e:60:11:64:e1:62:96:7a:2b:
                    61:78:73:22:8a:58:31:a8:26:c0:18:bd:ec:ef:de:
                    7d:9e:66:ad:2b:76:04:36:fa:11:db:34:ad:fc:73:
                    7b:7d:49:12:66:6f:11:ca:85:d6:2a:c6:93:b8:7e:
                    c2:ff:60:09:74:a5:ad:3f:61:a9:54:34:06:cc:f5:
                    8a:78:11:59:2d:db:7a:83:88:b6:44:13:94:2b:6a:
                    3d:b7:05:29:b8:86:e2:71:54:59:48:ee:f8:03:a5:
                    2a:a1:72:e2:df:4b:ee:4b:11:7d:34:51:70:e7:78:
                    8a:ee:e5:3a:fe:6a:f9:79:6e:c4:d4:85:31:34:f4:
                    b5:d8:25:48:98:23:84:2e:9a:60:31:88:7f:24:6d:
                    53:ba:70:78:d2:c6:b5:1b:b0:91:19:44:b3:cf:25:
                    f5:f8:5d:4b:94:92:3c:94:44:6b:84:92:33:f5:d1:
                    ce:e2:42:df:1f:a0:1f:cf:20:c7:b5:4a:d3:60:4e:
                    a7:08:3a:25:a6:eb:d6:55:92:75:95:ee:78:f8:c5:
                    5e:5a:52:58:71:a2:48:ab:2a:79:04:73:63:94:d4:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5D:BC:A7:05:CE:72:B7:37:24:2C:DE:87:C6:B9:5D:F3:44:0F:C9
            X509v3 Authority Key Identifier:
                keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:da:05:cb:20:ea:d6:37:2f:ea:47:0f:c4:fa:f7:2c:ad:
         a3:eb:cb:3e:a5:88:8b:c2:0a:67:65:db:7b:bb:89:c3:27:cf:
         70:7c:54:6f:81:1a:18:9f:95:38:ec:0b:fb:5a:b6:43:2b:48:
         89:40:a6:5c:67:df:6f:83:6d:28:b4:93:b7:b0:8b:5a:cb:a4:
         21:f4:7c:8b:b8:ad:dc:f2:29:5f:45:85:00:ad:6b:ed:d8:0d:
         4b:75:6e:ad:45:cd:ba:6b:2d:09:0d:93:58:fd:76:52:87:cd:
         6b:de:1e:f2:96:9a:4f:f1:45:a2:af:f7:fb:81:ea:41:57:25:
         ac:87:cc:f5:ec:54:32:08:8f:3f:01:af:bd:c5:79:06:25:9f:
         28:4e:2c:d8:88:8a:3d:0b:ef:55:51:6c:52:5c:ab:66:c5:ba:
         a3:98:48:a0:6a:c5:3b:24:e8:3f:c5:23:02:2f:f7:56:e4:3b:
         50:55:95:f5:f8:26:84:46:fc:ca:29:c6:99:66:9e:a8:39:ca:
         f5:63:dc:bb:7e:c6:d0:ec:87:69:29:4e:1f:14:c7:6e:4f:f6:
         f9:b4:6e:b9:2c:c0:a4:b6:ac:a4:b3:b9:b3:94:f4:f5:00:1b:
         a0:3c:80:06:2d:3d:33:48:0c:27:35:c5:e6:f7:91:12:e9:f2:
         8f:63:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----