Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          kUl293j80sTurDYDCWns77WJzS4J6twrQ495dU1RxYA=
Subject key identifier:   87:E2:28:76:6F:C7:7B:7C:C7:D5:F5:6B:8F:33:64:96:9C:3F:88:7B
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       01962E9873AF99145A1ECB13E10AF0C7607A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          0FA6
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: xz/rmgO5ittrPW7IVrxMjluFaIA8AnWYD02PNgsdKFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:af:99:14:5a:1e:cb:13:e1:0a:f0:c7:60:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=87e228766fc77b7cc7d5f56b8f3364969c3f887b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:44:a9:a5:82:c7:79:74:f3:75:e2:1c:31:
                    1b:94:f7:86:62:1b:85:bd:69:57:32:41:5a:39:68:
                    b5:59:3f:d4:8a:19:34:e9:d7:ee:83:7d:47:5b:2f:
                    bb:b1:63:66:59:92:50:f7:a3:3b:cf:e3:ee:cf:16:
                    12:a0:58:2b:5f:b2:28:0b:9f:44:f8:50:4b:18:6e:
                    18:6d:1b:13:f7:62:b2:88:44:99:73:6b:03:81:63:
                    91:88:e1:4c:33:3d:6d:cb:08:4e:9d:94:12:39:f9:
                    3b:93:9a:9a:19:b0:f6:e6:16:35:34:e2:ef:36:fe:
                    9c:3b:5a:5f:15:45:3c:80:82:b2:9b:ea:3b:af:78:
                    cc:0f:84:57:24:4d:1c:88:08:a0:89:f5:e3:a3:dd:
                    6e:b7:48:05:2c:39:d7:c9:db:62:f4:0c:e5:6d:dc:
                    21:20:19:ac:91:02:67:3e:56:b0:e8:62:47:e9:bd:
                    a2:7a:77:c4:65:75:d7:e3:02:52:ab:26:83:18:12:
                    e9:79:87:ff:af:e3:97:8a:00:56:19:b6:cf:14:6a:
                    be:2c:1a:34:a5:d5:11:d1:39:24:82:ba:f0:83:03:
                    17:c4:4b:9b:4f:45:9a:de:a0:ba:ca:a9:1c:c7:69:
                    8e:b6:25:5d:bc:73:48:15:a7:a6:b9:33:bc:60:de:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:28:76:6F:C7:7B:7C:C7:D5:F5:6B:8F:33:64:96:9C:3F:88:7B
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:48:98:77:7e:c1:1f:49:6d:13:94:72:c1:4c:e5:59:f2:cf:
         dc:c7:42:bb:67:bb:3c:e1:0f:d1:91:9d:28:7f:3a:65:2a:99:
         86:46:5f:4b:88:b1:60:fb:c6:da:bb:be:af:fa:21:a5:51:1d:
         bc:31:f7:c2:cd:1b:a5:96:a1:af:a6:4e:06:44:b3:4b:f3:20:
         dd:fa:00:f3:d2:92:84:78:f0:ad:d9:58:aa:f9:99:e6:5e:c0:
         33:52:f3:cf:68:92:25:64:bc:a2:fd:b1:55:82:49:2d:81:50:
         5f:d9:c9:95:ca:95:de:fd:54:9d:35:83:59:cf:26:8d:3c:4e:
         bf:fc:52:af:11:53:80:13:bd:a2:a9:b2:d5:48:71:b7:61:2b:
         cb:6f:e5:76:fb:f4:20:6a:4f:cb:46:db:21:1d:0c:48:2b:49:
         08:d6:88:63:9e:47:ca:8b:9d:e1:2c:ab:75:9c:f5:53:3d:d5:
         08:22:96:d4:23:a6:27:0f:18:dc:31:2d:02:63:f8:77:41:95:
         0f:ff:1d:6d:f7:0a:61:ed:26:58:83:cb:86:ed:c7:44:e2:b4:
         10:2a:41:52:b5:8a:6f:77:6f:a2:9a:23:c8:e1:f1:b1:74:3b:
         76:b1:5d:e4:da:5a:9b:d8:1d:b7:bc:ec:de:10:30:9f:01:01:
         19:35:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----