Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File:                     _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier:          8W4lns/9H9kgIbkwIApvbxb3vvPNfiP8QwoU2quS+kI=
Subject key identifier:   81:E8:77:20:A5:07:F6:6E:B3:3C:63:30:F3:22:4A:11:15:9C:1C:14
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer:       /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial:       01962E98F68B30B57AECEC8FCF00B8E51CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number:          1207
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: 9mCkIAuxsAB7t0u6jQEBklRS1GfqcxilpuTgtYmrBgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:8b:30:b5:7a:ec:ec:8f:cf:00:b8:e5:1c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=81e87720a507f66eb33c6330f3224a11159c1c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:3c:9e:62:65:dc:96:53:0b:ad:6a:5c:8b:
                    38:51:61:38:0d:25:4f:62:e2:4b:f6:5a:bb:f3:88:
                    b0:97:c3:27:bf:8d:27:75:8d:45:bb:4c:51:0c:9b:
                    78:22:0c:71:2d:b0:80:87:f1:ff:62:81:c4:ed:84:
                    0f:a0:44:4f:16:38:56:19:ef:77:d8:46:cb:c7:e3:
                    12:ae:62:09:43:f4:99:d3:23:f1:6f:7b:f7:91:0e:
                    da:bf:3e:9a:9e:dd:d6:c3:a8:34:88:1b:1f:ff:0e:
                    3b:37:35:cd:70:84:b0:4a:19:9c:a8:d4:1e:b8:47:
                    7e:0c:ba:26:bd:31:60:91:5a:6c:d7:2a:ac:1f:5c:
                    aa:ae:b7:8c:3d:e0:39:c5:5c:17:dc:c8:50:78:f1:
                    a6:e5:2c:17:95:99:ee:22:b3:86:0a:2f:42:d7:7e:
                    82:a7:b6:9f:01:a6:97:78:13:3d:66:39:ee:55:d5:
                    73:c8:f5:da:26:24:82:bb:d1:90:12:f1:01:cc:ac:
                    27:26:ee:36:a0:ca:bb:e6:a4:9b:da:60:d1:5c:d8:
                    38:e1:68:89:c5:93:fd:4e:99:94:5d:05:02:25:05:
                    39:dd:d9:12:8b:b3:eb:29:19:40:a4:be:d7:74:dc:
                    bc:37:4b:ff:0d:45:5e:df:c5:f9:94:04:ff:85:65:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:77:20:A5:07:F6:6E:B3:3C:63:30:F3:22:4A:11:15:9C:1C:14
            X509v3 Authority Key Identifier:
                keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:d5:5d:ff:ee:62:32:37:09:98:b1:c3:5b:7d:ab:89:60:
         c3:6d:dc:bb:e8:01:78:98:84:7f:89:76:09:02:58:b5:c0:23:
         28:ce:a7:37:25:c0:59:f4:67:21:19:10:1e:17:40:da:a8:86:
         54:00:14:5a:de:b3:68:6b:51:73:54:36:7c:cb:e1:6f:a8:86:
         5a:e4:ba:ab:92:8f:3c:99:96:c2:1d:35:f4:39:ab:7d:70:86:
         5e:77:9c:18:c9:63:e5:0b:b2:12:d9:90:59:d0:0c:59:45:c5:
         e1:ca:f0:f0:09:b3:99:02:f3:cc:bf:59:d0:c8:f5:fa:bf:c3:
         80:55:44:68:55:4c:ed:14:4a:02:2c:a5:4f:c8:4d:e1:7f:40:
         b5:b1:5b:49:bb:c7:95:43:24:8e:7f:e0:c0:1f:6d:12:c7:18:
         ca:c3:a9:5e:72:7c:0a:f6:e0:37:0d:0c:8c:2a:82:5a:5a:a9:
         aa:9e:84:2f:52:e7:66:fc:4f:a0:3e:35:72:bc:55:19:97:e2:
         e9:5f:46:c0:aa:d4:4c:06:26:0c:e1:c5:46:8c:1c:e6:15:74:
         b0:c3:c3:70:a0:ac:2b:ee:d6:50:4f:7a:34:c2:26:28:6c:1f:
         d3:2c:ad:ea:80:f4:63:9a:28:1c:58:a0:46:61:b5:6b:4f:4d:
         a4:fe:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----