Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File:                     bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier:          vTkj7Ux2wD5/9jOzJAmY8XjM7Kwsfw6RtQo4d6a0QG8=
Subject key identifier:   C0:7C:85:B3:9B:DD:9F:F1:1A:59:B1:1A:32:20:76:02:6D:73:DC:A2
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer:       /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial:       01962F3DB1075EC1631B32F2648FA2599A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number:          136C
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: odHrF8G62CxZOgRmNxb8BcBTkPNi5MDPY63ury3OuVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:07:5e:c1:63:1b:32:f2:64:8f:a2:59:9a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=c07c85b39bdd9ff11a59b11a322076026d73dca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:a6:f7:f3:f7:3d:2e:4f:00:cf:c6:52:28:
                    a0:d8:fe:9d:ab:fb:66:53:38:3a:39:cf:16:0e:10:
                    37:2a:bd:56:48:5d:53:d9:b7:d6:f2:d2:a5:f5:70:
                    b0:f8:53:5f:c0:2a:75:36:97:26:1e:64:78:18:0d:
                    8f:75:c0:9d:75:10:3b:90:f7:4e:d1:b7:cf:45:85:
                    42:a5:9c:e9:57:2c:0f:56:09:a0:45:38:98:d8:07:
                    1f:70:09:3e:95:ef:f6:af:af:f3:15:56:8b:4a:bf:
                    48:18:7b:8d:c4:a3:7c:c8:c2:96:3e:52:ba:0e:77:
                    68:cc:2f:eb:98:e5:f5:08:af:91:5a:10:e2:16:f1:
                    8a:3f:66:f5:0f:e5:3d:c7:9d:c4:d9:27:ec:d0:52:
                    c6:ed:9f:f8:4d:92:1c:4c:36:5b:b0:eb:d0:4c:8a:
                    a6:a8:c3:20:8e:99:37:de:46:e5:55:69:dd:1a:a4:
                    16:ce:c4:40:87:07:ad:a2:70:d7:c7:38:26:ce:61:
                    21:32:7c:90:57:60:01:47:00:14:dc:8d:9a:d1:a3:
                    5e:86:27:de:ec:68:03:7d:f8:db:ae:9c:a2:d4:b3:
                    0f:95:80:d7:c7:bc:f1:4b:f9:79:b9:d0:72:7f:e1:
                    f7:57:7f:97:91:55:d7:cf:49:33:4e:fc:d8:b6:46:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:85:B3:9B:DD:9F:F1:1A:59:B1:1A:32:20:76:02:6D:73:DC:A2
            X509v3 Authority Key Identifier:
                keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:78:fb:18:b2:fd:3e:b6:58:43:2a:c5:ef:da:c4:b0:74:c5:
         9b:e3:de:bd:65:8d:48:fa:a0:eb:70:1e:ad:06:4b:7c:53:2f:
         44:05:99:91:81:f1:37:8d:67:7c:26:4e:16:f5:5c:55:67:c5:
         77:1e:c6:e4:ad:c9:2c:7e:1e:b2:5c:cb:15:42:02:84:ed:50:
         d2:5a:2c:8d:2b:be:e3:dc:d0:2e:89:38:11:50:5a:23:1a:1c:
         61:64:22:73:5b:0f:6e:81:41:2d:31:64:4f:a5:50:33:80:03:
         db:af:a1:28:ac:6f:f4:ff:72:cb:fb:1d:61:fa:ef:34:c0:9a:
         5d:d2:c2:5f:84:fb:83:1b:de:68:b1:5e:cd:64:86:fc:42:77:
         63:51:3f:af:29:6e:72:0c:96:23:69:73:23:05:2d:ce:89:f9:
         29:fd:33:60:f5:03:9b:f7:05:59:52:f6:66:ed:09:7b:0a:1a:
         0b:a5:09:c6:06:f5:22:6b:84:ab:c5:53:bc:d1:a1:bf:89:b8:
         8b:9c:ce:ba:fa:85:0e:cc:47:95:69:80:74:95:07:66:8d:e0:
         6e:2f:43:3f:f8:49:36:5e:af:7d:63:a4:d5:2f:d3:4d:1c:20:
         3f:fd:18:cd:e7:f0:a0:6a:99:9a:f2:05:da:8d:5f:84:a1:1f:
         e5:a0:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----