Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          iE9MdWFbTV80Dw0oyF5oqKWMZMLTDJ8NvZn+hqG/0cA=
Subject key identifier:   85:A1:0C:AA:37:DD:74:EE:58:05:A9:98:37:14:C0:39:F4:08:CB:26
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       01962DF43FFB11590AE0210C824F8C2A5594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: fFy8JKCTC3dB1yRrTgo9YA67momJlnwsD+rdLVJ7aoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:fb:11:59:0a:e0:21:0c:82:4f:8c:2a:55:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=85a10caa37dd74ee5805a9983714c039f408cb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:e4:55:38:fc:d8:93:c3:98:a7:74:f3:89:
                    a7:c3:0c:09:14:c4:50:47:67:bf:27:89:6b:1f:c7:
                    ed:58:39:dd:b3:eb:b5:b4:ee:ad:e6:7b:e0:a2:81:
                    86:52:de:2b:ba:82:3b:78:04:fc:13:f0:78:3a:2f:
                    48:1f:90:89:7b:eb:ad:73:7c:ea:e5:cb:3a:bb:26:
                    e9:ce:14:c3:16:95:df:df:94:4f:53:1c:08:c0:5f:
                    12:50:53:c2:76:fb:ed:63:76:93:bc:c6:d2:a0:f0:
                    2d:fa:ff:70:cf:c3:71:16:2e:ff:49:0b:33:b0:af:
                    f2:42:2d:6c:4a:ef:9d:df:2c:0f:c0:50:e3:22:eb:
                    ed:4e:f0:fd:5e:48:47:5c:ef:e2:0b:92:e5:92:f3:
                    e2:60:d8:14:f2:a9:e0:c3:2a:8c:74:87:1a:7c:f5:
                    94:43:01:08:69:13:b4:f9:d3:27:ef:15:c0:ce:91:
                    8d:bc:22:60:a7:dd:14:9c:4e:51:cd:ab:61:7d:6f:
                    a6:96:a3:36:a7:d6:a5:91:59:29:ba:17:33:76:c4:
                    2d:0c:89:32:92:73:9a:e5:aa:90:85:ff:ca:4e:e9:
                    20:bb:40:a4:29:9f:0c:19:a0:3f:34:f8:90:5b:1d:
                    c5:69:65:f8:d6:3f:2a:8c:f4:2c:80:c4:76:3d:89:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A1:0C:AA:37:DD:74:EE:58:05:A9:98:37:14:C0:39:F4:08:CB:26
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:55:ee:aa:e5:e2:c0:dc:cd:ca:63:09:1e:4c:6b:f9:5d:
         3a:1f:0e:6f:f9:31:48:1f:de:86:c8:b5:db:7f:17:cd:77:c2:
         2e:03:c4:a0:9c:11:56:75:dd:c8:8f:f1:f5:8e:15:15:51:7c:
         94:10:bc:a9:e2:b8:61:55:82:e8:7d:42:26:1e:c0:e6:4b:a6:
         5b:84:44:0a:6e:a3:18:75:77:f4:d2:30:14:04:23:6b:a4:b0:
         b4:78:e9:c0:a9:d4:39:27:c1:96:5d:a7:44:4b:75:28:0f:40:
         58:5e:4f:cc:2a:d8:5e:ec:10:45:50:26:eb:7f:06:55:0a:94:
         69:c7:45:e3:17:c4:d4:cb:86:e5:80:28:00:1e:86:03:4f:b2:
         f7:f6:99:16:8a:d9:55:64:6d:97:78:5e:1e:ed:a2:de:a2:4b:
         20:6a:8c:43:dd:74:78:31:2f:02:b2:f4:e4:fc:4e:90:92:27:
         1b:d7:ad:eb:ef:63:e2:38:c0:e0:d9:a8:e4:2a:63:b7:88:fc:
         7b:6e:9c:a3:8a:c7:c2:45:65:cf:3c:64:30:b4:d4:77:40:a9:
         a2:8b:7f:16:62:7b:38:dd:3c:2e:c5:e6:c7:c5:78:4d:46:5f:
         5f:28:ed:49:a3:c9:03:ae:28:8e:24:18:75:89:f7:4f:14:ec:
         5b:db:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----