Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File:                     MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier:          VZ6xzcpv/GuVgTx3TAnwEYitPLgGqfRjp9ovwAtNorM=
Subject key identifier:   D6:0E:2D:85:D9:2E:3C:08:A4:99:B2:E0:37:EE:39:E4:0C:0D:28:5B
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer:       /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial:       01962E98BD95293D98F9D42F5F785C8E6723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number:          0F08
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: kThLFL/UHA5TDZly7xGP61VTKqn0FQFUorJR39QebRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:95:29:3d:98:f9:d4:2f:5f:78:5c:8e:67:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=d60e2d85d92e3c08a499b2e037ee39e40c0d285b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:18:28:cd:72:73:4d:23:7f:95:b4:6b:fd:
                    f0:aa:d0:09:c5:d9:c9:23:a9:0d:34:6c:4a:7c:88:
                    45:57:c4:22:4e:02:c5:a2:ea:19:ed:45:97:86:fa:
                    6d:d0:9e:64:79:40:95:73:44:13:69:1e:92:04:3a:
                    80:d5:6c:d1:b7:88:61:25:26:6d:e9:61:1f:99:3b:
                    a5:de:e3:67:db:51:cb:96:6c:06:6c:83:bb:a1:94:
                    13:08:fb:4f:f2:b2:07:d8:2c:52:05:ea:7d:07:00:
                    a0:e6:47:48:2a:59:d1:c8:01:48:4a:72:ef:1d:9f:
                    2c:01:2b:25:2a:61:e8:42:4c:32:e6:83:2e:6d:12:
                    58:5a:ec:49:82:09:4b:42:8f:29:f8:0f:bd:af:83:
                    c1:ca:5c:53:c4:4e:ba:be:d7:87:d7:33:2b:20:7d:
                    eb:01:90:bc:a9:aa:36:97:6e:43:e2:5d:ff:d7:c9:
                    95:aa:31:03:73:2f:90:67:08:a7:52:1e:b9:c2:ff:
                    7e:d6:c5:7e:21:d7:e5:d1:dc:61:f9:e7:aa:33:17:
                    5c:96:87:d7:49:91:c8:b5:65:47:71:92:e7:d7:e7:
                    45:17:84:9e:d5:83:9c:f4:e4:fe:ab:8f:a2:b0:ef:
                    e2:f4:f0:00:93:ef:ad:f7:fc:bd:60:47:91:54:b3:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:2D:85:D9:2E:3C:08:A4:99:B2:E0:37:EE:39:E4:0C:0D:28:5B
            X509v3 Authority Key Identifier:
                keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:16:07:07:8c:54:da:fd:9b:d8:99:26:68:26:1b:5d:8c:
         20:75:c3:ea:bf:74:5e:89:e5:97:4f:99:a1:1e:55:87:3d:44:
         90:c8:f3:6d:75:89:40:2e:67:d1:ad:1d:5b:5c:72:1c:f2:46:
         a2:53:12:0b:79:d3:60:9b:6b:1c:01:19:97:e4:74:51:f4:63:
         c6:d6:f8:82:b7:5b:1e:e3:fd:d4:5a:2e:15:bb:e5:3a:d5:6f:
         52:26:9b:4a:fa:a0:75:95:4f:ec:95:62:d7:2f:28:0c:9e:40:
         93:ba:20:a5:a9:d1:55:37:a2:25:15:18:68:9d:95:bf:2c:49:
         27:7b:e3:2d:b9:21:cb:5b:3f:fc:9b:da:b2:ec:41:c4:5c:55:
         68:4f:17:5f:94:6c:cb:b3:67:85:c0:c2:85:7e:72:9f:ce:cd:
         73:7a:03:a7:1c:a6:b1:69:5c:b7:6d:8e:03:f7:69:41:56:89:
         f5:94:f9:1f:5e:66:c8:b3:d8:26:5c:81:b2:e9:68:16:a1:bf:
         e1:32:9d:86:64:a7:6b:d6:7d:ad:d2:17:68:ab:ac:b4:51:a6:
         01:ea:22:0b:1c:fc:8c:1b:db:a8:5b:d5:24:57:66:8a:48:df:
         2d:78:2e:3a:a8:21:31:62:62:7f:ce:c4:7d:f1:3f:c6:37:88:
         39:0a:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----