Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
File:                     iYDaJ6VQ15vmUa15rnGcz8vFo28.mft (raw, json)
Hash identifier:          fSePU0odP+3XC6XYXaVvRqypbitTrWR/VsUo8tFdp0M=
Subject key identifier:   80:6F:A5:83:C4:45:BA:FE:66:90:D0:54:83:34:30:12:9E:6D:A8:3E
Authority key identifier: 89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F
Certificate issuer:       /CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
Certificate serial:       01962F065A7D365D111B105FACDB6BB3B621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
Manifest number:          0254
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: iYDaJ6VQ15vmUa15rnGcz8vFo28.crl (hash: +HSfK9igRO6RgR8m6MYagD3jlwzONt0qlLjRO19MrcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:7d:36:5d:11:1b:10:5f:ac:db:6b:b3:b6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=806fa583c445bafe6690d054833430129e6da83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:14:b0:0f:17:d7:04:12:fc:14:70:a2:d0:
                    1a:54:0e:48:2c:b3:55:50:52:ad:f9:dc:95:f7:90:
                    fc:96:06:41:a8:af:39:cd:9e:75:ae:82:9a:9f:f2:
                    c6:96:ff:c7:7e:92:2d:1f:a8:58:bc:ff:93:d7:a7:
                    e9:b6:5c:0d:7f:8a:74:c5:bb:19:eb:98:2f:c7:64:
                    37:bf:e6:76:03:14:94:0c:35:a8:47:b5:cc:e3:ce:
                    ba:56:2c:54:3e:0d:af:29:49:3e:bf:83:25:04:e7:
                    7c:9f:e1:f3:88:68:69:4a:b7:5d:e5:a7:a1:62:8b:
                    55:bf:71:7a:dc:c6:87:30:08:41:24:8e:dc:48:d0:
                    68:a2:97:6f:4a:5a:40:fe:67:3b:f2:d6:18:b1:cf:
                    bd:10:b7:44:b3:52:da:5c:6e:0a:52:8f:20:ad:e8:
                    61:b0:3c:d5:63:4f:ec:ef:5a:7d:69:b2:84:42:3c:
                    01:cd:05:16:5a:df:66:7a:20:1d:94:10:98:6b:b8:
                    cf:03:ec:0b:7f:c8:8b:20:37:bb:c6:b0:f3:06:16:
                    1d:ab:2c:e8:f1:89:e1:f0:ae:a0:84:ae:f9:ec:71:
                    53:f2:f2:4c:0f:33:6c:81:f2:40:6e:8e:2c:d2:7d:
                    91:58:c4:b9:83:35:5d:ca:55:b9:fa:a7:ab:fd:72:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:A5:83:C4:45:BA:FE:66:90:D0:54:83:34:30:12:9E:6D:A8:3E
            X509v3 Authority Key Identifier:
                keyid:89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:66:de:5a:4c:2a:78:b5:ff:97:42:33:79:1d:76:a5:94:05:
         2a:22:a6:1d:13:cc:9c:f7:96:ab:27:ac:25:dc:88:c3:a1:50:
         c0:d0:5b:76:7d:41:ae:3b:6f:26:2e:89:6f:b3:34:7c:a9:1a:
         89:48:ec:c9:c1:3a:e6:2a:62:6f:88:ec:76:6e:4d:1a:70:81:
         3c:ad:7c:7c:1c:e2:89:16:2a:67:36:51:cb:c5:33:a7:e4:14:
         3e:78:08:86:88:04:00:19:d4:09:a2:f9:9e:ae:8f:25:c7:55:
         8f:fc:51:9b:c4:8b:f7:8b:8b:c5:0f:b7:c1:62:55:57:1e:a9:
         40:d2:42:46:32:e6:76:eb:9f:32:ef:d9:30:ef:be:57:30:d8:
         b4:25:16:e7:e8:ee:2a:14:8a:68:63:b4:79:83:6f:98:95:62:
         6e:97:3d:9e:2f:6c:02:94:cb:c1:57:05:34:38:90:32:a0:40:
         40:54:bb:dc:1d:ee:4f:af:21:d8:b9:b2:49:d1:c6:69:0d:5d:
         96:68:26:6f:15:6e:a6:23:43:2b:23:b9:15:96:85:ec:bf:f4:
         8d:e5:ff:fc:23:ca:bb:78:a2:a2:35:78:4c:52:54:fa:1d:2f:
         cb:f7:ec:a7:61:07:b6:df:50:ab:68:1a:23:47:12:f2:d5:88:
         1b:be:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----