Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File:                     ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier:          xOAwAyQU7ZJySt/JTH+hdOsWs6P49jBBFG664+GQXE8=
Subject key identifier:   DC:0E:54:E3:90:F5:F6:68:29:6C:F6:75:37:CD:24:3C:C1:4B:A4:50
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer:       /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial:       01962F3D7E6748C80124ED4ECA1DFF6BD565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number:          0AEE
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: 3k8fuuo/3YjScaAX7+cXdXJB9RdvXFUJoYrudFrO7wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:67:48:c8:01:24:ed:4e:ca:1d:ff:6b:d5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=dc0e54e390f5f668296cf67537cd243cc14ba450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:2a:fe:db:39:8d:1d:fd:98:80:fa:0b:04:
                    17:98:79:90:1f:9e:1f:31:1c:fa:5b:cb:12:9f:4d:
                    1a:e5:66:8b:d9:a8:69:8c:7c:77:36:0e:cd:ab:8b:
                    19:e6:2a:99:f7:52:dd:6c:cf:e8:08:96:74:10:45:
                    85:b9:5a:89:fb:a6:60:5c:95:6d:78:cb:bb:ad:1e:
                    82:ba:dd:24:a4:e9:f3:ab:66:06:75:77:40:50:53:
                    ad:85:70:33:5c:71:2e:fd:68:6d:ac:c0:62:a1:2a:
                    a8:25:98:8d:05:f4:d5:8e:46:cd:70:94:33:c9:11:
                    73:fc:56:fb:40:c0:ec:61:5d:4c:c2:09:83:4f:84:
                    2e:09:50:b2:60:49:19:2e:d0:c6:c6:ee:f1:da:74:
                    fa:df:61:2f:71:37:a8:9e:2f:69:66:dc:9c:ce:df:
                    a8:ce:e8:64:62:14:41:cf:d6:02:84:72:57:01:ad:
                    cf:8e:63:28:e6:7b:c1:d1:c7:2f:6b:ae:cb:21:3d:
                    dc:b0:39:1c:1d:a2:7b:8d:6c:c8:26:bb:89:2c:26:
                    f5:4d:55:17:04:99:95:28:29:0d:58:81:c6:ac:be:
                    2a:85:26:6a:96:c2:f1:a6:d8:5f:c3:4f:39:e2:bd:
                    c1:f6:7e:ab:6a:d4:21:f4:d6:71:1a:9b:35:1a:e7:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:54:E3:90:F5:F6:68:29:6C:F6:75:37:CD:24:3C:C1:4B:A4:50
            X509v3 Authority Key Identifier:
                keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:57:62:21:82:bf:33:60:ef:08:34:e0:f6:0f:50:6c:23:29:
         fc:fc:eb:c1:64:20:39:81:69:8d:e2:24:72:0a:d1:40:45:4e:
         54:9c:4b:c9:8e:a4:f6:a1:f3:c0:6e:bb:08:38:ff:be:ce:75:
         5f:9a:48:8d:49:b2:3f:36:69:43:1f:0c:e9:19:6a:17:9e:a3:
         8a:80:7a:3a:60:0c:cf:02:99:cc:31:a8:52:77:23:17:bf:de:
         be:e4:b8:4d:ce:10:ba:9a:f1:f4:13:42:58:2e:56:c3:ed:99:
         93:1c:2e:2b:3f:97:a6:ba:d2:8a:ae:df:6b:6f:18:e7:39:6e:
         bd:d5:19:09:ed:d8:0b:1c:1a:7a:ce:0b:89:47:98:87:d1:30:
         c7:b3:e7:2e:30:71:ad:d7:e8:4c:20:67:73:94:23:ce:d7:10:
         21:1e:83:12:42:b3:d5:32:ca:8a:25:35:5a:19:25:d3:e8:78:
         ca:20:8b:ed:13:17:e7:a5:b4:cf:d4:0f:c0:e5:69:72:34:60:
         34:d3:27:69:3d:24:cd:82:27:51:bd:a6:3a:2e:b9:ad:63:8b:
         01:c0:41:26:fe:51:d8:9e:42:9c:5c:b1:89:dd:5a:54:63:0c:
         af:7a:06:70:57:f9:98:b7:47:a5:81:10:ea:f6:d6:52:d7:d1:
         ba:7c:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----