Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File:                     8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier:          Ui4xzDbN6DGJQwMpRIXee9YwMDLweYP22KF6k7xur1k=
Subject key identifier:   19:E1:35:64:D5:26:1D:3B:33:5B:46:AF:BD:02:64:F8:63:87:5D:E2
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer:       /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial:       01962E61AD749455C217211CE34B130AF4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number:          0421
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: wPah/KsOk/3TTgxxZCtjXPk9V0Y8CVqON/h8f1S+Qww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:74:94:55:c2:17:21:1c:e3:4b:13:0a:f4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=19e13564d5261d3b335b46afbd0264f863875de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:5e:79:d2:52:17:d1:35:ae:38:a6:e5:47:
                    6d:3f:7a:48:0b:44:d4:03:1e:34:88:ea:da:c0:1e:
                    e4:4b:e8:c1:1d:1f:b9:e2:88:a2:34:7c:92:8e:87:
                    ac:74:2d:f7:fb:69:b8:3d:da:75:d1:0b:17:81:1b:
                    f4:3d:56:83:04:e3:93:52:84:1b:b9:8c:01:0a:b1:
                    d2:02:f9:b8:d9:3c:57:d5:4c:00:80:82:a7:55:93:
                    f0:89:71:95:1c:5b:0c:e0:36:fa:94:4f:90:56:f0:
                    03:eb:99:3a:56:35:9a:8d:56:f1:48:d0:ad:8a:93:
                    b0:d8:4d:7f:31:8b:af:bd:4c:86:e7:4c:d0:86:ce:
                    ec:6a:b6:7d:cf:0a:61:9c:66:2f:ab:64:ac:f5:dc:
                    04:63:0a:04:21:f1:9e:00:37:58:c2:e3:e8:91:27:
                    b9:a1:4a:d1:47:d6:b0:20:46:ec:6a:f7:50:9e:b9:
                    a0:09:75:f8:0f:cd:cf:34:6b:06:65:28:b2:6f:70:
                    0e:01:82:4d:1a:c1:a3:09:86:87:43:f0:ea:c3:61:
                    ae:4a:a7:92:ae:1e:70:83:6d:4f:0d:b9:8d:99:97:
                    a6:a1:ab:ce:00:4b:5d:d3:e1:9a:0d:a8:99:ce:b7:
                    fc:a1:c6:f5:a3:e9:75:62:80:18:19:ce:40:d0:6a:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:35:64:D5:26:1D:3B:33:5B:46:AF:BD:02:64:F8:63:87:5D:E2
            X509v3 Authority Key Identifier:
                keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:19:37:c5:fc:db:5b:13:94:a3:1c:18:44:9e:1b:84:6f:1d:
         9e:df:66:25:ad:33:13:39:e6:d2:1e:56:60:b4:4a:3f:44:8d:
         c3:3d:c0:8f:77:37:35:57:f8:6a:9c:1c:d9:72:52:ed:60:f2:
         ad:51:5a:ca:a7:32:03:4d:57:45:b6:d2:67:62:2c:1b:7b:bb:
         4c:34:70:6a:64:b0:ca:8d:b2:78:88:d2:88:04:9a:34:53:ef:
         43:5e:56:92:4b:d3:5c:bf:43:c0:fe:87:6e:1e:9e:37:0a:76:
         27:bd:b5:61:a6:02:d8:74:c3:c0:ee:96:23:13:0d:6c:e5:6a:
         f4:fd:3e:8e:6e:cf:f4:b9:e3:15:60:f3:12:03:2f:c8:2d:1a:
         02:f2:d3:26:20:39:f1:d5:2a:ce:09:e2:1d:20:ea:22:0a:a0:
         0d:cb:db:51:2b:6e:63:47:08:cd:28:78:d0:34:24:0e:65:3e:
         89:ec:f4:21:01:b7:e8:e0:3d:a8:37:be:fa:2b:5d:04:0b:03:
         2f:40:60:67:93:05:4e:f3:e6:8c:92:5c:7e:45:76:f0:cc:28:
         be:6b:85:48:06:50:18:72:89:3a:91:27:9f:f1:a0:c9:07:de:
         87:f0:66:71:fb:a5:3f:11:9a:76:3a:1f:e2:e7:b3:69:80:4e:
         54:f1:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----