Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
File:                     iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json)
Hash identifier:          CyBClS/qKc60rCAJEyadsAhDV8sQ0+mapaY32LR9rOo=
Subject key identifier:   7F:C2:10:35:B2:B6:9D:74:66:AC:38:E3:F9:14:A3:71:24:98:3B:5A
Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
Certificate issuer:       /CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Certificate serial:       01962E9954D24E18A891CA22DD4F1DD3A2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
Manifest number:          07DC
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: Elst6KtMEl4cfsGeOPn+UBoIXs0E3YYWnFFmIreFzTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:d2:4e:18:a8:91:ca:22:dd:4f:1d:d3:a2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=7fc21035b2b69d7466ac38e3f914a37124983b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:31:23:c6:67:40:26:0f:c6:1e:ce:83:4e:
                    1f:b9:0c:9a:90:2e:d4:9c:4c:de:04:91:22:6f:cd:
                    b3:93:cd:2e:26:9f:3b:77:9a:26:b1:f9:6f:2d:82:
                    72:33:d9:8d:8c:24:37:fb:4e:be:21:6a:d2:a4:62:
                    a6:f1:30:6c:9d:9e:7f:5b:73:20:1f:aa:64:a4:a0:
                    7d:50:d4:ac:00:cd:ba:35:f4:28:83:e9:05:a2:47:
                    f6:5b:00:7f:da:96:ac:5c:32:e5:00:0d:a2:f0:6a:
                    5a:35:ce:48:73:00:9c:c7:59:38:27:dc:15:d3:83:
                    f4:d9:82:02:98:25:64:33:f6:20:05:4e:db:3b:35:
                    69:12:78:7d:40:96:79:b3:02:70:87:03:88:78:b7:
                    2e:57:4c:18:af:6a:b7:01:29:85:45:6e:5d:d4:ba:
                    4c:59:0b:e3:b4:c0:02:60:5f:26:c9:fe:f6:05:b2:
                    a5:8f:bf:ae:78:cd:e5:ef:c5:88:4e:29:9e:c9:53:
                    fc:3f:8b:86:76:a0:4f:21:e8:e6:66:29:04:7d:8c:
                    7e:fc:ef:7d:cd:51:20:36:3c:2d:80:94:94:7b:92:
                    f2:b1:11:75:d1:22:b1:a6:d4:c9:d2:cb:fb:21:ba:
                    4a:61:bf:53:6a:5f:2b:78:0d:d9:f6:2c:10:cd:fb:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:10:35:B2:B6:9D:74:66:AC:38:E3:F9:14:A3:71:24:98:3B:5A
            X509v3 Authority Key Identifier:
                keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:32:9b:df:e1:1b:9e:81:de:78:d2:77:70:3f:45:40:97:
         44:47:81:ba:82:a1:40:40:4a:0d:ca:c4:a9:18:5e:e0:87:ba:
         46:82:f1:f0:98:d2:6f:4a:2d:9d:a7:9b:e8:13:5f:43:a6:8a:
         e4:22:5a:d4:5d:54:52:96:13:97:21:f1:f4:fd:d7:0a:6d:63:
         d8:19:50:0e:db:22:44:bb:66:b3:12:6c:64:a5:0b:65:c3:d1:
         29:33:a5:b0:1f:3c:3a:57:a8:82:32:12:5a:b5:7a:dd:7e:76:
         24:69:2d:44:66:09:63:7b:4a:76:fa:9f:d1:f7:36:ed:7e:70:
         7f:c6:94:6d:24:95:8d:84:65:c0:10:f4:98:cb:b8:5d:a6:71:
         c8:69:88:00:0e:ea:bc:a3:bc:00:59:80:61:3f:5b:f9:f3:e0:
         f6:dc:cc:d5:7a:dd:a3:ea:2b:d1:84:8a:4e:f9:ad:16:1a:5a:
         10:0b:09:db:0e:fd:55:b7:7e:65:ce:de:99:ca:ce:86:5c:81:
         29:d3:99:14:4d:cb:e5:c5:cd:ff:9d:03:3e:78:b0:f3:b4:0f:
         88:98:03:d3:4d:72:97:5c:96:0a:ab:10:94:f0:a6:e4:00:e4:
         50:77:d4:b9:bd:1d:4a:f7:e5:d9:b9:46:79:13:85:6b:21:1d:
         bc:b3:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----