Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File:                     8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier:          mfPaSiCnGey/q694GPW8QmJZr6DCpzzcao9H5+dX6nE=
Subject key identifier:   42:29:4C:FC:81:20:5A:26:E4:48:7D:5C:64:9A:4D:D9:6E:F7:E7:3D
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer:       /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial:       01962F065DA49CF646CCD9EA913F01FD791F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number:          02D1
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: XizXVR6OkoL5N/OUYkhzEnUOZf8OpiAwTBPHLh+hNZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:a4:9c:f6:46:cc:d9:ea:91:3f:01:fd:79:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=42294cfc81205a26e4487d5c649a4dd96ef7e73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:38:d3:78:9f:95:b9:6d:00:1a:91:70:d6:
                    18:8d:08:9a:5a:41:cb:d4:a5:0f:24:1c:ba:5b:2c:
                    a1:57:ec:b5:d3:35:be:3e:6b:3d:5c:67:b0:69:13:
                    0d:64:12:7a:b3:9e:4e:77:75:9c:ae:cd:85:94:7f:
                    32:36:49:f1:f6:dd:81:98:b0:95:05:ac:81:99:41:
                    db:ce:ae:03:0c:81:27:f5:af:3b:af:2a:58:4a:6c:
                    38:22:7f:d5:2e:8b:f1:04:01:80:88:b2:d5:f7:9f:
                    57:ca:f9:56:20:b9:47:51:1a:ca:9e:a2:44:c8:61:
                    9e:d4:0b:19:08:35:02:a5:88:ff:de:50:4a:0f:f8:
                    43:3c:8d:b4:6f:da:6d:6c:f1:37:60:4f:b7:b3:ca:
                    31:4c:c2:4a:e5:15:6c:f3:38:f7:ad:98:6d:5e:b7:
                    17:cc:36:bc:b1:5f:2b:85:6c:c3:c6:40:5a:b9:14:
                    6e:79:64:94:ff:2e:d7:b2:c5:69:50:dc:10:80:5e:
                    2a:64:ae:7d:03:24:d3:4b:0a:b6:ec:de:19:9f:57:
                    32:52:ec:e7:67:64:14:aa:e8:86:8f:fb:84:1f:05:
                    44:bc:87:05:7e:1a:da:c5:dd:4b:5e:ae:8a:e5:62:
                    fd:36:f8:12:d5:92:e9:51:40:7c:c7:18:01:6a:13:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:29:4C:FC:81:20:5A:26:E4:48:7D:5C:64:9A:4D:D9:6E:F7:E7:3D
            X509v3 Authority Key Identifier:
                keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:43:21:e3:7e:2b:2b:22:47:e2:01:ed:ae:22:ee:ab:16:6b:
         89:38:bc:b3:f9:c9:6f:e4:5d:52:99:ab:d9:82:1a:b0:34:d4:
         4d:18:f7:fd:36:1f:8e:a6:58:98:56:2e:52:2a:9e:b4:9c:00:
         bf:63:08:ce:bf:1f:7b:17:34:8d:0a:df:9e:50:38:be:3c:51:
         5e:fa:d2:cd:8d:c9:2d:a2:ba:eb:f2:11:92:75:07:df:8c:5d:
         57:f8:5a:90:39:cf:1c:e2:f6:e7:85:05:a5:77:4c:d0:d6:80:
         1d:03:9c:0f:7e:bb:54:2a:7e:65:85:85:e4:50:46:c4:a4:d7:
         53:47:e8:e8:24:e5:85:5b:2c:6c:ca:e9:4d:4a:ba:01:68:b8:
         b1:2e:75:e9:43:bf:54:db:44:86:8f:c3:df:0f:a5:27:c0:5b:
         e4:b1:78:14:c6:ea:6e:c1:03:86:fc:4f:0e:cf:a1:28:a7:f7:
         76:89:b3:05:96:22:a4:a1:71:1a:79:b9:90:0d:89:9d:c3:12:
         f5:14:60:c3:2b:d1:37:bd:ab:41:18:35:f9:28:cf:c1:ea:76:
         a6:2d:da:ff:ed:f9:f7:49:b5:96:64:ab:69:56:1e:f4:c5:e9:
         5f:f2:f4:9d:93:a7:06:57:ca:05:bf:d1:ca:19:46:e1:20:f1:
         0d:1f:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----