Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File:                     D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier:          jZwuBJgmQWqxRMJ2bSEKB5YuSqO/k6SdwY6evSrBEbM=
Subject key identifier:   C6:2F:38:87:70:2A:E7:CC:53:DD:DB:03:B3:E0:58:9F:A1:65:80:44
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer:       /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial:       01962ECFE22D9CF11EAD9AD282F629EDF26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number:          F0
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: VXaBjGMCJnnllHS0P/Vr+IH1FrX/0k2zT0PqeECQEiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:2d:9c:f1:1e:ad:9a:d2:82:f6:29:ed:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=c62f3887702ae7cc53dddb03b3e0589fa1658044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:58:5b:17:e6:06:e5:86:41:fb:ae:a4:38:
                    24:b2:0d:cb:18:1b:c4:ae:05:71:22:2d:86:8f:0e:
                    2e:7b:d8:04:04:4b:9a:86:65:a3:0d:41:4a:45:9c:
                    31:4e:dc:6d:7c:35:01:4f:c6:d8:f7:e0:da:b3:ab:
                    10:9b:e4:56:f3:1d:89:2c:bc:b5:a9:97:ec:a8:88:
                    8b:4c:2e:0c:d4:f6:78:06:69:e0:60:07:4e:4c:4b:
                    33:78:c2:c5:fb:4f:e2:d4:b2:78:e5:d9:25:04:43:
                    ec:23:68:c4:d9:bf:05:23:10:8e:ea:76:49:d2:c2:
                    0f:b6:aa:41:ff:f3:b0:50:2c:de:52:9f:e6:cf:13:
                    8f:47:87:31:81:0b:67:a7:d6:b7:62:dc:76:cd:77:
                    2c:3f:60:3f:e2:84:a7:26:61:f1:3a:09:66:50:51:
                    56:7c:82:d0:86:dc:ef:6a:88:8a:6c:16:48:25:76:
                    e8:b8:02:1c:17:35:48:77:f8:1a:68:9b:d7:30:bd:
                    bf:a7:ff:f4:40:a6:2f:4d:14:dd:09:bb:c4:b1:9e:
                    02:70:e0:6c:14:62:62:05:c2:d9:9f:da:03:58:50:
                    c1:14:20:d2:e6:76:91:cd:92:c4:96:ba:d2:69:15:
                    56:31:57:87:69:e2:d2:1e:c3:2d:fb:28:25:b3:e2:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:38:87:70:2A:E7:CC:53:DD:DB:03:B3:E0:58:9F:A1:65:80:44
            X509v3 Authority Key Identifier:
                keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:17:de:a3:34:66:3c:dc:46:bc:9e:a3:b7:9b:03:d1:5b:3b:
         46:4e:aa:b8:8d:fc:55:56:f7:f6:3e:2f:0d:b2:c8:e1:34:1f:
         50:4d:26:2b:9e:18:36:92:4f:a5:0d:0e:79:37:7c:25:19:21:
         39:62:2d:8e:48:c1:30:b7:b6:1e:fe:c7:a5:dd:32:95:7f:11:
         d4:5f:d5:9b:d5:1e:36:4d:a4:32:1d:51:13:3b:a8:57:a8:53:
         12:6c:bc:10:7b:88:df:9a:ba:4e:71:20:26:51:3a:63:8b:e7:
         0a:7c:86:f3:be:bf:d4:68:7c:73:ce:09:36:f4:45:56:01:ec:
         24:38:68:0b:ab:a7:35:55:7a:6e:c9:81:ea:76:f9:ab:6a:68:
         40:a4:1c:28:80:2b:d9:94:3a:53:91:10:b8:b4:21:6b:17:f7:
         14:39:a3:36:93:66:86:67:e8:a5:c1:6c:0b:88:41:72:d8:00:
         c7:3f:72:d5:34:8e:a7:bd:93:bf:ef:56:e5:38:6b:7b:ee:69:
         31:80:6b:e7:2e:a1:e6:3a:a1:a3:ca:18:f1:a3:91:9e:31:fc:
         15:a3:9e:a9:99:82:35:40:15:75:ee:71:eb:23:ac:02:9e:aa:
         02:d7:49:4e:3d:17:43:ac:f4:74:a4:17:8c:a1:1b:d4:c7:74:
         0c:d6:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----